Are you an Expert in the identification of threats and risk exposures ?
Job Summary:
We are seeking an experienced GRC Specialist to join our team and assist in the implementation of strong governance, risk management, and compliance practices.
As a GRC Specialist, you will help the organization succeed by implementing robust governance, risk management, and compliance practices.
Responsibilities:
- Develop and implement a comprehensive GRC framework that meets with the organization’s goals, objectives, and legal requirements.
- Conduct risk assessments to identify potential risks and vulnerabilities in the operations, systems, and processes of the company.
- Develop and implement frameworks, controls, and risk mitigation approaches to mitigate identified risks and ensure business continuity.
- Evaluate the effectiveness of present controls and processes, identify areas for improvement, and recommend corrective actions.
- Ensure that the organization is aware of industry norms, standards, and best practices for governance, risk management, and compliance.
- Create and administer compliance programs, regulations, and procedures with cross-functional teams.
- Conduct compliance audits and assessments to verify compliance with business policies…
- Coordinate with external auditors and regulatory agencies throughout audits and investigations to ensure fast responses and resolution of identified problems.
- Create reports and presentations for management and stakeholders that highlight key risks, compliance status, and ideas for improvement.
Qualifications:
- A minimum of 5 years’ experience in GRC, risk management, compliance, or a related field is needed.
- Solid grasp of governance, risk management, and compliance concepts, frameworks, and best practices.
- Understanding of relevant regulations and standards, such as ISO 31000, ISO 27001, ISO 27017, ISO 27018, ISO 31700, the NIST Cybersecurity Framework, GDPR, or industry-specific requirements.
- Previous experience developing and implementing ISMS framework, GRC strategies, policies, and procedures is necessary.
- Strong analytical skills, as well as the ability to assess complex risks and develop effective risk mitigation strategies.
- Extensive understanding of internal control structures and risk assessment techniques.
- Excellent communication and interpersonal skills are essential to effectively connect with stakeholders at all levels of the organization.
- Ability to work independently and handle many tasks at once, prioritizing chores to meet deadlines.
- Certifications such as Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA)…
Location :
Lebanon & Cyprus
Benefits:
Attractive Salary + Bonus + Medical Insurance