What are the responsibilities and job description for the GRC Consultant position at Ampcus, Inc?
Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.
Job Title: GRC Consultant
Location(s): Plano, TX
Description:
Job Title: GRC Consultant
Location(s): Plano, TX
Description:
What we're looking for:
- Establish a robust governance structure to enhance decision-making and accountability.
- Identify inefficiencies and recommend improvements, leading to more streamlined and effective governance processes.
- Ensure compliance with laws and regulatory requirements by updating the relevant Policies and subsequent documents, helps save Toyota from avoiding fines, legal issues, and operational inefficiencies.
- Improve the maturity level of Data & Technology Policies, Standards, Narratives and Controls to meet organization goals and objectives.
- Primary contact for keeping up with Policy Governance change requests.
What you'll be doing:
- Ensure appropriate documentation in the form of Policy, standards, Process Narratives and controls, and procedures are created and updated as needed.
- Collaborate with relevant stakeholders to assess potential gaps and update policies to mitigate and to align with industry standards and regulatory (e.g: COBIT, FFIEC., etc) requirements.
- Continuously monitor and assess the effectiveness and compliance of policies, procedures, and controls.
- Ensure policies are communicated effectively and are easily accessible to all employees.
- Conduct annual reviews (or as needed) of existing policies and standards to ensure they are up-to-date, relevant, and aligned with changing business environment and regulations.
- Stay abreast of industry-specific regulations, legal requirements, and standards. Interpret and communicate the implications of these regulations to relevant stakeholders and ensure adherence to them across the organization.
- Collaborate closely with cross-functional teams, offering guidance and support to ensure these certifications are efficiently maintained, compliant with relevant standards, and aligned with the organization's security goals.
- Maintain knowledge of related security, regulatory, compliance and industry standards.
- Maintain accurate and comprehensive documentation of policies, revisions, and associated procedures.
- Perform other job-related duties as assigned.
Requirements:
- Years of experience: 8
- Education: Bachelor's Degree.
- Hybrid: Onsite and Hybrid, at least 3 days in office
- Interview process: MS teams 45 minutes / Ms teams 2 round
Qualifications/ What you bring (Must Haves)
Highlight Top 3-5 skills:
Highlight Top 3-5 skills:
- Minimum bachelor's degree in information technology, computer science or cyber security systems or related field with 8 years' experience in IT Security, Audit, Compliance, and Risk Management.
- Experience in developing and maintaining IT Policies, procedures, and documentation to ensure alignment with GRC objectives and organization goals.
- Experience working with COBIT Framework, Compliance, Risk Management, Security or Audit frameworks (i.e., FFIEC, NIST 800-53)
- Experience performing gap analysis to identify areas of improvement in IT GRC processes.
- Ability to produce high quality policy documentation.
- Strong oral and written communication skills and ability to work well with others in a collaborative, complex and challenging environment, present findings, and provide recommendations.
- Must demonstrate good judgment and attention details while prioritizing and delivering wide range of challenges and tasks.
- Ability to work effectively in a team and coordinate efforts across different teams to achieve IT GRC goals.
- Proficiency in standard office software suites.
- Experience working with GRC tools used for risk assessment, compliance monitoring, and reporting.
- Strong analytical and critical thinking skills is required to process complex data.
- Aptitude for identifying and solving IT GRC-related problems and implementing solutions to improve overall security and compliance posture.
Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identify, national origin, age, protected veterans or individuals with disabilities.
