Specialist, Cybersecurity GRC - Banking

• Assist in identifying and tracking compliance with cybersecurity regulations, standards, and policies, collaborating with various teams to close identified compliance gaps.
• Support the development, maintenance, and continuous improvement of cybersecurity governance documents, including policies, standards, and procedures.
• Aid in the maintenance of a centralized cyber risk register, ensuring risks are accurately documented, categorized, and prioritized.
• Conduct risk assessments for internal processes, systems, and third-party vendors to identify potential cyber risks and maintain alignment with the bank’s risk appetite.
• Regularly report on cybersecurity metrics, KPIs, and KRIs, ensuring actionable insights are communicated to the Cybersecurity management.
• Collaborate with the manager and IT teams to evaluate, procure, and manage GRC tools, ensuring they support regulatory compliance and risk management activities effectively.
• Monitor and review the effectiveness of these tools, suggesting enhancements or upgrades to meet evolving security requirements.
• Assist in managing relationships with vendors providing GRC-related services, ensuring they deliver as per contractual obligations and meet the bank’s security control standards.
• Facilitate regular reviews and assessments of vendor performance and compliance with cybersecurity controls.
• Stay updated on cybersecurity trends, regulatory changes, and best practices related to governance, risk, and compliance.
• Actively participate in GRC meetings and discussions to provide insights and contribute to the continuous improvement of the GRC function.

Use AI to automate compliance assessment, risk scoring and control validations across cybersecurity frameworks.