Security & GRC Supervisor

Responsibilities: • Apply defense-in-depth concepts and information security controls (Administrative, Technical, Physical, Operational, Deterrent, and Compensating controls) within day-to-day security activities. • Own technical implementation, configuration, and optimization of security technologies: IAM/PAM, NAC/TACACS, DLP, NDR/EDR, Sandboxing, Email Gateway, MDM, and SIEM (advanced query writing and use-case development). • Support compliance activities related to information security frameworks and standards such as IS027001, SOC2 Type II, and ISO27701. • Manage and track different audit missions and provide the support needed to stakeholders in the remediation plan. • Develop and review information security and corporate policies and processes to ensure alignment with information security standards and regulations. • Execute and support the information security awareness program, including security awareness trainings, phishing simulation campaigns, and security awareness sessions. • Assess new user access requests and review existing access permissions against the least privilege and need-to-know principles • Support information security assurance activities and risk management practices. • Track and follow up on vulnerability remediation efforts in collaboration with IT, engineering, and operations teams. Requirements: • Bachelor's degree in engineering Or computer science. • 7+ years of relevant experience • GRC-related certification (e.g., CISSP, CISA, CRISC, ISO 27001 Lead Implementer/Lead Auditor) is preferred. • Strong understanding of information security & IT governance frameworks of and standards such as ITIL, PCI, SOC2 Type II, ISO27001. • Strong knowledge of user access governance, including assessing new user access requests and reviewing existing access permissions against the least privilege and need-to-know principles. • Basic knowledge of information security assurance activities and risk management practices • Familiarity with cloud computing platforms and cloud security principles. • Excellent written and verbal communication skills, with proven ability to produce clear, high-quality security documentation and reports. Show more