Cybersecurity Governance and Risk Specialist

Position Overview

• Location Type: Remote
• Job Type: Full-time
• Salary: Not specified

We’re looking for a Cybersecurity Governance and Risk Specialist to join our Cybersecurity team and its existing efforts to enhance, expand and champion our cybersecurity GRC activities.

In this role, you’ll collaborate with cross-functional teams to drive impactful improvements in cybersecurity governance and risk management while promoting a culture of collaboration, accountability and continuous growth. You will also contribute to shaping our overall cybersecurity strategy, ensuring alignment with industry best practices and regulatory requirements.

Additional responsibilities of this role will include:

• Developing, maintaining and communicating cybersecurity policies, and helping colleagues understand and apply those security policies to their daily work
• Monitoring compliance with internal policies, tracking exceptions and collaborating with teams on exploring alternative risk-reduction measures when necessary
• Monitoring regulatory requirements, noting any changes that could impact the firm and collaborating with the relevant teams to ensure we stay in compliance
• Performing control assessments, helping identify control gaps or weaknesses and working with the relevant teams to implement improvements to reduce our risk exposure
• Supporting the development, automation and maintenance of appropriate metrics to drive informed decision-making
• Performing third-party vendor assessments and working with stakeholders to address risks, contributing to the success of our third-party vendor risk management program
• Participating in the Cybersecurity team’s general activities to stay connected with the team at large

Requirements

• Experience in a similar role
• Demonstrated understanding of industry standards and regulatory requirements
• Familiarity with auditing processes and participation in both internal and external audits
• Positive and collaborative attitude
• Ability to work well with a team and admit to and learn from mistakes
• Strong written and verbal communication skills
• Motivated self-starter with the ability to handle competing priorities
• Strong desire to grow technical understanding of technology, cybersecurity and associated risks
• Detail-oriented and organized

Responsibilities

• Drive impactful improvements in cybersecurity governance and risk management.
• Contribute to shaping the overall cybersecurity strategy.
• Ensure alignment with industry best practices and regulatory requirements.
• Communicate cybersecurity policies effectively.
• Monitor compliance and identify control gaps.
• Implement improvements to reduce risk exposure.
• Develop and maintain cybersecurity metrics.
• Perform third-party vendor assessments.

Application Instructions

• If you're a recruiting agency and want to partner with us, please reach out to agency-partnerships@janestreet.com.