GRC Specialist

India
Permanent
Full-time

2 months ago
Apply easily

OPTEL. Responsible. Agile. Innovative.OPTEL is a global company that develops transformative software, middleware and hardware solutions to secure and ensure supply chain compliance in major industry sectors such as pharmaceuticals and food, with the goal of reducing the effects of climate change and enabling sustainable living. If you are driven by the desire to contribute to a better world while working in a dynamic and collaborative environment, then you've come to the right place!GRC SpecialistSUMMARYWe're looking for a highly motivated and experienced GRC Specialist to join our Information Security team, reporting directly to the Information Security Manager. This is a new and critical role that will play a pivotal part in strengthening our governance, risk, and compliance posture. You'll be responsible for developing and maintaining robust GRC frameworks, ensuring our adherence to evolving regulatory requirements, industry standards, and internal policies. If you're passionate about cybersecurity, have a strong understanding of GRC principles, and are looking to make a significant impact in a dynamic organization, we encourage you to apply!RESPONSIBILITIES

Develop, implement, and maintain comprehensive GRC frameworks, policies, standards, and procedures in alignment with industry best practices (e.g., ISO 27001, NIST, COBIT, PCI DSS, GDPR, PIPEDA, etc.).
Conduct regular risk assessments to identify, evaluate, and prioritize information security risks. Develop and monitor risk mitigation strategies and controls.
Perform vendor risk assessments, evaluating the security posture of third-party service providers and ensuring their compliance with our security standards and contractual obligations.
Lead and support internal and external audits, ensuring timely and accurate responses to auditor requests and findings.
Monitor changes in regulatory landscapes and industry standards, assessing their impact on the organization and recommending necessary adjustments to policies and controls.
Collaborate with various departments (IT, Legal, Operations, HR) to embed GRC principles into business processes and foster a culture of compliance.
Manage and track compliance activities, including the remediation of identified gaps and vulnerabilities.
Prepare and present GRC reports and metrics to the Information Security Manager and other stakeholders, providing insights into the organization's risk and compliance status.
Stay up-to-date with emerging threats, vulnerabilities, and cybersecurity trends.

SKILLS AND QUALIFICATIONS REQUIRED

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.
3-5 years of experience in a dedicated GRC, information security, or IT audit role.
Solid understanding of cybersecurity frameworks and standards such as ISO 27001, NIST CSF, COBIT, ITIL.
Familiarity with privacy regulations relevant to Canada (e.g., PIPEDA) and global regulations (e.g., GDPR) if applicable to the business.
Proven experience in conducting risk assessments and developing risk mitigation strategies.
Experience performing vendor risk assessments.
Strong analytical, problem-solving, and decision-making skills.
Excellent written and verbal communication skills, with the ability to articulate complex technical concepts to non-technical audiences.
Ability to work independently and collaboratively in a fast-paced environment.
Proficiency in both English and French is highly desirable.
Preferred Qualifications:

Relevant industry certifications such as CISA, CISM, CRISC, CISSP.
Knowledge of cloud security principles and compliance requirements (e.g., AWS, Azure, GCP).

EQUAL OPPORTUNITY EMPLOYEROPTEL is an equal opportunity employer. We believe that diversity is essential for fostering innovation and creativity. We welcome and encourage applications from individuals of all backgrounds, cultures, gender identities, sexual orientations, abilities, ages, and beliefs. We are committed to providing a fair and inclusive recruitment process, where each candidate is evaluated solely on their qualifications, skills, and potential. At OPTEL, every employee's unique perspective contributes to our collective success, and we celebrate the richness that diversity brings to our team.Powered by JazzHR

Optel Group