Pay Growth
?
out of 5
Not enough data
Not enough info to score pay or growth
Find Jobs
Find Jobs Near You – Available Work in Your Location
Skip to job details
QT
Q1 Technologies, Inc
Cyber Security - GRC Consultant
Review key factors to help you decide if the role fits your goals.
Job Security
?
out of 5
Not enough data
Calculating job security score...
Total Score
76
out of 100
Average of individual scores
Job Description
Job Description
Help for Job Description. Opens a new window.
Job Description
Job Description
Role:
Consultant
Skills:
Cyber Security
- GRC•Vendor Risk Assessment~Cyber Security•GRC•
Data Security Experience Required:
8-10 Years
MUST HAVE SKILLS
GRC Vendor risk assessment/ Third party risk assessment
Role Descriptions:
Lead and end-to-end third-partyvendor risk assessments across technology| supply chain| SaaS| and hybrid environments| identifying control gaps and recommending risk mitigation strategies.
Perform deep technical reviews of solution| application| and solution architectures| security controls| and cloud solutions from a security engineering perspective| translating findings into actionable remediation guidance.
Conduct hands-on SOC 2 analysis| evaluate control design and operating effectiveness| and clearly articulate control gaps and risk impacts to stakeholders.
Ensure alignment of third-party assessments and internal practices with enterprise security policies| data protection standards| and frameworks such as SOC 2 and ISO 27001.Leverage and administer GRC and risk intelligence platforms such as RSA Archer| Onspring| BitSight| UpGuard| SecurityScorecard| ServiceNow| or similar tools to manage risk lifecycle activities.
Coordination with business partners such as Legal| Procurement| IT| Privacy| Audit| and Security Operations to drive timely assessment completion and remediation tracking.
Develop and report meaningful risk metrics and program insights to leadership| demonstrating effectiveness and continuous improvement of the TPRM program.
Contribute to the development| enhancement| and rationalization of information security policies| standards| and exception processes based on risk findings and industry best practices.
Communicate complex technical and risk concepts clearly to both technical and non-technical stakeholders build trusted relationships across business units.
Essential Skills:
Lead and end-to-end third-partyvendor risk assessments across technology| supply chain| SaaS| and hybrid environments| identifying control gaps and recommending risk mitigation strategies.
Perform deep technical reviews of solution| application| and solution architectures| security controls| and cloud solutions from a security engineering perspective| translating findings into actionable remediation guidance.
Conduct hands-on SOC 2 analysis| evaluate control design and operating effectiveness| and clearly articulate control gaps and risk impacts to stakeholders.
Ensure alignment of third-party assessments and internal practices with enterprise security policies| data protection standards| and frameworks such as SOC 2 and ISO 27001.Leverage and administer GRC and risk intelligence platforms such as RSA Archer| Onspring| BitSight| UpGuard| SecurityScorecard| ServiceNow| or similar tools to manage risk lifecycle activities.
Coordination with business partners such as Legal| Procurement| IT| Privacy| Audit| and Security Operations to drive timely assessment completion and remediation tracking.
Develop and report meaningful risk metrics and program insights to leadership| demonstrating effectiveness and continuous improvement of the TPRM program.
Contribute to the development| enhancement| and rationalization of information security policies| standards| and exception processes based on risk findings and industry best practices.
Communicate complex technical and risk concepts clearly to both technical and non-technical stakeholders build trusted relationships across business units.