Experienced Third Party Risk Management (TPRM) Professional – Governance, Risk & Compliance Cybersecurity Specialist (Remote)
---
Join arenaflex as a Governance, Risk & Compliance (GRC) Cybersecurity Specialist
Are you ready to take your career to the next level in one of the most dynamic and critical fields in technology today? arenaflex is seeking an experienced Governance, Risk & Compliance (GRC) Professional to join our Cybersecurity team and help shape the future of enterprise security from anywhere in the world. This is a fully remote opportunity that offers the flexibility of part-time or full-time work while earning a competitive annual salary of $80,000.
At arenaflex, we believe that exceptional talent deserves exceptional opportunities. As a GRC Cybersecurity Specialist, you will play a pivotal role in protecting our organization from evolving cyber threats while ensuring compliance with industry-leading standards and regulations. This isn't just a job—it's a chance to make a meaningful impact, grow your expertise, and be part of a team that values innovation, integrity, and excellence.
About the Cybersecurity Team at arenaflex
Our Cybersecurity team at arenaflex consists of passionate and skilled professionals who are dedicated to formulating and implementing strategies that protect the organization from cyber threats while supporting our business objectives. We don't just respond to risks—we anticipate them. Our team works tirelessly to ensure that every layer of our security infrastructure aligns with industry best practices, regulatory requirements, and our commitment to excellence.
As a member of our team, you will contribute to cutting-edge initiatives that combine technology with forward-thinking security approaches. We embrace new innovations and are constantly exploring emerging trends in cybersecurity to stay ahead of sophisticated threat actors. Your work will directly impact our ability to deliver safe, reliable, and secure solutions to our clients worldwide.
Position Overview
We are looking for an experienced GRC professional with a strong background in Third Party Risk Management (TPRM), internal controls, and cybersecurity compliance. In this role, you will be responsible for managing our third-party and internal risk assessment programs, ensuring robust execution of risk-related activities, and maintaining compliance with various security frameworks and standards.
You will serve as a key liaison between business stakeholders and third parties, conducting due diligence assessments, analyzing security controls, and developing remediation plans for identified risks. This position reports directly to the Manager of Governance, Threat and Compliance within our Cyber and Data Safety division.
Key Responsibilities
Third Party Risk Management (TPRM)
Lead and support the implementation of arenaflex's Third Party/Internal Risk Management software and processes
Conduct cyber risk-related due diligence assessments for third-party vendors and internal business units
Validate incoming third-party and internal risk assessment requests, collaborating with business stakeholders to confirm request details and engagement scope
Organize and facilitate kick-off meetings with business stakeholders and relevant third parties for conducting thorough risk assessments
Coordinate the distribution of due diligence questionnaires to internal stakeholders and third parties, reviewing submissions for completeness
Analyze questionnaire responses and identify risks arising from the design and operational effectiveness of third party's internal security controls
Document responses, associated findings, and remediation plans in arenaflex's risk management systems
Draft and review comprehensive assessment reports, ensuring business stakeholders provide timely feedback and final approvals
Serve as a primary liaison to address queries related to risk control techniques and assessments for business units and third parties
Perform continuous monitoring of third parties through arenaflex systems, tracking current and new findings through to closure
Identify opportunities for improvement within arenaflex's systems and processes
Collaborate closely with Risk Leads and Supervisors to schedule and execute various activities supporting the risk management program
Governance, Threat and Compliance
Lead and support the development of cybersecurity risk and compliance-related strategies to ensure appropriate treatment of cybersecurity risks aligned with arenaflex's risk appetite
Maintain and document compliance with information security-related guidelines and processes through systematic planning, testing, remediating, tracking, and reporting on control reviews and risk assessments
Lead the development and delivery of compliance and risk education programs, fostering a culture of security awareness and compliance throughout the organization
Stay current with regulatory changes, new guidelines, technological advancements, and internal policy modifications to identify emerging risk areas
Lead initiatives to maintain and guide arenaflex's ISO 27001 certification, ensuring ongoing compliance with international information security standards
Required Qualifications & Experience
Education: Bachelor's or Master's degree from an accredited university in Information Security, Computer Science, Business Administration, or a related field. Equivalent professional experience will also be considered.
