IT GRC Consultant & IT Security Engineer I A M IT Technologies LLC

Governance Support the development, implementation, and maintenance of the information security governance framework. Ensure all departments understand and adhere to security policies and control requirements. Maintain a central repository of policies, standards, and supporting documentation. Risk Management Conduct risk assessments to identify and evaluate operational, technical, and compliance risks. Collaborate with technical and business teams to define risk mitigation plans and monitor implementation. Perform third-party/vendor risk assessments and follow up on remediation activities. Compliance Assist in maintaining compliance with standards such as ISO 27001, NIST Coordinate internal and external audits, including evidence collection and control verification. Track remediation efforts from audit findings and compliance gaps. Support management reporting by providing compliance status updates and metrics. Awareness and Reporting Prepare regular reports on governance, risk, and compliance activities for management and stakeholders. Assist in conducting security awareness and training initiatives across departments. Contribute to developing a compliance dashboard or other visualization tools to track GRC performance.