What are the responsibilities and job description for the Cybersecurity GRC Specialist position at Cloudious LLC?
Job Description
Job Description
Role : Cybersecurity GRC Specialist
Location : Hybrid - Dallas, TX
Contract duration : 12 months
Required skillset :
1. Cybersecurity Risk & Governance Expertise
2. Vulnerability Management Program Expertise
3. Policy & Standard Development & Implementation
Job Summary :
Develop and implement security policies and standards, ensuring compliance with industry regulations and best practices.
Conduct risk assessments and vulnerability assessments to identify1 and mitigate security risks.
Manage the vulnerability management program, including vulnerability scanning, penetration testing, and remediation.
Develop and deliver security awareness training programs.
Collaborate with stakeholders to integrate security considerations into the design and development of new aviation systems.
Stay informed about emerging threats and vulnerabilities in the aviation industry.
SKILLS
Cybersecurity Risk & Governance Expertise : Requires 3-5 years of progressive cybersecurity engineering experience with a deep understanding of risk management frameworks (NIST SP 800-37, ISO 27005),governance principles, vulnerability management, and security policy development.
Risk Assessment & Mitigation : Proven experience conducting risk assessments (NIST 800-30, NIST CSF),identifying vulnerabilities, analyzing threats, and developing effective mitigation strategies.
Vulnerability Management Program Expertise : Expertise in vulnerability management tools and processes, including vulnerability scanning, penetration testing coordination, vulnerability prioritization, and remediation tracking.
Policy & Standard Development & Implementation : Strong ability to develop, document, and implement security policies, standards, and procedures that align with industry best practices, regulatory requirements, and risk tolerance
Communication & Stakeholder Collaboration : Excellent communication (written and verbal) and interpersonal skills to effectively communicate security risks, governance strategies, and policy recommendations to diverse stakeholders, including technical teams, management, and external partners.
