GRC Consultant

Role: GRC ConsultantLocation: Miami, FLDuration: 6-12 Months

• Governance

• Provide IT security governance support to develop, review, approve, and publish new IT security policies, standards, and procedures.
• Use internal collaboration platform for the develop and review phases.

• Risk

• Provide IT security risk management support to operationalize the IT risk register.
• Provide support to facilitate the risks, issues, and policy exceptions management: record, review, approve, and report.
• Provide support to operationalize the IT risk register through the GRC platform.

• Compliance

• Provide IT security compliance support to gather evidence for audit initiatives - internal and external -, and for external compliance assessments.
• Provide support to facilitate user access reviews on a quarterly and semi-annual basis.
• Provide support to automate the IT security compliance activities through the GRC platform.

• Requirements

• Bachelor's Degree
• Professional certifications desirable: Certified Information Systems Auditor (CISA); Certified in the Governance of Enterprise IT (CGEIT)
• Experience:

• 5 years in IT security governance, risk, and compliance.
• Support of 3rd party risk assessments and IT security assessments.
• Assessment of compliance with security standards and frameworks such as SOx, ISO2700x, and PCI DSS.
• Understanding of IT systems security concepts, trends, and practices.
• Strong project management skills.