Join Blithequark's Cybersecurity Team as a GRC Professional
Blithequark is seeking an experienced GRC (Governance, Risk, and Compliance) professional to join our Cybersecurity team. As a GRC Professional, you will play a critical role in guiding GRC-related activities and ensuring the smooth execution of various tasks within our team. You will assist in managing our internal safety compliance requirements and implementing regulations, tactics, and frameworks across the organization.
About Blithequark and Our Cybersecurity Team
Blithequark is a leading organization dedicated to delivering innovative solutions and enchanting experiences. Our Cybersecurity team consists of green cybersecurity specialists who formulate and implement techniques and recommendations to help the organization align with its commercial enterprise dreams while dealing with dangers correctly and meeting industry guidelines and standards. We work on cutting-edge technology and toward new innovations in the area of cybersecurity to make our operations secure and reliable.
Key Responsibilities
- Third-Party Risk Management (TPRM) Software: Assist in managing Blithequark's global third-party/internal risk method for wearing out cyber danger related due diligence exams.
- Risk Assessment and Validation: Validate incoming third-party/internal danger assessment requests, operating with business stakeholders to confirm the details of the request and the scope of the engagement.
- Kick-Off Periods: Conduct kick-off periods with business stakeholders and any related third-party for conducting the TPA.
- Due Diligence Questionnaires: Coordinate the distribution of due diligence questionnaires to internal stakeholders/third-party, review submitted questionnaires for completeness, and decide dangers springing up from the contemporary design and operational effectiveness of the internal/third-party's security controls.
- Response and Remediation: File responses, associated findings, and remediation plans in Blithequark's systems.
- Reporting and Review: Draft/review reports for the checks performed and ensure respective commercial enterprise stakeholders finalize critiques.
- Liaison and Communication: Be a sturdy liaison to ensure any queries are spoke back concerning the risk control technique and evaluation to the business or third events as required.
- Continuous Monitoring: Carry out continuous tracking of third-party events via Blithequark's systems for current/new findings and music any findings to closure.
- Process Improvement: Perceive opportunities of improvement inside Blithequark's systems and strategies.
- Governance, Threat, and Compliance: Lead and help the improvement of cybersecurity hazard and compliance related strategies to ensure treatment of cybersecurity chance consistent with the agency's threat urge for food.
Essential Qualifications and Skills
Understanding and Competencies
- Outstanding Stakeholder Management: Ability to manage stakeholders effectively and ensure smooth communication.
- Working Understanding of Information Security: Familiarity with information security related high-quality practices and requirements, including ISO 2700x, SOC 2 necessities, SSAE 16/18 requirements, and others.
- Experience in Risk Management: Experience in the control of hazard, controls, and compliance.
- Expertise in Risk Evaluation Methodologies: Knowledge of hazard evaluation methodologies, including qualitative and quantitative approaches.
- Analytical and Problem-Solving Abilities: Super analytical and problem-solving abilities.
- Presentation Making and Delivery: Super presentation making and delivery abilities.
Personal Attributes
- Robust Interpersonal Abilities: Ability to work effectively in a team environment and build strong relationships.
- Adaptability: Ability to navigate rapid-paced surroundings and be bendy with working hours.
- Communication Skills: Fantastic communication abilities, both verbal and written.
- Adaptability to Changing Conditions: Ability to adapt speedy to converting conditions and power high-quality change.
Preferred Qualifications and Experience
- Applicable Bachelor's/Master's Diploma: Applicable bachelor's/master's diploma from an accepted university or equivalent experience.
- Experience in TPRM/Internal Audit: 4 years of experience throughout third-party risk control, records security, and audit & compliance tracking (minimum of 2-3 years in TPRM/internal audit).
- Experience with a Large Company: Preferred experience with a massive company and/or large four accounting company.
- Credentials: One or greater credentials - CISA, CRISC, ISO27001 L./LI, CISSP.
- AI/ML Experience: Experience in AI/ML is a plus.
Career Growth Opportunities and Learning Benefits
At Blithequark, we offer a dynamic and supportive work environment that encourages growth and learning. As a GRC Professional, you will have opportunities to develop your skills and expertise in cybersecurity, risk management, and compliance. You will work closely with our team of experienced professionals and have access to training and development programs to help you advance in your career.
Work Environment and Company Culture
Blithequark values a collaborative and inclusive work environment that promotes creativity, innovation, and teamwork. We offer flexible working hours, remote work options, and a range of employee benefits to support our employees' well-being and work-life balance. Our company culture is built on a foundation of respect, empathy, and trust, and we strive to create a workplace where everyone feels valued and empowered to contribute.
Compensation and Benefits
We offer a competitive salary of $80,000 per year, as well as a range of benefits, including health insurance, retirement savings, and paid time off. We also provide opportunities for professional development and growth, and a dynamic and supportive work environment.
How to Apply
If you are a motivated and experienced GRC professional looking for a new challenge, we encourage you to apply for this exciting opportunity at Blithequark. Please submit your application, including your resume and a cover letter, and we will be in touch to discuss your qualifications further.
Apply Now