The Senior Engineer will work with the GRC – Third Party Risk Assessment, Cybersecurity team and is a Tier / L2 support role for Vendor Risk Management (Cyber). The individual will be responsible for managing portions of the operational work for VRM (Cyber) and conducting cyber diligence on all firm vendors.
Requirements
- 3-5 years of experience in GRC Consulting
- Knowledge of cybersecurity and risk management proficiency
- Understanding of industry regulations and standards such as NIST, ISO, GDPR, SOC
- Familiarity with Jira, Confluence, Kanban Board, ServiceNow
- Familiarity with ISO 27001, ISO 27002, ISAE 3402, SOC 1 and 2, SOX, CMMC, HITRUST, HIPAA, CRBF, Solvency, etc
- Good communication and audit report writing skills
- Experience in assessing GRC tools (e.g. ProcessUnity, Hyperproof etc.)
Benefits
- Opportunity to work with a leading technology services and consulting company
- Chance to develop skills in GRC Consulting and cybersecurity
- Competitive salary and benefits package
- Opportunity to work with a diverse and inclusive team