Security Governance and Risk Management Specialist

HEXAWARE

1d • Onsite

About The Position

Job Description: Security Governance and Risk Management Specialist
Location: Dublin, CA (4 days onsite per week)
Role Overview
Lead and support the development, implementation, and management of the Security Governance, Risk, and Compliance (GRC) program. Oversee program metrics, regulatory monitoring, risk assessments, third-party risk management, and incident response collaboration.

Requirements

• Experience in security governance, program management, and metrics tracking.
• Strong knowledge of security standards and frameworks (NIST, ISO, PCI).
• Skilled in IT and third-party risk assessments and risk register management.
• Expertise in third-party risk management and vendor assurance.
• Ability to lead audits, manage compliance, and coordinate incident response.
• Strong communication and collaboration skills.

Responsibilities

• Support and manage the Security GRC program and track key metrics.
• Monitor regulatory changes and assess their impact on security controls.
• Develop and maintain security standards, policies, and control frameworks (NIST, ISO, PCI).
• Conduct IT and third-party risk assessments; maintain risk and controls register.
• Manage third-party risk by reviewing vendor certifications and aligning controls.
• Lead or assist in security audits, compliance activities, and incident escalation.
• Participate in security awareness and training programs.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed