Join arenaflex, a leading innovator in the field of cybersecurity, as a highly skilled and experienced Full Stack Cybersecurity Specialist – Governance, Risk, and Compliance (GRC) Professional. This exciting opportunity allows you to contribute to the enchanting world of arenaflex from the comfort of your own home, working on a part-time or full-time basis.
**About arenaflex**
arenaflex is a cutting-edge organization that specializes in providing innovative solutions to complex cybersecurity challenges. Our team of experts is dedicated to formulating and implementing techniques and recommendations to help organizations align with their business goals while dealing with risks correctly and meeting industry guidelines and standards. We work on slicing-edge technology and towards new innovations in the area of cybersecurity to ease the magic.
**Reporting to**
You will be reporting to the Manager (Governance, Threat, and Compliance), Cyber and Statistics Safety at arenaflex.
**Key Duties**
As a Full Stack Cybersecurity Specialist – GRC Professional, you will be responsible for the following key duties:
* Third-Party Risk Management (TPRM) Software: Assist arenaflex's global third-party risk management program for wearing out cyber risk-related due diligence examinations.
* Validate incoming third-party risk assessment requests, working with business stakeholders to confirm the details of the request and the scope of the engagement.
* Conduct kick-off meetings with business stakeholders and any related third-party for conducting the TPA.
* Coordinate the distribution of due diligence questionnaires to internal stakeholders/third-party, review submitted questionnaires for completeness, and decide risks arising from the current design and operational effectiveness of the internal/third-party's security controls.
* File responses, associated findings, and remediation plans in the arenaflex systems.
* Draft/review reviews for the checks performed and ensure respective business stakeholders finalize critiques.
* Be a strong liaison to ensure any queries are responded concerning the risk control technique and evaluation to the business or third-party as required.
* Conduct continuous tracking of the third-party via arenaflex systems for current/new findings and report any findings to closure.
* Identify opportunities for improvement within the arenaflex systems and strategies.
* Work intensely with Chance Lead/Supervisor to time-table and execute a range of different assisting activities related to the chance management program.
**Governance, Threat, and Compliance**
As a Full Stack Cybersecurity Specialist – GRC Professional, you will also be responsible for:
* Leading and assisting the improvement of cybersecurity risk and compliance-related strategies to ensure treatment of cybersecurity risk consistent with the agency's threat urge for food.
* Maintaining and documenting compliance towards information safety associated guidelines and processes through planning, checking out, remediating, tracking, and reporting on manipulate critiques and threat checks.
* Leading development and shipping of compliance and danger education and ongoing communications that assist power tradition of protection and compliance.
* Retaining abreast of regulatory changes, new guidelines, technology, and internal policy modifications on the way to further pick out new key chance regions.
* Leading the team to preserve and guide ISO 27001 popular.
**Competencies & Attributes for Fulfillment**
To be successful in this role, you will need to possess the following competencies and attributes:
* Understanding and competencies: Outstanding stakeholder management.
* Working understanding of information security-related high-quality practices and requirements consisting of ISO 2700x, SOC 2 necessities, SSAE 16/18 requirements, and many others.
* Experience in the control of hazard, controls, and compliance.
* Expertise of hazard evaluation methodologies – qualitative/quantitative.
* Super analytical and problem-solving abilities.
* Super presentation making and delivery abilities.
**Personal Attributes**
As a Full Stack Cybersecurity Specialist – GRC Professional, you will also need to possess the following personal attributes:
* Robust interpersonal abilities.
* Ability to navigate rapid-paced surroundings and be bendy with working hours.
* Fantastic communication abilities, both verbal and written.
* Adapt speedily to converting conditions and power high-quality change.
**Preferred Training & Experience**
While not required, the following training and experience would be preferred:
* Applicable Bachelor's/Grasp's diploma from an accepted university or equivalent experience.
* 4 years of enjoy throughout third-party risk control, records security, and audit & compliance tracking (minimum of 2-3 years in TPRM/internal audit).
* Preferred revel in with a massive company and/or large four accounting company.
* One or greater credentials – CISA, CRISC, ISO27001 L./LI, CISSP.
* Experience in AI/ML is a plus.
**About arenaflex Careers**
We are excited to learn more about you and your qualifications for this role. Please take a few minutes to answer the following questions:
* Tell me about yourself. Provide a brief precis of your professional heritage, capabilities, and reviews. Focus on applicable info and your enthusiasm for the function.
* Why do you want to work for this organization? Speak the agency's values, project, or popularity that align along with your profession desires. Point out precise elements of the business enterprise that attracted you.
* What's your best power? Spotlight a applicable energy, including problem-fixing, management, or a technical skill. Support your solution with an example.
* What's your greatest weakness? Talk a weak point, but emphasize how you're operating to improve it. For instance, "i am operating on improving my time management abilities."
* Tell me approximately a hard situation you've got confronted at paintings and the way you handled it. Use the superstar approach (state of affairs, venture, movement, result) to provide an in-depth response, showcasing your hassle-fixing talents.
* Why need to we hire you for this role? Spotlight your relevant qualifications, stories, and how they make you the excellent match for the position. Mention your enthusiasm for the organization and the job.
* In which do you notice yourself in 5 years? Share your career aspirations and how they align with the organization's boom. This demonstrates long-term commitment.
* What do you understand about our merchandise/services? Research the employer's services and point out specific services or products. Explain how you accept as true with they gain customers.
* How do you handle running below stress? Describe your capacity to stay calm, prioritize tasks, and talk correctly in excessive-stress situations. Provide an example.
* Tell me approximately a time you labored in a group. Describe a a hit team challenge. Emphasize your collaboration, conversation, and trouble-solving abilities.
* What is your chosen paintings style or work environment? Share your alternatives, but be adaptable. Point out that you may paintings correctly in different settings.
* Do you have got any questions for us? Usually have questions organized. Ask about the organization's tradition, crew dynamics, expectancies, or upcoming initiatives. It demonstrates your hobby.
**Apply Now**
If you are a highly skilled and experienced Full Stack Cybersecurity Specialist – GRC Professional looking for a challenging and rewarding opportunity, please apply now. We look forward to hearing from you.
Apply Job!
Apply for this job