Senior Security Governance, Risk & Compliance Specialist
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Security GRC Specialist strengthening Clario’s information security governance, risk, and compliance programs. Coordinating audits, assessments, third-party risk, controls, and security frameworks.
Responsibilities:
- Support and mature the organization’s Security GRC program
- Ensure IT, Product, and Information Security controls align with policies, standards, regulations, and best practices
- Coordinate and support external client audits, certifications, and assessments, including SOC 1, SOC 2, ISO 27001/2700x, client audits, and other assessments or accreditations
- Evaluate compliance status, identify control gaps, develop remediation plans, track progress, and drive issues through resolution
- Support the risk management framework, including inherent and residual risk assessments, risk tolerance evaluation, risk discussions, and internal and third-party risk assessments
- Assess, monitor, and manage information security risks associated with third parties, vendors, and external partners
- Support audit responses, client questionnaires, RFPs, findings, and assurance requests
- Develop, maintain, and govern Information Security policies, standards, procedures, and documentation
- Identify and recommend improvements to IT and Information Security compliance processes
- Apply ISO/IEC 27001, NIST, COBIT, and ITIL frameworks
- Develop compliance and risk reports, metrics, and management insights
- Support security education and awareness initiatives
- Collaborate with technical and non-technical teams and influence stakeholders
- Contribute to GRC tools, platforms, processes, and operational procedures
- Prioritize multiple initiatives and deliverables while maintaining quality and attention to detail
- Perform other related duties and projects as assigned
Requirements:
- Bachelor’s degree in Information Systems, Information Technology, Cybersecurity, or a related field; an Associate’s degree may be considered based on relevant experience and certifications
- 5+ years of experience in Information Technology, Information Security, Governance, Risk, and/or Compliance
- Strong experience building, maintaining, or maturing Security Governance, Risk, and Compliance programs
- Solid understanding of information security risk management and compliance methodologies
- Experience facilitating and leading risk discussions using qualitative and quantitative information
- Knowledge of ISO/IEC 27001, NIST Cybersecurity Framework, NIST 800-53, COBIT, and ITIL
- Experience supporting or coordinating security audits, assessments, certifications, and client assurance activities
- Experience with third-party/vendor security risk management
- Understanding of solution lifecycle management and related information security and compliance requirements
- Experience developing and implementing SOPs, policies, and processes
- Ability to influence and collaborate with stakeholders at different levels without formal authority
- Ability to establish and leverage internal and external cross-functional relationships
- Strong business acumen and ability to translate business needs into practical security and compliance solutions
- Excellent written and verbal communication skills for technical and non-technical audiences
- Experience working with globally distributed teams and stakeholders
- Ability to adapt to evolving security risks, regulations, technologies, and business requirements
- Relevant security certifications preferred, such as CISSP, CRISC, CISM, CISA, or FAIR
Similar Jobs
Director, Regulatory Affairs – Americas
Leading Americas regulatory strategy for HOYA Vision Care, a global vision-care and optical technology company. Driving medical-device submissions, compliance, and regulatory operations across regional markets.
Associate Director, Carrier Compliance
Associate Director leading Medicare Advantage carrier compliance, sales oversight, and remediation for Humana’s healthcare business. Managing compliance professionals and carrier relationships nationwide.
PCI Compliance Specialist, Spanish
PCI compliance specialist supporting customers through VikingCloud’s cybersecurity and compliance platform. Resolving inquiries across phone, chat, email, and ticketing channels.
Compliance Officer
Compliance Officer building AML/KYC operations and EU benchmark licensing readiness for Pyth Network’s institutional data solutions. Managing financial controls, audits, policies, and counterparty risk.
Fraud Compliance Manager
Fraud Compliance Manager overseeing fraud regulations, controls and assurance at digital bank Monzo. Delivering data-led reviews, challenge and remediation across financial crime compliance.
Advisory, Risk & Regulatory, Enterprise Technology Solutions – SAP
SAP risk and regulatory consultant delivering control testing, security, and assurance services. Supporting GRC, ITGC, SOX readiness, and SAP implementation reviews.
Lead Compliance Specialist
Lead compliance specialist developing AML programs, audits, and regulatory reporting for Bybit, a global cryptocurrency exchange. Serving Peru-based compliance operations remotely.
Compliance Officer
Compliance Officer enforcing product compliance, KYC procedures, and ethical service use for Bright Data. Detecting fraud and guiding customers and partners in China or Singapore.
Product Compliance Manager
Product Compliance Manager scaling cloud compliance and assurance across Cisco’s SaaS, on-premises, and hybrid products. Driving automation, regulatory readiness, and executive insights.
Director, Regulatory CMC Strategy
Director leading global Regulatory CMC strategy for Lilly’s small molecule medicines. Driving late-stage submissions, CDMO oversight, and regulatory readiness.
Clinical Regulatory Affairs Specialist II
Clinical Regulatory Affairs Specialist managing regulatory compliance for SCRI’s community-based oncology trials. Maintaining FDA, GCP, IRB, and HIPAA documentation remotely across U.S. research networks.
Data Protection Manager
Data Protection Manager assuring compliant data processing for Atos’s financial-services outsourcing operations. Advising teams and clients on GDPR, breaches, controls, and privacy governance.
Compliance Associate
FIU Compliance Associate investigating financial crime and writing SARs/STRs for Kraken’s global crypto platform. Analyzing transactions, managing compliance volumes, and supporting ad hoc investigations.
Local Contact Person – Pharmacovigilance, Regulatory Affairs
Local pharmacovigilance and regulatory affairs specialist supporting pharmaceutical compliance and patient safety. Managing ADR reporting, regulatory submissions, local requirements, and MAH relationships.
Senior Compliance Officer
Senior Compliance Officer owning global compliance for BHFT, a proprietary algorithmic trading firm. Advising trading teams and governing algorithmic trading across asset classes and jurisdictions.
Regulatory and Start Up Specialist
Regulatory and Start Up Specialist enabling clinical trial approvals and site activation for Precision for Medicine. Managing Spanish submissions, contracts, budgets, and essential documents.
Senior Technical Compliance Analyst
Senior Technical Compliance Analyst strengthening DraftKings’ regulated gaming technology compliance programs. Leading audits, control validation, remediation, and compliance automation across technical teams.
Local Contact Person – Pharmacovigilance and Regulatory Affairs
Local pharmacovigilance and regulatory affairs specialist supporting PrimeVigilance’s pharmaceutical clients. Managing ADR reporting, regulatory submissions, compliance, audits, and local safety requirements.
Regulatory Labeling Manager
Regulatory Labeling Manager supporting Syneos Health’s life sciences clients with health-authority negotiations, safety-data interpretation, and eCTD labeling submissions.
Compliance Manager
Compliance Manager leading UK privacy oversight and DPO responsibilities at Affirm, a buy-now-pay-later company. Driving regulatory governance, monitoring, risk assessments, and second-line control challenge.