Senior Information Security Governance, Risk and Compliance Engineer

Our client is looking to hire a Senior Information Security Governance, Risk and Compliance Engineer to join their cybersecurity team.

This role requires someone with 7+ years of experience supporting security and GRC-related efforts. The ideal candidate will have experience developing and maintaining security policies, supporting third-party risk management efforts, has previous hands-on technical security experience, and has experience with cybersecurity and compliance frameworks and privacy controls such as NIST 800-53, CIS Controls, SOC 2, and GDPR. This is a hybrid role in Reston, VA.*

For a quicker response, please apply directly to this role here: https://cybersn.com/cards/2674/card.html

Responsibilities:70% ComplianceProvide technical leadership and oversight to compliance activities and initiatives • Participate in data governance and/or data classificationCreate or improve compliance roadmaps or strategiesEvaluate compliance controlsOversee adherence to internal policies or standards and experience with the following: Separation of Responsibilities; Data Retention; Security policies or standard operating procedures; Vendor or new technology evaluations; System privileges; System hardening and audit recordings; Vulnerability Assessments and Remediations; Account terminationsOversee adherence to compliance and regulatory standards • Understanding various compliance standardsInterpret standards, requirements and their application to the enterprise environmentPerform (or oversee) compliance audits and reviewsOversee or participate in external compliance audits including Vendor/3rd party services and technologiesRecommend, implement, and maintain technical and procedural controls • Create and/or maintain company compliance policies and proceduresCreate or improve compliance roadmaps or strategiesProviding maturity metrics and reportsCreate compliance reports and maturity metrics for executive management, legal, and/or regulatory agencies. Provide leadership, guidance and subject matter expertise to compliance and audit teams30% RiskProvide technical leadership and oversight to cyber risk activities and initiativesEnsure that the risk management program meet risk acceptance objectivesProvide risk management guidance and expertise to projects, peers or external inquiresOversee risk analysis and risk management of internal processes, practices and standardsPerform risk analysis and risk management for compliance based initiativesDefine risk metrics and maturity reports

Why CyberSN?CyberSN is the Cybersecurity Jobs and Career Marketplace. From online matching to full-service recruitment, CyberSN provides professionals and hiring teams with the expertise, information, tools, connections, and services they need to maximize career success, job satisfaction, team performance, diversity, and retention.