Security Governance and Risk Management Specialist

Role: - Security Governance and Risk Management Specialist

Location: - Dublin, CA (4 days onsite per week)

Mode of Work: - Onsite (100%)

Role Overview

Lead and support the development, implementation, and management of the Security Governance, Risk, and Compliance (GRC) program. Oversee program metrics, regulatory monitoring, risk assessments, third-party risk management, and incident response collaboration.

Key Responsibilities

• Support and manage the Security GRC program and track key metrics.
• Monitor regulatory changes and assess their impact on security controls.
• Develop and maintain security standards, policies, and control frameworks (NIST, ISO, PCI).
• Conduct IT and third-party risk assessments; maintain risk and controls register.
• Manage third-party risk by reviewing vendor certifications and aligning controls.
• Lead or assist in security audits, compliance activities, and incident escalation.
• Participate in security awareness and training programs.

Required Skills and Experience

• Experience in security governance, program management, and metrics tracking.
• Strong knowledge of security standards and frameworks (NIST, ISO, PCI).
• Skilled in IT and third-party risk assessments and risk register management.
• Expertise in third-party risk management and vendor assurance.
• Ability to lead audits, manage compliance, and coordinate incident response.
• Strong communication and collaboration skills.