Governance, Risk, and Compliance (GRC) Resource

Job Description for Governance, Risk, and Compliance (GRC) Resource

Overview

The Governance, Risk, and Compliance (GRC) resource plays a crucial role in ensuring that an organization adheres to regulatory requirements, manages risks effectively, and upholds governance standards. This position involves a blend of strategic planning, risk assessment, policy formulation, and compliance monitoring.

Key Responsibilities

• Review IT and cybersecurity policies annually or as required by regulators. Manage and maintain data security plans, ensuring PII data is not transmitted without approval. Implement data and security policies effectively.
• Conduct risk assessments of on-premises and cloud infrastructure twice a year.
• Monitor the effectiveness of security measures.
• Ensure compliance with user access management for all IT assets.
• Conduct quarterly vulnerability and configuration assessments, addressing any findings...