Role OverviewThis role is central to evolving our cybersecurity program from reactive support to structured, institutionalized risk governance. You will drive clarity and consistency in how we manage risk, controls, policies, and audit readiness, ensuring alignment with both regulatory requirements and real-world operational needs.
What You Will Do
Develop, implement, and maintain cybersecurity policies, standards, and procedures, own and manage risk assessment processes, support and drive compliance initiatives, establish and maintain a control framework, and manage and track risk registers.
Why It Might Be a Fit
The ideal candidate brings a strong understanding of GRC principles, paired with the ability to translate complex requirements into practical, enforceable processes that integrate seamlessly into day-to-day operations.
Requirements
- 3-6 years of experience in GRC, cybersecurity compliance, risk management, or related roles
- Strong understanding of common frameworks and standards such as SOC 2, ISO 27001, NIST CSF or similar
- Experience developing and managing policies, controls, and risk assessments
- Familiarity with audit processes and evidence management
- Ability to translate technical and regulatory requirements into practical processes
- Strong organizational, analytical, and communication skills
]]>