Loading...
Governance, Risk, and Compliance Specialist at CapTechConsulting
CapTechConsultingRichmond, VA, us·4h ago
SeniorFull-time
Salary Range
$66,300 - $89,700 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are seeking a detail-oriented GRC Specialist to support our Governance, Risk, and Compliance functions. This role involves executing third-party risk assessments, managing security awareness training, and assisting with information security compliance initiatives.
Key Responsibilities
- →Conduct technical risk evaluations of third parties’ tools, platforms, and services.
- →Perform vendor due diligence and advise the business on risk response decisions in accordance with SOC 2 and internal standards.
- →Prepare and present assessment findings to the GRC Lead and Head of Information Security for final review and approval.
- →Make recommendations to strengthen vendor security posture.
- →Brainstorm, document, and formulate areas for Information Security improvement that balance risk with business operations.
- →Construct security program content around key areas of corporate and cyber risk.
- →Support the development and tracking of KPIs and KRIs to enable effective risk reporting.
- →Maintain and deliver security training for new hires, aligned with company policies.
- →Assist in the maintenance and review of ITGRC policies, standards, and procedures.
- →Support responses to information security questionnaires from clients or partners.
- →Support evidence collection and communication between auditors and stakeholders for external audits and internal reviews.
- →Learn and contribute to broader GRC functions under the guidance of the GRC Lead.
Requirements
- ✓Experience in GRC, risk assessment, and vendor due diligence.
- ✓Knowledge of SOC 2 standards and internal controls.
- ✓Strong understanding of information security principles and practices.
- ✓Ability to conduct technical risk evaluations and prepare assessment findings.
- ✓Experience in developing and tracking KPIs and KRIs.
- ✓Proficiency in security training and policy development.
- ✓Excellent communication and collaboration skills.
Free to sign up. Takes 30 seconds.
About CapTechConsulting
CapTechConsulting is a specialized consulting firm focused on providing technology solutions and advisory services to businesses seeking to optimize their digital operations. Operating within the technology consulting industry, the company leverages its expertise to help organizations navigate complex technological challenges and implement strategic solutions. While the exact founding date and location are not specified, the name suggests a strong emphasis on capitalizing on technology, indicating a commitment to delivering high-value consulting services to clients across various sectors. CapTechConsulting offers a range of products and services, including IT strategy development, software implementation, process automation, and cybersecurity consulting. Key features of their offerings include customized solutions tailored to client-specific needs, a data-driven approach to problem-solving, and a team of experienced professionals with deep technical knowledge. The company primarily targets mid-to-large enterprises in industries such as finance, healthcare, and retail, where technology integration is critical for operational efficiency and competitive advantage. Their services are designed to enhance business agility, reduce costs, and drive innovation through cutting-edge technological applications. Notable achievements for CapTechConsulting include successful project implementations that have significantly improved client performance metrics, such as system uptime and data security. The firm has established itself as a trusted partner in the consulting space, known for its ability to deliver measurable results and foster long-term client relationships. Its unique value proposition lies in combining technical expertise with strategic business insight, ensuring that technology initiatives align with overarching organizational goals and deliver tangible value. This dual focus on technology and business outcomes sets CapTechConsulting apart in a crowded consulting market.
