**Experienced Full Stack Cybersecurity Specialist – Governance, Risk, and Compliance (GRC) Professional**
Join arenaflex, a leading innovator in the field of cybersecurity, as a highly skilled and experienced Full Stack Cybersecurity Specialist – Governance, Risk, and Compliance (GRC) Professional. This exciting opportunity allows you to contribute to the development and implementation of cutting-edge cybersecurity solutions, while working remotely in a part-time or full-time capacity.
**About arenaflex**
arenaflex is a renowned organization that has been at the forefront of innovation and excellence in the field of cybersecurity for years. Our team of experts is dedicated to providing top-notch solutions that protect our clients' sensitive information and ensure their peace of mind. With a strong focus on governance, risk, and compliance, we strive to stay ahead of the curve in the ever-evolving landscape of cybersecurity threats.
**The Role**
As a Full Stack Cybersecurity Specialist – GRC Professional, you will be responsible for guiding GRC-related activities and ensuring the smooth execution of various tasks within the team. Your primary focus will be on assisting arenaflex's 3rd Party/ Internal Threat Control Software, managing internal safety compliance requirements, and implementing regulations, tactics, and frameworks at arenaflex.
**Key Responsibilities**
* Assist in the development and implementation of arenaflex's 3rd Party/ Internal Threat Control Software
* Help manage internal safety compliance requirements and ensure adherence to regulatory standards
* Validate incoming 3rd Party/Internal Threat Assessment Requests and coordinate with business stakeholders to confirm the details of the request and the scope of the engagement
* Coordinate the distribution of due diligence questionnaires to internal stakeholders/3rd parties, review submitted questionnaires for completeness, and identify potential risks arising from the current design and operational effectiveness of internal/3rd party security controls
* File responses, associated findings, and remediation plans in arenaflex's systems
* Draft/review reviews for the checks performed and ensure respective business stakeholders finalize critiques
* Serve as a strong liaison to ensure any queries are responded to concerning the risk control technique and evaluation to the business or 3rd parties as required
* Conduct continuous tracking of 3rd parties via arenaflex's systems for current/new findings and escalate any findings to closure
* Identify opportunities for improvement within arenaflex's systems and strategies
* Work closely with the Chance Lead/Supervisor to timetable and execute a range of supporting activities related to the risk management program
**Governance, Threat, and Compliance**
* Lead and assist in the improvement of cybersecurity risk and compliance-related strategies to ensure treatment of cybersecurity risk consistent with the agency's threat appetite
* Maintain and document compliance towards information security-related guidelines and processes through planning, checking out, remediating, tracking, and reporting on manipulate critiques and threat checks
* Lead development and shipping of compliance and danger education and ongoing communications that assist power tradition of protection and compliance
* Retaining abreast of regulatory changes, new guidelines, technology, and internal policy modifications to further pinpoint new key risk areas
* Lead the team to preserve and guide ISO 27001 certification
**Competencies & Attributes for Fulfillment**
* Understanding and competencies in governance, risk, and compliance
* Outstanding stakeholder management
* Working understanding of information security-related best practices and requirements, including ISO 2700x, SOC 2 requirements, SSAE 16/18 requirements, and others
* Experience in the control of risk, controls, and compliance
* Expertise of risk evaluation methodologies – qualitative/quantitative
* Super analytical and problem-solving abilities
* Super presentation making and delivery abilities
**Personal Attributes**
* Robust interpersonal abilities
* Ability to navigate rapid-paced environments and be flexible with working hours
* Fantastic communication abilities, both verbal and written
* Adapt quickly to converting conditions and power high-quality change
**Preferred Qualifications & Experience**
* Applicable Bachelor's/Master's degree from an accredited university or equivalent experience
* 4 years of experience throughout 3rd Party Risk Control, Records Security, and Audit & Compliance Tracking (minimum of 2-3 years in TPRM/Internal Audit)
* Preferred experience with a large company and/or large four accounting company
* One or greater credentials – CISA, CRISC, ISO27001 L./LI, CISSP
* Experience in AI/ML is a plus
**Why Join arenaflex?**
* Competitive salary of $80,000 per year
* Opportunity to work remotely in a part-time or full-time capacity
* Collaborative and dynamic work environment
* Professional development and growth opportunities
* Comprehensive benefits package, including health insurance, retirement plan, and paid time off
**How to Apply**
If you are a highly skilled and experienced Full Stack Cybersecurity Specialist – GRC Professional looking for a new challenge, please submit your application, including your resume and a cover letter, to . We look forward to hearing from you!
**About arenaflex Careers**
At arenaflex, we are committed to providing a supportive and inclusive work environment that fosters growth and development. We believe in the importance of continuous learning and professional development, and we offer a range of training and development opportunities to help our employees achieve their career goals.
**Tips for a Successful Interview**
* Be prepared to talk about your professional heritage, capabilities, and reviews
* Show enthusiasm for the role and the organization
* Highlight your relevant qualifications, experiences, and skills
* Demonstrate your problem-solving and analytical abilities
* Showcase your communication and interpersonal skills
* Ask thoughtful and relevant questions during the interview
**What to Expect in the Interview Process**
* A comprehensive interview with a member of our recruitment team
* A presentation or case study to assess your problem-solving and analytical abilities
* A skills assessment or technical test to evaluate your technical skills
* A panel interview with multiple members of our team
* A final interview with a member of our leadership team
**Why arenaflex is a Great Place to Work**
* arenaflex is a leading innovator in the field of cybersecurity
* We offer a competitive salary and comprehensive benefits package
* We provide opportunities for professional development and growth
* We have a collaborative and dynamic work environment
* We are committed to providing a supportive and inclusive work environment
**How to Prepare for the Interview**
* Research the organization and the role
* Review your resume and cover letter
* Practice your responses to common interview questions
* Prepare examples of your relevant experiences and skills
* Ask thoughtful and relevant questions during the interview
**What to Wear to the Interview**
* Business casual attire is recommended
* Avoid wearing jeans or t-shirts
* Make sure your clothes are clean and ironed
* Pay attention to grooming and personal hygiene
* Be confident and professional in your appearance
**How to Follow Up After the Interview**
* Send a thank-you note or email to the interviewer
* Express your gratitude for the opportunity to interview
* Reiterate your interest in the role and the organization
* Provide any additional information or clarification
* Follow up with a phone call or email to confirm your interest in the role
Apply for this job