GRC Specialist

Specialized Technical Services

Develop cybersecurity policies and related documentation.

Establish and maintain appropriate communication channels with stakeholders.

Review existing proposed policies and related documentation with stakeholders.

Cooperate with relevant regulatory agencies and other legal entities in any compliance reviews or investigations.

Develop Cybersecurity Awareness program

Promote awareness of cyber policy and strategy as appropriate among the organization's management and staff.

Interpret and apply applicable laws, statutes and regulatory documents to ensure they are reflected in the cybersecurity policies.

Create and publish the organization's cybersecurity policy

Monitor how effectively cybersecurity policies, principles and practices are implemented in the delivery of planning and management services.

Review, conduct, or participate in audits of cyber programs and projects.

Develop risk mitigation strategies to effectively manage risk in accordance with organizational risk appetite

Develop specific cybersecurity countermeasures and risk mitigation strategies.

Ensure that decisions relating to cybersecurity are based on sound risk management principles

Perform risk analysis whenever an application or system undergoes a major change

Provide input to the risk management framework and related documentation.

Ensure cybersecurity risks are identified and managed appropriately through the organization's risk governance process.

Conduct an initial risk assessment of stakeholder assets and update the risk assessment on an ongoing basis.

Use continuous monitoring tools to assess risk on an ongoing basis.

Analyze organization's cybersecurity defense policies and configurations to evaluate compliance with regulations and organizational directives.

Evaluate cybersecurity aspects of contracts to ensure compliance with financial, contractual, legal and regulatory requirements.

Recognize patterns of non-compliance with cybersecurity policies and related documentation to identify ways to improve the documentation.

Periodically review cybersecurity strategy, policies and related documents to maintain compliance with applicable legislation and regulation.

Work with stakeholders to resolve cybersecurity incidents and vulnerability compliance issues.

Develop specifications to ensure that risk, compliance and assurance efforts conform with cybersecurity requirements.

Monitor and evaluate a system's compliance with cybersecurity, resilience and dependability requirements.

Provide support to compliance activities as necessary.

Maintain knowledge of applicable legislation, regulation and accreditation standards and regularly review these to ensure continued organizational compliance