Information Security Engineer: II (Intermediate)

Corusconslting is looking for a Information Security Engineer: II (Intermediate)-

Job description:

• The Cybersecurity GRC AI & Process Automation Engineer will be responsible for designing and implementing automation solutions across Cybersecurity Governance, Risk, and Compliance (GRC) processes, with a particular focus on improving the efficiency, traceability, and governance of Risk and Control Self-Assessment (RCSA) activities.
• The role will leverage Artificial Intelligence (AI), Generative AI, intelligent workflows, and process automation technologies to reduce manual effort, streamline evidence collection and validation, improve tracking of risk and control activities, and provide greater visibility into the status and effectiveness of cybersecurity controls.
• The resource will work closely with Cybersecurity, Risk Management, Compliance, Technology, and control owners to identify manual and fragmented processes and transform them into standardized, automated, and auditable workflows.

Key Responsibilities

• Drive automation initiatives across Cybersecurity GRC, with an initial focus on RCSA and control management processes.
• Design and implement automated workflows for the collection, organization, validation, and tracking of control evidence across multiple teams and systems.
• Reduce manual effort associated with RCSA activities, including evidence requests, follow-ups, status tracking, control assessments, documentation, and reporting.
• Establish centralized tracking and workflow capabilities to provide clear visibility into evidence status, outstanding actions, ownership, due dates, exceptions, and remediation activities.
• Leverage AI and Generative AI to support evidence analysis, identify gaps or inconsistencies, summarize control information, and assist control owners and risk teams throughout the assessment lifecycle.
• Improve traceability and audit readiness by maintaining structured records of evidence, approvals, assessments, decisions, and supporting documentation.
• Develop dashboards and management reporting to provide real-time visibility into RCSA progress, control status, evidence completeness, overdue activities, and key risk indicators.
• Support regulatory, audit, and risk management activities through automated evidence collection, workflow tracking, and reporting.
• Identify additional opportunities to automate Cybersecurity GRC processes and establish reusable capabilities that can be scaled across other risk and control activities.

Requirements:

• 1. Experience in Cybersecurity Governance, Risk, and Compliance
• 2. Experience designing and implementing automated workflows to streamline risk, compliance, and control processes.
• English proficency (Spanish is a plus)