Who We Are
Artmac Soft is a technology consulting and service-oriented IT company dedicated to providing innovative technology solutions and services to Customers.
Job Description
Job Title : Hyperproof GRC Specialist
Job Type : W2/C2C/1099
Experience : 15-20 Years
Location : New York
We are seeking a Hyperproof Governance, Risk, and Compliance (GRC) Specialist who will have a strong background in navigating and implementing control frameworks (FW). The ideal candidate will have a comprehensive understanding of various regulatory and security frameworks such as FedRAMP, ISO, NIST CSF, SOX, PCI-DSS, and HITRUST.
Responsibilities
- Proven experience in developing and implementing GRC programs within complex environments.
- Experience in mapping controls, driving implementations, and conducting control testing.
- US residency is required due to data classification requirements.
- Familiarity with GRC tools, particularly Hyperproof, and hands-on experience in their implementation and use.
- Strong understanding of risk management principles and practices.
- Ability to work effectively in a distributed team environment, accommodating multiple time zones (ET and CT).
- CISSP certification (obtained or in progress).
- Develop and implement governance frameworks and control frameworks (FW) across various compliance standards including FedRAMP, ISO, NIST CSF, SOX, PCI-DSS, and Hitrust.
- Conduct risk assessments and ensure findings are integrated into centralized risk registers.
- Collaborate with cross-functional teams to ensure compliance and assurance align with strategic security goals.
- Utilize GRC tools, particularly those experienced with the Hyperproof GRC tool, for analysis, implementation, and assessment.
- Lead control testing efforts and articulate results to meet business leaders' expectations at different organizational levels.
- Drive the mapping and applicability of controls, ensuring comprehensive coverage and effectiveness.
- Provide expertise in reporting on compliance status and recommend improvements to control frameworks.
- Maintain current knowledge of industry trends, emerging technologies, and regulatory changes to enhance the organization's GRC posture.
Qualification
- Bachelor's degree or equivalent combination of education and experience.