Senior Cyber GRC Specialist

About the role

The Senior Cyber GRC Specialist is an individual contributor responsible for assessing and managing cybersecurity risks arising from third-party relationships and deviations from approved security policies and standards. The role serves as a technical risk advisor across Security, Technology, Procurement, Legal, Privacy, and business teams.

What you'll do

• Perform risk-based cybersecurity assessments of vendors, suppliers, SaaS providers, cloud service providers, and other third parties during onboarding, reassessment
• Review security questionnaires, independent assurance reports, certifications, penetration test summaries, architecture information, vulnerability management practices
• Engage vendor and internal technical teams to clarify security architecture, control design, identified gaps, remediation commitments, and residual risk
• Identify and document third-party cyber risks, determine risk severity, recommend risk treatment, and track agreed remediation actions through closure
• Apply assessment depth based on service criticality, data sensitivity, connectivity, hosting model, regulatory exposure, and potential business impact

What you need

• 5–10 yrs of experience
• Vulnerability assessment
• Incident response
• Network security
• Cloud security
• ISO 27001
• IAM
• Any graduate

Good to have

• CISSP
• CISM
• ServiceNow