CyberSecurity Specialist - GRC

Our client, a IT Services and Consulting company, is looking for a CyberSecurity Specialist - GRC for their Phoenix, AZ/Hybrid location.

Responsibilities:

• Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects.
• Review application architecture, integrations, APIs, and data flows identify security risks.
• Assess sensitive data handling, including Personally Identifiable Information (PII), financial, payroll, and supplier information.
• Evaluate identity and access management (IAM), role-based access controls (RBAC), segregation of duties (SoD), and privileged access.
• Collaborate with cybersecurity, enterprise architecture, infrastructure, and application teams during project implementation.
• Review encryption standards for data at rest and in transit.
• Assess third-party vendors and cloud solutions for security and compliance requirements.
• Track remediation activities and verify implementation of security recommendations.
• Prepare assessment reports, risk documentation, and executive summaries.
• Support internal and external security audits.

Requirements:

• What are the top 3 skills required for this role:
• Application & Data Security Assessments
• IAM / RBAC / SoD
• Cloud Security & Risk Management
• Required Qualifications
• Bachelor's degree in Computer Science, Information Security, Information Systems, or a related field.
• 3-8+ years of experience in Information Security, Cybersecurity, Governance, Risk, Compliance (GRC), or ERP Security.
• Experience with security assessments of SaaS platforms, preferred: Finance, Supply Chain, and Oracle HCM.
• Strong understanding of:
• Identity and Access Management (IAM)
• Data Classification
• Encryption Technologies
• Authentication and Authorization
• Secure SDLC
• Cloud Security Principles
• Preferred Skills
• Experience conducting security architecture or application security reviews.
• Understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Hands-on experience with security automation using Java or Python.
• Knowledge of ERP security models and Segregation of Duties (SoD).
• Familiarity with vulnerability management and risk assessment methodologies.
• Strong analytical, documentation, and communication skills.
• Ability to work effectively with cross-functional business and technical teams.
• Years of Experience: 10.00 Years of Experience

Why Should You Apply?

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities