GRC Consultant

Emploi pas sur LinkedIn

🕒 il y a 3 mois

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Recevoir des emails pour des emplois à distance

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

NetCov

Site WebLinkedInTous les Emplois

201 - 500 employés

🔒 Cybersecurity

📋 Conformité

🤝 B2B

💰 Private equity en 2022-11

Cybersecurity • Compliance • B2B

NetCov est une entreprise spécialisée en informatique gérée et cybersécurité qui offre des services informatiques gérés, des solutions cloud, la gestion de la conformité, un conseil basé sur l'intelligence artificielle, et la cybersécurité aux entreprises de divers secteurs. Fort de près de 30 ans d'expérience, de plus de 350 employés, et de partenariats avec des fournisseurs tels qu'AWS et Microsoft, NetCov se concentre sur un support informatique sécurisé, évolutif, axé sur l'humain, la conformité réglementaire (y compris la préparation CMMC/NIST), et l'automatisation activée par l'IA pour des organisations telles que les entreprises d'AEC, les coopératives de crédit, les sous-traitants de la défense, les entreprises soutenues par des capitaux privés, et les organisations à but non lucratif.

Description

• Interface with client points of contact as required for onboarding/post sales activity and/or recurring check ins and inquiries. • Continuously monitor and triage requests flowing through an inbound ticket queue. • Participate in the design and execution of risk assessments and security audits. • Participate in the management of employee awareness campaigns for both staff and clients, including phishing simulations and awareness training. • Perform CMMC Readiness against 110 controls, delivering a comprehensive SSP and POAM with assisted attestation and SPRS reporting. • Manage client projects from start to finish, defining milestones and deliverables and meeting determined deadlines. • Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, regulatory requirements, improved security processes, and the development of new attacks and threat vectors. • Document best practices and user guides using available collaboration tools and workspaces. • Develop and maintain both internal and client-facing documentation, policy libraries and delivery metrics for end-to-end client security and compliance. • Provide timely, detailed, and complete reports on vulnerabilities, security events and incidents in a client facing setting. • Triage internal security and permissions requests from staff, including but not limited to systems access and employee terminations. • Oversee upkeep of internal SOP, ensuring adjustments to protocol are made as tools and methods evolve. • Perform QA workflow as necessary to improve upon consistency of product and client experience. • Coordinate resources and/or route audit requests appropriately for high volume or regulated client points of contact. • Ability to manage a changing and evolving workload and function as decision-maker where needed. • Provide after-business hours support if requested and as applicable to geographically distributed client base. • Perform other duties and tasks as assigned.

🎯 Exigences

• 3-5 years of experience working in an Information Security and/or Compliance capacity • Customer service and client facing experience preferred. • CMMC CCP or CCA is a requirement for this role. • CMMC RPA will be considered preferentially. • CompTIA Security+ • Strong problem-solving and analytical skills. • Excellent customer service skills, including understanding how to de-escalate, how to soothe and how to deliver the most efficient solution. • Strong communication skills, both verbal and written. • Familiarity with regulatory frameworks such as NIST/CMMC, ISO 27001, HIPAA/Hitech, GDPR are a big plus. • Strong organizational, operational, and inter-personal skills. • Strong familiarity with Windows desktop and server operating systems. • Strong familiarity with Microsoft Office 365 and Azure Active Directory support and implementation. • Strong understanding of networking concepts, familiarity with routers, firewalls, access points, IDS/IPS and VPN. • Familiarity with Email threat protection tools and concepts. • Familiarity with RMM and asset management tools are a big plus. • Understanding of tools and processes used in security monitoring and incident response. • Experience with Endpoint Detection & Response (EDR) tools. • Ability to understand vulnerabilities at a technical level and capable of recommending and effectively communicating mitigation strategy. • Ability to communicate and write in English professionally. • Reliable personal transportation for use in traveling to clients' offices is essential.