CyberSecurity Specialist - GRC

This hybrid CyberSecurity Specialist GRC position is centered on designing and implementing governance risk and compliance frameworks, along with identity and access management controls, for enterprise platforms. The specialist will work with cross-functional teams to strengthen access management processes, lower security risk, improve regulatory alignment, and help ensure secure digital operations during day shifts, with no travel requirements.

Responsibilities

• Design and implement end-to-end governance risk and compliance frameworks that map enterprise security controls to regulatory requirements and internal policies, reducing operational and technology risk across business units.
• Create and maintain GRC implementation roadmaps that coordinate process design, tool configuration, and stakeholder onboarding to support consistent risk assessment workflows and ongoing compliance monitoring.
• Configure and enhance GRC platforms to enable automated control testing, issue management, and risk reporting, ensuring that decision makers receive timely, dependable insights into cyber risk posture.
• Coordinate GRC integration with current security tools and enterprise applications by defining data flows, mapping control libraries, and validating interfaces to increase transparency and reduce manual effort in compliance activities.
• Evaluate identity and access management requirements across platforms and applications to develop secure role-based access models, access approval workflows, and periodic review processes that prevent excessive privileges.
• Establish and improve access management policies and technical controls for user provisioning, deprovisioning, and entitlement changes so access is provided on a need basis and remains auditable and traceable.
• Partner with platform owners, application teams, and security operations to address access management issues, investigate unauthorized access events, and implement corrective actions that strengthen the overall security posture.
• Produce clear documentation for GRC and identity access processes, including operational procedures, playbooks, and standards, enabling technology and business teams to apply consistent practices during onboarding, daily operations, and audits.
• Conduct ongoing control effectiveness reviews and risk assessments focused on access management and GRC capabilities to uncover gaps, prioritize remediation efforts, and track closure to improve resilience and compliance.
• Assist with audit and regulatory questions by producing evidence from GRC platforms that describes implemented controls and demonstrates how identity and access management processes satisfy external expectations and internal benchmarks.
• Help stakeholders through GRC rollout and identity access change initiatives by explaining risk impacts, demonstrating platform capabilities, and promoting adoption of secure processes aligned to company objectives.
• Evaluate the security and compliance impact of check processing and related financial operations by analyzing transaction flows and tailoring controls to protect sensitive data while supporting business performance.
• Support continuous improvement in cybersecurity practices by tracking emerging risks, proposing enhancements to GRC workflows, and optimizing access management measures to deliver safer digital services for customers, employees, and society.

Qualifications

• 6 to 9 years of experience in cybersecurity, with a primary focus on governance risk and compliance implementation and integration across complex enterprise environments.
• Proven, hands-on expertise in identity and access management on enterprise platforms, including role model design, approval workflow configuration, and execution of periodic access reviews.
• Advanced knowledge of access management practices such as user lifecycle management, entitlement governance, and privilege restriction using industry-standard tools and processes.
• Capability to convert regulatory and policy requirements into practical GRC configurations and reports that deliver actionable insights for risk owners and auditors.
• Experience in financial or payment-related environments, such as check processing, where secure handling of transaction data and operational controls are essential to business integrity.
• Clear communication with both technology and business stakeholders to explain GRC and access concepts, present risk findings, and support collaborative resolution of security and compliance issues in a hybrid work setting.
• Structured problem-solving and analytical skills to assess control weaknesses, recommend practical remediation steps, and help implement sustainable cybersecurity improvements.