GRC Consultant (6-9 yrs)

Job Description :

- Establish a robust governance structure to enhance decision-making and accountability.

- Identify inefficiencies and recommend improvements, leading to more streamlined and effective governance processes.

- Ensure compliance with laws and regulatory requirements by updating the relevant Policies and subsequent documents, helps save Client from avoiding fines, legal issues, and operational inefficiencies.

- Improve the maturity level of Data & Technology Policies, Standards, Narratives and Controls to meet organization goals and objectives.

- Primary contact for keeping up with Policy Governance change requests.

- Ensure appropriate documentation in the form of Policy, standards, Process Narratives and controls, and procedures are created and updated as needed.

- Collaborate with relevant stakeholders to assess potential gaps and update policies to mitigate and to align with industry standards and regulatory (e.g: SOX, COBIT, FFIEC., etc) requirements.

- Continuously monitor and assess the effectiveness and compliance of policies, procedures, and controls.

- Ensure policies are communicated effectively and are easily accessible to all employees.

- Conduct annual reviews (or as needed) of existing policies and standards to ensure they are up-to-date, relevant, and aligned with changing business environment and regulations.

- Stay abreast of industry-specific regulations, legal requirements, and standards. Interpret and communicate the implications of these regulations to relevant stakeholders and ensure adherence to them across the organization.

- Collaborate closely with cross-functional teams, offering guidance and support to ensure these certifications are efficiently maintained, compliant with relevant standards, and aligned with the organization's security goals.

- Maintain knowledge of related security, regulatory, compliance and industry standards.

- Maintain accurate and comprehensive documentation of policies, revisions, and associated procedures.

- Perform other job-related duties as assigned.

- Expertise in GRC processes, NIST 800.53, and risk management.