Position GRC consultant onsite

Position GRC consultant (onsite)

Work authorization: any (candidate must be authorized to work in US)


Musthave ss: 710 y of IT Audit exp; 3 y of IT Risk Management exp; 3 y of handson technical exp (e.g. developer system administrator); NIST 80030 Risk essment Standard or PCI DSS standards
PREFERRED : governmental exp business process mapping and doentation
policy and procedure development IT General Controls evaluation and design Information Security threat landscape.
CERTIFICATIONS : CISA CISSP.

Location: Boca Raton FL

PLEASE SEND LOCAL CANDIDATES ONLY (registered and currently located in FL).

Candidates from other locations wont be considered. Relocation is not acceptable


Seniority on the s/s required on this requirement: Sr.


Earliest Start Date: ASAP


Type: Temporary Project


Estimated Duration: 10 months with possible extension (s)


Additional information: The candidate should be able to provide an ID if the interview is requested. The candidate interviewing must be the same individual who will be igned to work with our client.

Requirements:
Availability to work 100% of the time at the Clients site in Boca Raton FL (required);
IT Audit experience (710 years);
IT Risk Management lifecycle experience (3 years);
Handson technical experience e.g. developer system administrator (3 years);
Experience working with NIST 80030 Risk essment Standard;
Experience with IT General Controls evaluation and design;
Experience with PCI DSS standards.

Preferred:
CISA and CISSP certifications
Government experience.
Experience in Information Security with uptodate knowledge of the current threat landscape;
Experience with business process mapping doentation and policy and procedure development.


Responsibilities include but are not limited to the following:
Perform PCI ISO COBIT and applicable State of Florida cybersecurity controlsrelated
reviews to ensure that current new and technology infrastructure complies with these standards and security policies;
Plan and perform IT security controls effectiveness quarterly reviews. Manage remediation efforts for the identified gaps including essment of new or enhanced implemented controls;
Maintain IT security risk and compliance matrix and perform management reporting. This will include IT systems controls and business process risks to meet compliance requirements. Provide risk mitigation strategies;
Maintain IT security risk and compliance matrix and perform management reporting. This will include IT systems controls and business process risks to meet compliance requirements. Provide risk mitigation strategies;
Manage IT security vulnerabilities management program aligned with PCI and NIST standards;
Identify and rank the value sensitivity and criticality of the operations and ets that could be affected should a threat materialize in order to determine which operations and
ets are the most important;
For the most critical and sensitive ets and operations estimating the potential losses or damage that could occur if a threat materializes including recovery costs.

Thank you for your interest in doing business with us.

Also Id like to remind you that as per the executed Letter of Intent your company has certified the following below: