Cybersecurity GRC (Governance, Risk & Compliance) Specialist

Brattle Group is seeking a Cybersecurity GRC (Governance, Risk & Compliance) Specialist to implement and manage the firm's framework. This role focuses on aligning policies and controls with regulations, conducting risk assessments, supporting compliance audits, and promoting accountability. The specialist will collaborate with various teams to ensure compliance with industry standards and mitigate risk.

Requirements

• Bachelor’s degree in Business, Law, Information Systems, or a related field
• 3–5 years of experience in GRC, internal audit, compliance, or risk management
• Familiarity with GRC platforms (e.g., ServiceNow GRC, Archer, LogicGate)
• Working knowledge of risk assessment methodologies and control frameworks
• Understanding of privacy laws and data protection requirements
• One or more certifications (e.g., CRISC, CISA, CIPP, CISSP, CISM)
• Experience conducting control testing and compliance audits
• Ability to interpret legal and regulatory texts into business requirements

Benefits

• Competitive benefits package
• Base salary
• Bonus program