Job Title: Governance, Risk and Compliance Specialist
Position Type:Contract
Job Description:
We are looking for experienced Governance, Risk, and Compliance (GRC) Specialists to join our team. This role is focused on enhancing and operationalizing security policies, conducting risk assessments, and managing compliance with cybersecurity standards. The ideal candidates will have a solid background in ICT cybersecurity, data security, and audit management, along with strong analytical and communication skills to collaborate effectively with cross-functional teams.
Key Responsibilities:

Develop, implement, and monitor IT governance, risk, and compliance frameworks to support organizational security objectives.
Conduct and manage audit activities, ensuring adherence to established cybersecurity and data security policies and procedures.
Identify, assess, and manage security risks, including the validation of remediations to address security vulnerabilities.
Collaborate with cross-functional teams to operationalize and enforce cybersecurity policies, driving compliance across the organization.
Support compliance with standards, including Instruction Manual 8 and CSA Cybersecurity Code of Practice, and ensure regular reporting on compliance status.
Perform data visualization and analytics to generate insights and reports for monitoring security risk and compliance.
Stay updated on emerging security threats, vulnerabilities, and industry best practices to maintain robust security defenses.

Qualifications:

Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
Minimum of 5 years of relevant experience in ICT cybersecurity, data security, audit management, governance, risk, and compliance management.
Relevant certifications in IT governance, IT audit, cybersecurity, or data security (e.g., CISSP, CISM, CISA) are preferred.
Knowledge of cybersecurity standards and frameworks, including Instruction Manual 8 and the CSA Cybersecurity Code of Practice.
Strong technical knowledge of security vulnerabilities, risk assessments, and remediation validation processes.
Proficiency in data visualization and analytics tools to support compliance reporting.
Excellent interpersonal skills and ability to work effectively with cross-functional and multi-disciplinary teams.

Preferred Skills:

Experience with data visualization tools (e.g., Tableau, Power BI) and security analytics platforms.
Prior experience in a highly regulated industry or government organization is an advantage.

If you are a detail-oriented GRC professional with a passion for cybersecurity and compliance, we encourage you to apply for this exciting opportunity!
When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the Tech Aalto Privacy Policy, a copy of which is published at Tech Aalto’s website (https://www.techaalto.com/privacy/)
Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

Governance, Risk and Compliance Special...