Governance Risk and Compliance (GRC) Specialist, Information Security

Our Purpose

At Majesco, we believe in connecting people and business to Insurance in ways that are Innovative, Hyper-Relevant, Compelling and Personal. We bring together the brightest minds to build the future of Insurance; a world where Insurance makes life and business easier, more connected and better protected.

Cybersecurity GRC Specialist

The Cybersecurity Governance Risk and Compliance Specialist is responsible for ensuring that the organization’s operations and procedures meet industry compliance standards.  This role will research regulations and policies on behalf of the enterprise, communicate the necessary requirements, apply for certifications, and serve as a subject matter expert on all compliance-related matters. As part of a growing Technology team, the Cybersecurity GRC Specialist will play a key role in supporting the security direction of the business, promoting strong risk management and compliance with security-related obligations. 

Roles and Responsibilities 

• Facilitate and respond to customer and compliance audit questions regarding Cybersecurity policy and controls operated by IT (Information Technology) and the business
• Examine internal IT controls, evaluate the design and operational effectiveness, determine exposure to risk, and develop remediation strategies.[JG1] 
• Conduct and respond to Third Party Vendor Risk Assessments to identify and safeguard against undue risk presented by external entities
• Document and monitor the implementation of Cybersecurity polices and Cybersecurity controls for people, process, and technology across the business
• Discuss with stakeholders across the business key Cybersecurity control objectives
• Identify and document business risks, and work with various stakeholders including other members of the Cybersecurity team providing support in governing the risk remediation and risk acceptance processes
• Help develop and improve Cybersecurity metrics that are distributed to senior management
• Provides guidance and risk assessments of new and existing solutions, services, and business processes
• Develop and support policy documents with supporting procedures in support of compliance and Technology
• Provide recommendations and guidance on identified security and control risks.[JG2] 
• In addition to GRC duties there will also be the need to implement and support various Cybersecurity controls in the organization

Key Qualifications

For consideration, you must bring the following minimum skills and behaviors to our team: 

• Proven success in security, information technology or technology risk management related work experience
• Two or more years of GRC experience with a strong understanding of how to design and execute compliance activities
• Understanding of CIS Frameworks, NIST Cybersecurity Framework, ISO, SSAE18 SOC, or other industry standards
•  In addition, preferable skills and behaviors include: 
  • Effective communication and organizational skills, ability to multitask, strong attention to details, excellent problem solving, and follow-up skills required. 
  • Work independently, make decisions and multi-task effectively in a truly diverse, project-oriented environment. 
  • Excellent written communication and time management abilities 
  • Program Management (using frameworks, establishing policies and controls for compliance requirements) 
  • Comfort working with a globally dispersed team relying heavily on communication/collaboration tools and being able to be your own project manager

Education

 A Bachelor’s Degree (or equivalent) and 4+ years of experience in one of the following functions: Corporate/Risk Governance, Compliance, Audit, Cybersecurity, Information Security, or related areas.  

Industry Certifications such as CISSP or CISA a plus

What Majesco Offers:

Majesco is committed to equal pay and transparency.  The annual base salary range for this position is $104,000 - $120,000.  

Please note that the salary range information provided is a general guideline and combines all of the distinct labor markets within the US. It is uncommon for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on a variety of factors.  Majesco considers factors such as (but not limited to) scope and responsibilities of the position, candidate’s work experience, candidate’s work location, education/training, key skills, internal peer equity, external market data, as well as market and business considerations when making compensation decisions.

At Majesco, we offer a comprehensive employe