THE TEAM YOU WILL BE JOININGEstablished enterprise organization continuing to expand and mature its Information Security functionGrowing security team creating greater specialization across Security Engineering, Security Operations, and Governance, Risk & ComplianceOpportunity to join at an important stage in the evolution of the organization's GRC programCollaborative role partnering across Information Security, IT, Human Resources, system owners, and business leadershipEnvironment where strong documentation, practical risk management, and cross-functional partnership are highly valuedWHAT THEY OFFER YOUDirect-hire opportunity within a growing Information Security organizationAbility to take meaningful ownership across governance, risk, compliance, policy, and third-party risk initiativesOpportunity to help mature and standardize security policies, controls, procedures, and audit processesExposure to recognized security and control frameworks including NIST, CIS Controls, SOC 2, and SOXHighly collaborative role with visibility across technology and business functionsOpportunity to become a key individual contributor within the organization's evolving GRC functionWHAT YOU WILL DOMaintain and improve information security policies, standards, procedures, control documentation, and supporting governance materialsHelp align the organization's security program with frameworks including the NIST Cybersecurity Framework and CIS ControlsManage and maintain the organization's risk register and risk acceptance processesDocument identified risks, compensating controls, owners, remediation plans, exceptions, and ongoing review activityCoordinate third-party and vendor security assessments, questionnaires, supporting documentation, and evidenceReview contractual, regulatory, customer, and audit requirements to identify required controls and documentationSupport SOC 2, SOX, and other internal or external audit activitiesCoordinate evidence collection, control walkthroughs, issue tracking, and remediation follow-upDevelop repeatable audit procedures, workpapers, processes, and supporting documentationPrepare risk and compliance metrics and updates for leadership and other stakeholdersWork cross-functionally to identify control gaps, document findings, assign remediation ownership, and drive items through completionSupport identity and access control reviews when necessary, while maintaining a broader focus on governance, compliance, policies, procedures, and risk managementBACKGROUND PROFILE3+ years of experience within Governance, Risk & Compliance, IT Audit, Risk Management, Information Security Compliance, or a related disciplineWorking knowledge of a recognized security or control framework such as NIST Cybersecurity Framework or CIS ControlsExperience supporting internal or external audits and collecting and organizing supporting evidenceStrong understanding of risk assessments, control design, control testing, remediation tracking, and policy documentationExperience with third-party or vendor risk management is highly valuableExposure to SOC 2, SOX, or similar compliance environments preferredAbility to interpret technical security information and communicate findings to both technical and business stakeholdersExperience with GRC, ticketing, workflow, or audit-management technologies such as ServiceNow GRC, Archer, Jira, or similar platformsFamiliarity with Active Directory and Microsoft Entra ID is beneficial, particularly around access reviews and audit evidenceStrong documentation, organization, analytical, and follow-through skillsExperience in a regulated or critical-infrastructure environment is beneficial but not requiredCertifications such as CISA, CRISC, Security+, or ISO 27001 are valuable but not requiredLOCATIONFort Mill, SCOnsiteReference: 70592
...A first business role should teach you something useful. This one is designed to teach you how to communicate with clients, manage... ...process, and improve through measurable feedback. As an Entry-Level Business Associate, you will work with individuals seeking information...
...for benefit eligibility purposes can be found here . \n \n What You Will Do \n \n \n Follows and ensure team follows Food Division Standards and Best Practices \n During shift, provides leadership and directs associates in providing food products and...
...that blends natural beauty with modern convenienceall right here! At Confluent Health and our family of affiliated brands, physical therapists practice in an environment built for high quality care, professional growth, and sustainable careers. We support clinicians...
Silver Cross HospitalSilver Cross Hospital is an extraordinary place to work. We're known for our culture of excellence and delivery of unrivaled experiences for our patients, their families, the communities we serveand for each other. Come join us! It's the way you want...
...parts. Recognized on the ENR 400, 500, and 600 lists for engineering and construction excellence, Kiely is a leading design-build,... ...and advanceserving a purpose far greater than any individual project. Kiely team members are an elite group of behind-the-scenes professionals...