Overview
On Site
Full Time
Accepts corp to corp applications
Contract - W2
Contract - Independent
Contract - 6 Month(s)
Skills
GRC
SOX
ISO 27001
Job Details
Role: Governance, Risk and Compliance (GRC) Consultant
Location: - King of Prussia PA Day 1 ONSITE
Job Description:
Experience 10-12 Years
Key Responsibilities & Job Description
- Handle technical and business impacting aspects of Information Security Risk areas comprising of Audit / compliance, IT, Operational and Legal Risks.
- Participate in and Execute Risk Assessment and Management Program
- Should be able to resolve Risk and Security solutions / issues and work with Security team to bring them to closure.
- Work with the team to deliver on Assessments & Audits.
- Would need to work with the operations team and the SDMs to ensure right oversight is created ad maintained with respect of the Audit, Risk and Compliance
- Work with teams demonstrating the core team values and Adhere to the Policies and Practices of Client as well as Customer.
- Should be able to interface with Auditors and be the Audit Coordinator for Regulatory, Standards, or Framework Audits, Control Testing and assessments.
- Support the GRC Lead with respect to the IT Audits, IT Risks & IT Compliance for the services being provided by Customer.
- SKILLS Professional Services background including exposure to Standards, SSAE 18, ISO 27001 and Privacy Laws (preferable candidates from Big4 organizations)
- Knowledge of implementing, managing and auditing security & compliance regulation (SOX, GDPR, NIS-2, DPA, HIPAA), Standards and frameworks (ITIL, NIST CSF 2.0 or COBIT)
- Should have proven capabilities of executing at least 3-4 advisory/consulting engagements
- Excellent technical capabilities around information security, business continuity and technology risk assessments
- Good compliance and understanding of industry regulations
- GRC Project & Program Management
- Excellent written and verbal communications skills
PLATFORM /TOOL EXPERTISE
- Experience on the below mentioned tools is not mandated but candidates having exposure to any of these will be preferred:
- ServiceNow IRM
- MetricStream
QUALIFICATIONS
- B.E/B.Tech with MBA preferred.
Candidates with following Certifications will be preferred:
- CISA/CGEIT/CISM/CISSP
- ISO 27001 Implementer, Lead Auditor
- ITIL V4.0
- Six Sigma
- GRC Platform Specific Certifications
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.