CyberSecurity Specialist - GRC

Job Summary

This hybrid CyberSecurity Specialist GRC role is responsible for designing and implementing governance, risk, and compliance frameworks, along with identity and access management controls, for enterprise platforms. The specialist will work closely with cross-functional teams to strengthen access management processes, reduce security risk, improve regulatory alignment, and help enable secure digital operations during day shifts. No travel is required.

Responsibilities

• Design and implement end-to-end governance, risk, and compliance frameworks that map enterprise security controls to regulatory obligations and internal policies, reducing operational and technology risk across business units.
• Create and maintain GRC implementation roadmaps that coordinate process design, tool configuration, and stakeholder onboarding to ensure consistent risk assessment workflows and ongoing compliance monitoring.
• Configure and improve GRC platforms to enable automated control testing, issue management, and risk reporting, ensuring decision makers receive timely and dependable insights into cyber risk posture.
• Coordinate GRC integration with existing security tools and enterprise applications by defining data flows, mapping control libraries, and validating interfaces to increase transparency and reduce manual effort during compliance activities.
• Assess identity and access management requirements across platforms and applications to build strong role-based access models, access approval workflows, and periodic review processes that limit excessive privileges.
• Implement and refine access management policies and technical controls for user provisioning, deprovisioning, and entitlement changes to ensure access is granted based on need and remains auditable and traceable.
• Partner with platform owners, application teams, and security operations to resolve access management issues, investigate unauthorized access events, and implement corrective actions that strengthen the security posture.
• Document GRC and identity access processes in clear operational procedures, playbooks, and standards so technology and business teams can apply consistent practices during onboarding, daily operations, and audits.
• Conduct regular control effectiveness reviews and risk assessments focused on access management and GRC capabilities to find gaps, prioritize remediation, and track closure to improve resilience and compliance.
• Support audit and regulatory inquiries by preparing evidence from GRC platforms, describing implemented controls, and demonstrating how identity and access management processes meet external expectations and internal benchmarks.
• Lead stakeholder guidance for GRC implementation and identity access change initiatives by explaining risk impacts, demonstrating platform capabilities, and encouraging adoption of secure processes that align with company objectives.
• Evaluate the impact of check processing and related financial operations on security and compliance requirements by understanding transaction flows and tailoring controls that protect sensitive data while supporting business performance.
• Drive continuous improvement in cybersecurity practices by monitoring emerging risks, recommending enhancements to GRC workflows, and optimizing access management measures to benefit customers, employees, and society through safer digital services.

Qualifications

• 6 to 9 years of experience in cybersecurity, with a primary focus on governance, risk, and compliance implementation and integration across complex enterprise environments.
• Strong hands-on expertise in identity and access management on enterprise platforms, including developing role models, configuring approval workflows, and performing periodic access reviews.
• Advanced knowledge of access management practices, including user lifecycle management, entitlement governance, and privilege restriction, using industry-standard tools and processes.
• Proven ability to translate regulatory and policy requirements into practical GRC configurations and reports that deliver actionable insights for risk owners and auditors.
• Experience working in financial or payment-related environments (e.g., check processing), where secure handling of transaction data and operational controls are essential to business integrity.
• Ability to communicate clearly with technology and business stakeholders to explain GRC and access concepts, present risk findings, and support collaborative resolution of security and compliance issues in a hybrid work environment.
• Structured problem-solving and analytical skills to assess control weaknesses, recommend realistic remediation steps, and support the implementation of sustainable cybersecurity improvements.