Vacancy expired!
- Bachelor's degree in Information Systems or related degree, or equivalent job experience
- CISA certification required
- 5 years of experience Governance Risk and Compliance program.
- 5 years Information Security Control and risk assessments
- 5 years required of combined Information Technology and Information Security work experience with a broad exposure to the following Regulations and Frameworks; PCI, HIPAA, SOX, NIST, and CMMS
- Maintain and continuous improvement Information Security Control Plans
- Perform initial, annual, and ad hoc control assessments for Vendors, Customers and Suppliers.
- Perform initial and annual contract reviews for Vendors, Customers and Suppliers.
- Be an Advisory and coordinate Regulatory assessments (PCI, HIPAA, SOX, NIST, CMMS) by all audits
- Help implement Governance, Risk and Control tool
- Strengthen Procedure Controls
- Maintain Control Library
- Assist maintenance of the Risk Register
- Participate in Security Awareness program
- Gather data for team metrics to ensure accurate reporting of important Information Security Governance metrics for Grainger leadership and partners
- Maintain GRC data within GRC tool
Vacancy expired!