Grc Specialist

BCM One

Herndon, Virginia, United States
Not specified; not specified; competitive industry...
Hybrid
5+ years security governance risk compliance experience
Iso 27001 soc 2 nist 800-53 framework knowledge
Internal and external audit management skills
BCM One is seeking a GRC Specialist to enhance their global compliance team, focusing on information security governance, risk, and compliance. The role involves designing, implementing, and maintaining security controls aligned with various GRC frameworks while collaborating with cross-functional teams. Candidates will need a strong background in GRC frameworks and hands-on experience in security compliance

Job Summary

  • This role bridges Information Security Governance, Risk & Compliance and IT Service Management to strengthen global IT operations.
  • The position involves leading the development of GRC frameworks such as ISO 27001 and SOC 2 while managing internal and external audits.
  • BCM One offers a collaborative culture with opportunities for professional development, team building, and recognition programs.

Matching Summary

Match Score: 85

BCM One is seeking a GRC Specialist to enhance their global compliance team, focusing on information security governance, risk, and compliance. The role involves designing, implementing, and maintaining security controls aligned with various GRC frameworks while collaborating with cross-functional teams. Candidates will need a strong background in GRC frameworks and hands-on experience in security compliance.

Salary

Not specified; Not specified; Competitive industry salaries; Comprehensive medical, dental, vision; Matching 401(k); Paid holidays and vacation

Skills & Requirements

Must-have

  • 5+ years Security Governance Risk Compliance experience
  • ISO 27001 SOC 2 NIST 800-53 framework knowledge
  • Internal and external audit management skills
  • Cross-functional collaboration with IT and Security teams
  • Security control design and implementation expertise

Nice-to-have

  • Experience with IT Service Management processes
  • Background in regulated industries like finance or healthcare
  • Strong communication for non-technical audiences
  • Proactive mindset for continuous learning
  • Familiarity with Business Impact Assessments

Key Requirements

  • 5+ years hands-on experience in Security Governance Risk Compliance
  • Authorized to work in the United States without sponsorship
  • Direct responsibility for security control implementation and operation

Work Rights

Must be authorized to work in the United States

Tailored Resume

Cover Letter