11/06/2025 updated
ST
100 % available
Senior GRC Specialist - IT Security & Risk Management
Ottawa, Canada
Only remote
Bachelor of Technology - Computer Science & Engineering from JNTU UniversityAuditingAudit ManagementBusiness Continuity and Disaster RecoveryBusiness Continuity PlanningCorrective and Preventive Action (CAPA)ComplianceComputer SecurityDrilling OperationsEngineering Design ProcessGovernance Risk Management and ComplianceIdentity ManagementInformation Security ManagementInfrastructure ManagementISO/IEC 27001PCI Data Security Standards
GRC Framework Implementation
Governance, Risk and Compliance expertise with 5+ years experience in IT GRC audits, risk assessment and security frameworks including NIST, ISO 27001, PCI-DSS, GDPR, and SOC 2
Information Security Management
Comprehensive knowledge in ISMS implementation, cybersecurity maturity assessments, vulnerability scanning, and security threat identification and mitigation
Risk Assessment and Audit Management
Specialized skills in conducting risk assessments, internal IT audits, vendor assessments, and business continuity planning with CAPA remediation processes
Compliance and Regulatory Standards
Deep understanding of industry standards including PCI-DSS, ISO 27001, SOC 2, NIST 800-53, and GDPR compliance requirements
Business Continuity and Disaster Recovery
Experience in BCP and DR planning, coordination of activities and drills for organizational resilience
Third-party Risk Management
Vendor risk assessment capabilities and third-party cybersecurity risk evaluations for on-premise and cloud-based solutions
Security Architecture and Engineering
Design and implementation of security architecture solutions to safeguard critical systems and infrastructure
Identity and Access Management
Oversight of user account provisioning, de-provisioning, and access management controls
Governance, Risk and Compliance expertise with 5+ years experience in IT GRC audits, risk assessment and security frameworks including NIST, ISO 27001, PCI-DSS, GDPR, and SOC 2
Information Security Management
Comprehensive knowledge in ISMS implementation, cybersecurity maturity assessments, vulnerability scanning, and security threat identification and mitigation
Risk Assessment and Audit Management
Specialized skills in conducting risk assessments, internal IT audits, vendor assessments, and business continuity planning with CAPA remediation processes
Compliance and Regulatory Standards
Deep understanding of industry standards including PCI-DSS, ISO 27001, SOC 2, NIST 800-53, and GDPR compliance requirements
Business Continuity and Disaster Recovery
Experience in BCP and DR planning, coordination of activities and drills for organizational resilience
Third-party Risk Management
Vendor risk assessment capabilities and third-party cybersecurity risk evaluations for on-premise and cloud-based solutions
Security Architecture and Engineering
Design and implementation of security architecture solutions to safeguard critical systems and infrastructure
Identity and Access Management
Oversight of user account provisioning, de-provisioning, and access management controls
Project history
Established and standardized GRC Framework, worked on Risk Register management, implemented ISMS controls, conducted cybersecurity maturity assessments, and performed vendor assessments and audits
Conducted comprehensive risk assessments and vulnerability scanning, developed ISMS based on ISO 27001, designed security architecture solutions, executed regular security assessments and audits, and coordinated BCP/DR activities