Insight Global - South San Francisco, CA
posted about 2 months ago
Full-time - Senior
Remote - South San Francisco, CA
Administrative and Support Services
About the position
The Senior Governance, Risk, and Compliance (GRC) Specialist will play a crucial role in supporting customer-facing security and compliance services. This position involves identifying client needs, conducting security and compliance assessments, and ensuring that the organization meets and exceeds client expectations. The specialist will work closely with internal teams, vendors, and clients to deliver services effectively and will be responsible for leading projects, recommending solutions, and developing automation to enhance operations.
Responsibilities
- Identify client needs and internal/external drivers related to security and compliance.
- Conduct various security and compliance assessments.
- Identify critical assets and vendors for the organization.
- Map existing controls to requirements and perform gap assessments.
- Formulate action plans and implementation roadmaps based on assessments.
- Collaborate with internal teams, vendors, and clients to ensure effective service delivery.
- Serve as a senior GRC consultant addressing security and compliance challenges.
- Lead and collaborate on projects to deliver client services.
- Recommend and implement solutions to meet client needs.
- Develop automation to enhance operational efficiency.
- Respond to external security and compliance inquiries.
Requirements
- 7+ years of experience in Information Security Auditing and Compliance.
- Holds an active CGRC, CRISC, CISA, or similar certification.
- Deep understanding of cloud-first and SaaS-based environments.
- Experience leading and conducting framework-based, readiness, gap, and risk assessments.
- Experience implementing standard frameworks and regulations such as NIST CSF, NIST SP 800-171, CMMC, ISO27001, FedRAMP, CCPA/CPRA, and GDPR.
- Experience working with Asana project management, Slack, Drata, and Google Workspace Suite.
