Security GRC Specialist
Posted 1 day 4 hours ago by Endeavour Recruitment
Security GRC Specialist (Senior & Mid-Level)
JOB LOCATION: Dublin IRELAND
DURATION: 12months + (Possibility for Extensions)
TYPE: Contract
WORK PATTERN: Mon -Fri - Full Time Onsite (5 Days a Week)
PAY RATE: Euros 550 - Euros 680/EUROS PER DAY
Security Governance, Risk and Compliance Specialist - 2 Roles (Senior & Mid-Level)
Overview:
Our client is seeking GRC (Governance, Risk, and Compliance) Security Specialists to strengthen their cybersecurity, data protection, and compliance programs. These roles will cover risk management, third-party security, data governance, and security awareness, working closely with internal stakeholders and business teams.
Roles & Responsibilities:
1. Risk Management and Compliance:
Ensure compliance with regulatory standards and monitor compliance status.
2. Third-Party Security Management:
Conduct assessments to determine vendor alignment with applicable cybersecurity and data protection requirements.
Identify explicit and implicit risks arising from vendor relationships.
Enhance the process for managing third-party security asessments, including ongoing monitoring and engagement with high-risk vendors.
Strengthen engagement with internal stakeholders to provide visibility into third-party risk exposure and remediation status.
3. Data Classification Framework and Governance:
Define and maintain data classification definitions and handling guidelines.
4. Data Discovery and Business Engagement:
Lead structured data discovery engagements to understand data usage.
5. Data Loss Prevention (DLP) Strategy and Policy Design:
Design DLP strategies and policies aligned with business workflows.
Continuously review DLP effectiveness and support the business in responding to identified data risks.
1. Security Awareness and Training:
Define and implement a comprehensive security awareness strategy .
Requirements/Skills:
- Proven experience in GRC, cybersecurity, or risk management
- Experience with third-party risk assessments
- Knowledge of data classification frameworks, DLP, and security policies
- Strong stakeholder engagement and communication skills
- Analytical mindset with ability to identify, report, and remediate risks