Job Overview: We are looking for an experienced GRC Lead with 8+ years of expertise in IT Risk Management, Audit, and Compliance. The ideal candidate should have a strong understanding of ISO 27001, NIST 800-53, vendor security assessments, and cloud security controls. Key Responsibilities:
Lead IT Risk Management, Audit, and Compliance efforts.
Implement ISO 27K controls annexures and strategies.
Conduct IT security assessments, including audits, vulnerability scanning, and policy reviews.
Perform third-party security risk assessments based on ISO 27001 and NIST 800-53.
Review supplier technical documentation and vendor security controls.
Identify and measure risks associated with vendor security.
Document and track risks and recommendations for vendor security gaps.
Coordinate and perform vendor security reviews.
Ensure compliance with cloud-based technologies (IaaS, SaaS) and data protection requirements.
Assess business and security risks across multiple global geographies and suppliers.
Perform security audits against published standards.
Maintain strong customer service and attention to detail.
Work independently, setting goals and priorities.
Must-Have Skills:
7+ years of experience in Cyber Security, GRC, and Data Security.
Strong expertise in ISO 27001 and NIST 800-53 for third-party security risk assessments.
Experience in identifying and measuring vendor security risks.
Deep understanding of ISO 27K controls annexures and implementation strategies.
Strong background in IT Risk Management, Audit, and Compliance.
Excellent communication skills to work with technical and non-technical teams.
Preferred Qualifications:
ISO 27001 LA/LI certification.
Bachelor's degree in Computer Science, Information Security, or a related field.
Minimum two years of recent experience in information systems audit or security reviews.
Strong problem-solving and analytical skills.
Numbers & Facts
Location
Cupertino, CA
Salary
$67 Per Hour
Skills
Analysis Skillsunmatched
Auditingunmatched
Business Analysisunmatched
Cloud Computingunmatched
Communication Skillsunmatched
Computer Scienceunmatched
Computer Securityunmatched
Customer Support/Serviceunmatched
Detail Orientedunmatched
Establish Prioritiesunmatched
ISO (International Organization for Standardization)unmatched
Information Technology/Systems Auditunmatched
Information/Data Security (InfoSec)unmatched
Infrastructure as a Service (IaaS)unmatched
Internet Securityunmatched
Maintain Complianceunmatched
Problem Solving Skillsunmatched
Risk Analysisunmatched
Risk Managementunmatched
Security Analysisunmatched
Security Auditingunmatched
Set Goalsunmatched
Software as a Service (SaaS)unmatched
Technical Leadershipunmatched
Technical Writingunmatched
U.S. National Institute of Standards and Technology (NIST)unmatched
Vendor/Supplier Selectionunmatched
Vulnerability Scannersunmatched
🎯
Be found by employers
5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.
Level up your application
Professional resume templates
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.