Experience: Minimum of 4 years of experience in Third Party Risk Management, Information Security, and Audit & Compliance Tracking, with at least 2-3 years specifically in TPRM or Internal Audit roles
Preferred Background: Experience working with large enterprises and/or Big Four accounting firms is highly desirable
Certifications (Preferred): One or more of the following: CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), ISO27001 Lead Implementer/Auditor, or CISSP (Certified Information Systems Security Professional)
Technical Skills: Familiarity with AI/ML technologies in security contexts is a plus
Essential Skills & Competencies
Stakeholder Management: Outstanding ability to manage relationships with internal and external stakeholders at all levels
Working understanding of information security best practices and requirements, including ISO 27001, SOC 2, SSAE 16/18, and other relevant standards
Experience in the management of risk, controls, and compliance programs
Knowledge of risk assessment methodologies—both qualitative and quantitative approaches
Strong analytical and problem-solving abilities with attention to detail
Excellent presentation and delivery skills
Exceptional communication skills, both verbal and written
Ability to navigate fast-paced environments and remain flexible with working hours
Quick adaptation to changing conditions and ability to drive quality outcomes
Strong interpersonal skills with the ability to collaborate effectively across teams
Why Join arenaflex?
At arenaflex, we understand that our greatest asset is our people. That's why we are committed to creating an environment where you can thrive both professionally and personally. Here are just a few reasons why you should consider joining our team:
Career Growth & Development
We invest heavily in the growth of our employees. As part of our team, you will have access to continuous learning opportunities, including training programs, certifications, and professional development resources. Whether you're looking to deepen your expertise in GRC, specialize in a particular framework, or explore leadership roles, arenaflex supports your career journey every step of the way.
Competitive Compensation & Benefits
We offer a competitive annual salary of $80,000, along with a comprehensive benefits package that includes health insurance, retirement plans, paid time off, and various wellness programs. Our remote work flexibility allows you to maintain a healthy work-life balance while contributing to our mission of excellence in cybersecurity.
Innovative Work Environment
Join a team that values innovation and forward thinking. At arenaflex, you'll work on challenging projects that push the boundaries of what's possible in cybersecurity. We encourage creative problem-solving and welcome new ideas that enhance our security posture.
Collaborative Culture
We believe that the best results come from collaboration. Our team culture emphasizes teamwork, open communication, and mutual respect. You'll work alongside talented professionals who are passionate about cybersecurity and committed to protecting the organization.
Remote Work Flexibility
Enjoy the freedom to work from anywhere. Our remote-first approach means you can design your workspace to suit your preferences while staying connected with your team through modern collaboration tools and technologies.
How to Apply
If you're ready to take the next step in your career and join a team that values excellence, innovation, and integrity, we encourage you to apply today. Simply click the link below to submit your application.
At arenaflex, we are committed to fostering an inclusive workplace where diverse perspectives are celebrated. We welcome candidates from all backgrounds and experiences to apply.
We look forward to potentially welcoming you to the arenaflex family!
Join arenaflex as a Governance, Risk & Compliance (GRC) Cybersecurity Specialist
Are you ready to take your career to the next level in one of the most dynamic and critical fields in technology today? arenaflex is seeking an experienced Governance, Risk & Compliance (GRC) Professional to join our Cybersecurity team and help shape the future of enterprise security from anywhere in the world. This is a fully remote opportunity that offers the flexibility of part-time or full-time work while earning a competitive annual salary of $80,000.
At arenaflex, we believe that exceptional talent deserves exceptional opportunities. As a GRC Cybersecurity Specialist, you will play a pivotal role in protecting our organization from evolving cyber threats while ensuring compliance with industry-leading standards and regulations. This isn't just a job—it's a chance to make a meaningful impact, grow your expertise, and be part of a team that values innovation, integrity, and excellence.
About the Cybersecurity Team at arenaflex
Our Cybersecurity team at arenaflex consists of passionate and skilled professionals who are dedicated to formulating and implementing strategies that protect the organization from cyber threats while supporting our business objectives. We don't just respond to risks—we anticipate them. Our team works tirelessly to ensure that every layer of our security infrastructure aligns with industry best practices, regulatory requirements, and our commitment to excellence.
As a member of our team, you will contribute to cutting-edge initiatives that combine technology with forward-thinking security approaches. We embrace new innovations and are constantly exploring emerging trends in cybersecurity to stay ahead of sophisticated threat actors. Your work will directly impact our ability to deliver safe, reliable, and secure solutions to our clients worldwide.
Position Overview
We are looking for an experienced GRC professional with a strong background in Third Party Risk Management (TPRM), internal controls, and cybersecurity compliance. In this role, you will be responsible for managing our third-party and internal risk assessment programs, ensuring robust execution of risk-related activities, and maintaining compliance with various security frameworks and standards.
You will serve as a key liaison between business stakeholders and third parties, conducting due diligence assessments, analyzing security controls, and developing remediation plans for identified risks. This position reports directly to the Manager of Governance, Threat and Compliance within our Cyber and Data Safety division.
Key Responsibilities
Third Party Risk Management (TPRM)
Lead and support the implementation of arenaflex's Third Party/Internal Risk Management software and processes
Conduct cyber risk-related due diligence assessments for third-party vendors and internal business units
Validate incoming third-party and internal risk assessment requests, collaborating with business stakeholders to confirm request details and engagement scope
Organize and facilitate kick-off meetings with business stakeholders and relevant third parties for conducting thorough risk assessments
Coordinate the distribution of due diligence questionnaires to internal stakeholders and third parties, reviewing submissions for completeness
Analyze questionnaire responses and identify risks arising from the design and operational effectiveness of third party's internal security controls
Document responses, associated findings, and remediation plans in arenaflex's risk management systems
Draft and review comprehensive assessment reports, ensuring business stakeholders provide timely feedback and final approvals
Serve as a primary liaison to address queries related to risk control techniques and assessments for business units and third parties
Perform continuous monitoring of third parties through arenaflex systems, tracking current and new findings through to closure
Identify opportunities for improvement within arenaflex's systems and processes
Collaborate closely with Risk Leads and Supervisors to schedule and execute various activities supporting the risk management program
Governance, Threat and Compliance
Lead and support the development of cybersecurity risk and compliance-related strategies to ensure appropriate treatment of cybersecurity risks aligned with arenaflex's risk appetite
Maintain and document compliance with information security-related guidelines and processes through systematic planning, testing, remediating, tracking, and reporting on control reviews and risk assessments
Lead the development and delivery of compliance and risk education programs, fostering a culture of security awareness and compliance throughout the organization
Stay current with regulatory changes, new guidelines, technological advancements, and internal policy modifications to identify emerging risk areas
Lead initiatives to maintain and guide arenaflex's ISO 27001 certification, ensuring ongoing compliance with international information security standards
Required Qualifications & Experience
Education: Bachelor's or Master's degree from an accredited university in Information Security, Computer Science, Business Administration, or a related field. Equivalent professional experience will also be considered.
Experience: Minimum of 4 years of experience in Third Party Risk Management, Information Security, and Audit & Compliance Tracking, with at least 2-3 years specifically in TPRM or Internal Audit roles
Preferred Background: Experience working with large enterprises and/or Big Four accounting firms is highly desirable
Certifications (Preferred): One or more of the following: CISA (Certified Information Systems Auditor), CRISC (Certified in Risk and Information Systems Control), ISO27001 Lead Implementer/Auditor, or CISSP (Certified Information Systems Security Professional)
Technical Skills: Familiarity with AI/ML technologies in security contexts is a plus
Essential Skills & Competencies
Stakeholder Management: Outstanding ability to manage relationships with internal and external stakeholders at all levels
Working understanding of information security best practices and requirements, including ISO 27001, SOC 2, SSAE 16/18, and other relevant standards
Experience in the management of risk, controls, and compliance programs
Knowledge of risk assessment methodologies—both qualitative and quantitative approaches
Strong analytical and problem-solving abilities with attention to detail
Excellent presentation and delivery skills
Exceptional communication skills, both verbal and written
Ability to navigate fast-paced environments and remain flexible with working hours
Quick adaptation to changing conditions and ability to drive quality outcomes
Strong interpersonal skills with the ability to collaborate effectively across teams
Why Join arenaflex?
At arenaflex, we understand that our greatest asset is our people. That's why we are committed to creating an environment where you can thrive both professionally and personally. Here are just a few reasons why you should consider joining our team:
Career Growth & Development
We invest heavily in the growth of our employees. As part of our team, you will have access to continuous learning opportunities, including training programs, certifications, and professional development resources. Whether you're looking to deepen your expertise in GRC, specialize in a particular framework, or explore leadership roles, arenaflex supports your career journey every step of the way.
Competitive Compensation & Benefits
We offer a competitive annual salary of $80,000, along with a comprehensive benefits package that includes health insurance, retirement plans, paid time off, and various wellness programs. Our remote work flexibility allows you to maintain a healthy work-life balance while contributing to our mission of excellence in cybersecurity.
Innovative Work Environment
Join a team that values innovation and forward thinking. At arenaflex, you'll work on challenging projects that push the boundaries of what's possible in cybersecurity. We encourage creative problem-solving and welcome new ideas that enhance our security posture.
Collaborative Culture
We believe that the best results come from collaboration. Our team culture emphasizes teamwork, open communication, and mutual respect. You'll work alongside talented professionals who are passionate about cybersecurity and committed to protecting the organization.
Remote Work Flexibility
Enjoy the freedom to work from anywhere. Our remote-first approach means you can design your workspace to suit your preferences while staying connected with your team through modern collaboration tools and technologies.
How to Apply
If you're ready to take the next step in your career and join a team that values excellence, innovation, and integrity, we encourage you to apply today. Simply click the link below to submit your application.
At arenaflex, we are committed to fostering an inclusive workplace where diverse perspectives are celebrated. We welcome candidates from all backgrounds and experiences to apply.
We look forward to potentially welcoming you to the arenaflex family!