Security Consultant - GRC

Job Description:

• Support the implementation, maintenance, and continuous improvement of information security compliance programs, specifically focusing on ISO 27001, SOC 1 and SOC 2.
• Develop, review, and update security policies, procedures, and guidelines to align with relevant compliance frameworks and regulatory requirements.
• Conduct risk assessments and gap analyses against ISO 27001 and NIST CSF controls to identify areas for improvement and ensure audit readiness.
• Prepare and compile documentation, evidence, and responses for customer RFIs and audit requests efficiently and accurately.
• Contribute in identification, assessment, and mitigation of information security risks in accordance with established risk management frameworks.
• Maintain comprehensive documentation of security controls, compliance activities, and remediation plans.
• Prepare regular reports on compliance status, key metrics, and areas of concern for management and stakeholders.
• Perform comprehensive third-party risk assessments to evaluate vendor compliance with information security policies.
• Ensure effective communication and documentation of third-party risk assessments.