Governance Risk and Compliance (GRC) Specialist

Experteer Overview In this role you oversee cybersecurity governance, risk and compliance activities to support BTs risk posture. Youll coordinate with stakeholders to manage risk assessments, thirdparty risk, and control improvements, aligning with standards like NIST and ISO. Youll drive remediation tracking and contribute to continuous GRC automation and program enhancements. You join a global team that champions robust internal controls and proactive risk management. Compensaciones / Beneficios Coordinate GRC activities with key stakeholders to enable effective cybersecurity risk assessment and remediation tracking Define control gaps and provide recommendations for improvement, supporting corrective action plans Conduct risk assessments, audits, and investigations to identify compliance issues Perform end-to-end third-party risk assessments and ongoing vendor monitoring Document risk findings, risk ratings, and remediation actions aligned with risk appetite Stay updated on regulatory requirements and best practices related to third-party and supply chain risk Support automation and reporting through GRC tooling (Optro InfoSec) and drive process improvements Collaborate across BT and Cybersecurity functions, contributing to large global governance, risk and compliance projects Educate leadership on control design and operating effectiveness to ensure ongoing compliance Apply best practices to strengthen internal controls and drive risk-prioritized remediation Responsabilidades 7+ years in compliance, controls assurance, internal audit, or related field Extensive knowledge of IT/cyber risk management practices and frameworks Experience monitoring/improving IT general controls, cybersecurity controls, and/or compliance programs Solid understanding of GRC methodologies and automation through tooling Proven experience with information security frameworks (e.g., COBIT, NIST CSF 2.0, ISO 27000, NIST 800-30/37/53) Certifications such as CISA, CRISC, CGEIT or CISSP preferred Ability to manage multiple parallel activities in a fast-paced environment Strong communication skills to influence technical and non-technical audiences Ability to work independently and in cross-functional teams Recognized expert in risk management and third-party risk management Requisitos principales Experteer Overview In this role you oversee cybersecurity governance, risk and compliance activities to support BTs risk posture. Youll coordinate with stakeholders to manage risk assessments, thirdparty risk, and control improvements, aligning with standards like NIST and ISO. Youll drive remediation tracking and contribute to continuous GRC automation and program enhancements. You join a global team that champions robust internal controls and proactive risk management. Compensaciones / Beneficios Coordinate GRC activities with key stakeholders to enable effective cybersecurity risk assessment and remediation tracking Define control gaps and provide recommendations for improvement, supporting corrective action plans Conduct risk assessments, audits, and investigations to identify compliance issues Perform end-to-end third-party risk assessments and ongoing vendor monitoring Document risk findings, risk ratings, and remediation actions aligned with risk appetite Stay updated on regulatory requirements and best practices related to third-party and supply chain risk Support automation and reporting through GRC tooling (Optro InfoSec) and drive process improvements Collaborate across BT and Cybersecurity functions, contributing to large global governance, risk and compliance projects Educate leadership on control design and operating effectiveness to ensure ongoing compliance Apply best practices to strengthen internal controls and drive risk-prioritized remediation Responsabilidades 7+ years in compliance, controls assurance, internal audit, or related field Extensive knowledge of IT/cyber risk management practices and frameworks Experience monitoring/improving IT general controls, cybersecurity controls, and/or compliance programs Solid understanding of GRC methodologies and automation through tooling Proven experience with information security frameworks (e.g., COBIT, NIST CSF 2.0, ISO 27000, NIST 800-30/37/53) Certifications such as CISA, CRISC, CGEIT or CISSP preferred Ability to manage multiple parallel activities in a fast-paced environment Strong communication skills to influence technical and non-technical audiences Ability to work independently and in cross-functional teams Recognized expert in risk management and third-party risk management Requisitos principales