GRC Security Compliance Advisor

NTT DATA Services•Plano, TX

3d•$106,575 - $177,625•Hybrid

About The Position

NTT DATA is seeking a GRC Security Compliance Advisor to join their team in Plano, Texas. This is a hybrid role, requiring on-site presence at the client site several times per week. The GRC Security Control Compliance L3 role is responsible for executing and supporting governance, risk, and compliance (GRC) activities related to information security controls, regulatory compliance, audit readiness, and risk management. The role focuses on assessing security controls, monitoring compliance adherence, supporting audits, tracking remediation activities, and ensuring alignment with organizational security policies and industry standards. The GRC Security Compliance Specialist works closely with cybersecurity, infrastructure, cloud, application, risk, audit, and business teams to validate control effectiveness, identify gaps, and drive corrective actions. This role requires hands-on experience in security frameworks, compliance assessments, and operational governance processes.

Requirements

10 years of security experience
Hands-on experience in security frameworks, compliance assessments, and operational governance processes
Knowledge of risk management concepts
Knowledge of systems and network administration (i.e., desktop, server)
Familiarity with information security technologies and issues on multiple platforms
Knowledge of Globally Accepted Information Security Principles
Knowledge of network security that pertains to communications, computer system environments and related infrastructures
Knowledge of server and desktop configurations that will protect systems from unauthorized access and software invasion

Nice To Haves

CISSP
GIAC
SSCP
CEH

Responsibilities

Executing and supporting governance, risk, and compliance (GRC) activities related to information security controls, regulatory compliance, audit readiness, and risk management.
Assessing security controls.
Monitoring compliance adherence.
Supporting audits.
Tracking remediation activities.
Ensuring alignment with organizational security policies and industry standards.
Validating control effectiveness.
Identifying gaps.
Driving corrective actions.