Risk Management Specialist

🔥 0 minutes ago

🌐 Spain, United Kingdom – Remote

🇪🇸 Spain – Remote 🇬🇧 United Kingdom – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔒 Insurance

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Prosci

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 1994

🏢 Enterprise

📚 Education

💼 Consulting

💰 Private Equity Round on 2016-12

Enterprise • Education • Consulting

Prosci is a global leader in change management solutions, helping organizations and individuals achieve successful transformations. With over 25 years of research and a proven methodology, they empower leaders and teams to overcome change challenges and drive results. Prosci offers personalized solutions, including training, certification, advisory services, and a comprehensive suite of tools and resources to manage change effectively. Their services cater to a wide range of industries, aiming to integrate change management strategies effectively across different sectors. With a commitment to ongoing research and insights, Prosci continues to be a trusted partner for change readiness and implementation, serving clients in over 80 countries.

📋 Description

• Support and strengthen risk management and information security programs • Support deployment and continuous improvement of information security policies, standards, and technical controls • Coordinate Prosci’s ISO 27001:2022 certification and audit activities, including scheduling, evidence collection, and external auditor coordination • Administer compliance tooling such as Vanta • Facilitate ISMS Governance Council activities, maintain the enterprise risk register, and report on risk posture • Conduct information security risk assessments for vendors, projects, and business changes • Track, report, and support remediation of control gaps and audit findings • Define and monitor information security metrics • Advise stakeholders and partner cross-functionally on secure business practices • Support implementation and management of Prosci’s global data privacy program • Monitor alignment with GDPR, CCPA, PIPEDA, LGPD, and other applicable privacy regulations • Partner with Legal and stakeholders to apply privacy requirements to business operations • Coordinate data subject request processes and responses • Maintain privacy policies and external privacy notices • Support employee privacy training and awareness • Support PCI DSS compliance for outsourced, card-not-present payments under SAQ A scope • Maintain PCI scope documentation and SAQ A eligibility • Oversee third-party service providers, vendor inventories, and compliance status • Support PCI assessments, evidence collection, remediation tracking, and reporting • Provide PCI guidance and training • Coordinate PCI compliance activities with internal and external parties • Support client assurance activities, including security questionnaires and compliance documentation • Develop and execute structured risk evaluation for projects and business changes • Review initiatives for information security and data privacy risks and escalate findings • Provide governance forums with updates on risk posture and emerging concerns

🎯 Requirements

• Fluent/Native English • Ability to work independently and prioritize multiple risks and adapt to needed changes • Ability to work with all levels of management/team members • Ability to assume responsibility for work • Ability to pull together disparate pieces of information to analyze risk • Attention to detail and strong organizational skills • Analytical thinking • 4–7 years’ experience in Risk Management • Knowledge of US/international data privacy regulations • Experience with implementation for/maintenance of ISO 27001 certification • Experience with risk evaluation of new projects and vendors • Experience creating risk management solutions • Experience reviewing client DPA and security agreements • Bachelor’s degree • CIPM Certification • Applications and CVs must be submitted in English