CyberSecurity Specialist - GRC

Job Title: Information Security – Control Testing / GRC Analyst

Job Summary

We are seeking a skilled professional with experience in Governance, Risk & Compliance (GRC), Information Security Governance, IT Risk, Internal Audit, or IT Controls. The ideal candidate will bring strong, hands-on expertise in control testing and quality control (QC) for security and IT controls, supported by a solid understanding of information security principles and risk management concepts.

The successful candidate will be able to rigorously assess control design and operating effectiveness to confirm that associated risks are properly addressed and mitigated.

Mandatory Skills

• IT Control Testing
• Information Security
• Governance, Risk & Compliance (GRC)
• IT Risk Management
• Information Security Governance
• Internal Audit
• IT Controls
• Control Design Assessment
• Control Effectiveness Testing
• Quality Control (QC)
• Risk Assessment
• Microsoft Excel
• JIRA
• Technical Documentation

Key Responsibilities

1. Conduct control testing and quality reviews for information security and IT controls.
2. Review and evaluate control design to confirm that identified risks are adequately mitigated.
3. Test and assess the operating effectiveness of security and IT controls.
4. Find and document control gaps, weaknesses, and potential risk exposures.
5. Perform quality control reviews to validate testing accuracy and consistency.
6. Record control testing outcomes, observations, supporting evidence, and recommendations.
7. Assist with GRC, IT risk management, and information security governance activities.
8. Collaborate with stakeholders to gather audit evidence and resolve control-related issues.
9. Use JIRA to monitor control deficiencies and remediation efforts.
10. Create reports and maintain control testing documentation using Microsoft Excel.

Required Qualifications

• Experience in GRC, Information Security Governance, IT Risk, Internal Audit, or IT Controls.
• Strong hands-on experience in control testing and QC of IT/security controls.
• Solid understanding of information security principles and risk management.
• Ability to assess control design and operating effectiveness.
• Proficiency in Microsoft Excel and JIRA.
• Excellent analytical, communication, and documentation skills.