Role Summary: We are seeking a versatile and experienced Cybersecurity Generalist to join our dynamic team. The ideal candidate will possess a well-rounded background in Governance, Risk, and Compliance (GRC), Privacy, Client RFP exposure and response, and will have experience working in the Office of the CISO. This role will be critical in enhancing our cybersecurity posture, ensuring compliance with regulatory requirements, and supporting our clients’ cybersecurity needs.
Key Responsibilities:
· Governance, Risk, and Compliance (GRC):
- Develop, implement, and maintain GRC policies, procedures, and frameworks.
- Conduct risk assessments and provide recommendations to mitigate identified risks.
- Ensure compliance with industry standards, regulatory requirements, and internal policies.
- Monitor and report on the effectiveness of GRC controls.
· Privacy:
- Ensure adherence to data privacy regulations and standards (e.g., GDPR, CCPA).
- Conduct privacy impact assessments and data protection assessments.
- Develop and implement privacy policies and procedures.
- Respond to data subject access requests and handle data breaches.
· Client RFP Exposure and Response:
- Review and respond to client RFPs, RFIs, and security questionnaires.
- Collaborate with cross-functional teams to gather and provide accurate information.
- Develop tailored responses that meet client requirements and showcase our cybersecurity capabilities.
- Assist in pre-sales activities and client presentations related to cybersecurity.
· Office of the CISO:
- Support the CISO in strategic planning and execution of cybersecurity initiatives.
- Assist in the development and implementation of cybersecurity policies, standards, and guidelines.
- Coordinate cybersecurity training and awareness programs.
- Prepare reports and presentations for senior management and stakeholders.
· Additional Responsibilities:
- Stay up to date with the latest cybersecurity trends, threats, and technologies.
- Participate in incident response and investigations as needed.
- Collaborate with IT and other departments to ensure comprehensive security coverage.
- Provide mentorship and guidance to junior team members.
Qualifications:
· Bachelor’s degree in Cybersecurity, Information Technology, or related field.
· Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent are preferred.
· Proven experience in GRC, Privacy, Client RFP response, and working within the Office of the CISO.
· Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
· Excellent communication and interpersonal skills.
· Ability to manage multiple priorities and work effectively in a fast-paced environment.
· Strong analytical and problem-solving skills.
· Ability to work independently and as part of a team.
What We Offer:
· Competitive salary and benefits package.
· Opportunities for professional growth and development.
· A supportive and collaborative work environment.
· The chance to make a significant impact on the organization’s cybersecurity posture.
We are an equal opportunity employer and welcome applications from all qualified individuals.
Note: This job description is intended to provide a general overview of the position and is not an exhaustive list of duties and responsibilities. Duties and responsibilities may be subject to change based on organizational needs.
