GRC Compliance Specialist

2 weeks ago


Pittsburgh, Pennsylvania, United States Virtual Full time
Job Summary

We are seeking a highly skilled Governance, Risk, and Compliance (GRC) Analyst to join our team at Virtual. The successful candidate will be responsible for implementing, maintaining, and improving policies, standards, procedures, and internal controls to ensure compliance with applicable regulatory and legal requirements, and information security best practices.

Key Responsibilities
  • Conduct gap analysis, audit management, and risk assessments to identify and mitigate risks to our organization.
  • Implement and maintain policies, standards, procedures, and internal controls to ensure compliance with regulatory and legal requirements.
  • Develop and maintain program documentation, policies, standards, guidelines, and frameworks.
  • Educate risk owners on risk management best practices and work with key stakeholders to develop and implement risk controls and risk treatment plans.
  • Assist in the identification of risk trends by establishing and monitoring key performance and key risk indicators via risk and business impact assessments.
  • Internally assess, evaluate, and make recommendations regarding the adequacy of implemented security controls.
  • Explore opportunities to improve GRC processes through automation and continuous monitoring of information security controls, risks, and exceptions.
  • Manage the security exception process, including the completion of security exceptions, tracking, and following up on alternative mitigating action items.
  • Coordinate and track security-related audits, including scope of audits, stakeholder engagement, and deliverable timelines.
Requirements
  • Strong understanding of fundamental information security concepts and technology.
  • Knowledge of information security risk management frameworks and compliance practices.
  • Knowledge of applicable information security management, governance, and compliance principles, practices, laws, rules, and regulations.
  • Excellent analytical, problem-solving, and decision-making skills.
  • Strong communication (written and verbal) and presentation skills.
  • Strong work ethic with attention to detail.
  • Willingness to learn and adapt as the situation arises.
  • Skilled at applying a risk-based approach to planning, executing, and reporting on audit engagements and auditing process.
  • Skilled in security project management and planning.
  • Ability to effectively communicate technical issues to diverse audiences, both in writing and verbally.
  • Ability to work with cross-functional teams across organizational and cultural boundaries to achieve policy and process compliance.
  • Ability to develop security standards and guidelines based on best practices and industry standards.
  • Ability to work independently and manage a fluid workload.
Preferred Qualifications
  • 5+ years of experience in Information Technology, Security Analysis, Governance, Risk and Compliance and/or Internal Audit management.
  • 2+ years of Project Management experience.
  • Experience working in a highly regulated industry vertical.
  • Experience working with GRC automation platforms.
  • Experience in a SaaS company environment; Cloud Security experience is a plus.
  • Experience performing information security audits or risk assessments.
  • Experience managing compliance-driven readiness activities as well as remediation and certification efforts.

Virtual is an equal opportunity employer and welcomes applications from diverse candidates. We are committed to creating an inclusive work environment that values diversity and promotes equal opportunities for all employees.



  • Pittsburgh, Pennsylvania, United States Virtual Full time

    About the Role:We are seeking a highly skilled GRC Security Specialist to join our team at Virtual. As a key member of our organization, you will play a critical role in expanding our knowledge in the GRC practice and driving the growth of our security services.Key Responsibilities:Advise clients on information security concepts using presentations, reports,...


  • Pittsburgh, Pennsylvania, United States Virtual Full time

    Job Title: GRC EngineerJoin our team of experts in Governance, Risk, and Compliance (GRC) as a GRC Engineer. In this role, you will be responsible for expanding your knowledge in the GRC practice and working with some of the most technologically diverse clients in the U.S.About the RoleWe are seeking a driven individual who is passionate about Security and...


  • Pittsburgh, Pennsylvania, United States Vaco Full time

    About the RoleThis is an exciting opportunity to join Vaco as a GRC Security Specialist, where you will play a key role in expanding our knowledge in the GRC practice. As a passionate advocate for security, you will have the chance to work with some of the most technologically diverse clients in the U.S.Key Responsibilities:Advise others on information...

  • GRC Analyst

    1 week ago


    Pittsburgh, Pennsylvania, United States Vaco Full time

    Job SummaryVaco is seeking a highly skilled GRC Analyst to join our team. As a key member of our Security & Privacy Compliance group, you will contribute to the development and implementation of our Governance, Risk, and Compliance program.Key ResponsibilitiesImplement, maintain, and improve policies, standards, procedures, and internal controls to ensure...


  • Pittsburgh, Pennsylvania, United States ACA Group Full time

    Job SummaryThe Senior AML Compliance Specialist will serve as a dedicated supervisor, relationship manager, and AML subject matter expert for key ACA managed services clients. This role requires strong working knowledge of relevant laws and associated rules and regulatory positions thereunder.Key ResponsibilitiesPerform AML/KYC analysis and risk assessments...


  • Pittsburgh, Pennsylvania, United States Carnegie Mellon University Full time

    Job SummaryCarnegie Mellon University is seeking a highly skilled IT Compliance Specialist to join our team. As an IT Compliance Specialist, you will be responsible for ensuring that our organization adheres to all relevant IT compliance standards and regulations, with a focus on NIST and Cybersecurity Maturity Model Certification (CMMC).Key...


  • Pittsburgh, Pennsylvania, United States MMS Group Full time

    Job Title: Compliance SpecialistMMS Group is seeking an experienced Compliance Specialist to join our team. The Compliance Specialist will perform all management duties associated with certifications for programs such as Section 8 Housing Choice Vouchers, Family Self Sufficiency, Moderate Rehabilitation, HOME, Rural Development, Low Income Housing Tax...


  • Pittsburgh, Pennsylvania, United States Carnegie Mellon University Full time

    Job SummaryWe are seeking a highly skilled IT Compliance Specialist to join our team at Carnegie Mellon University. The successful candidate will be responsible for ensuring that our organization adheres to all relevant IT compliance standards and regulations, with a focus on NIST and Cybersecurity Maturity Model Certification (CMMC).Key...


  • Pittsburgh, Pennsylvania, United States Carnegie Mellon University Full time

    Job SummaryWe are seeking a highly skilled IT Compliance Specialist to join our team at Carnegie Mellon University. The successful candidate will be responsible for ensuring that our organization adheres to all relevant IT compliance standards and regulations, with a focus on NIST 800-171 and Cybersecurity Maturity Model Certification (CMMC).Key...


  • Pittsburgh, Pennsylvania, United States Carnegie Mellon University Full time

    Job SummaryWe are seeking a highly skilled IT Compliance Specialist to join our team at Carnegie Mellon University. The successful candidate will be responsible for ensuring that our organization adheres to all relevant IT compliance standards and regulations, with a focus on NIST 800-171 and Cybersecurity Maturity Model Certification (CMMC).Key...


  • Pittsburgh, Pennsylvania, United States Carnegie Mellon University Full time

    Job SummaryWe are seeking a highly skilled IT Compliance Specialist to join our team at Carnegie Mellon University. The successful candidate will be responsible for ensuring that our organization adheres to all relevant IT compliance standards and regulations, with a focus on NIST and Cybersecurity Maturity Model Certification (CMMC).Key...


  • Pittsburgh, Pennsylvania, United States Utilities Service Co Inc Full time

    Job SummaryWe are seeking a highly skilled Environmental Specialist to join our team at Utilities Service Co Inc. The successful candidate will be responsible for ensuring compliance with environmental regulations and laws related to land clearing and linear construction projects.This is a field position that requires the ability to work independently and as...


  • Pittsburgh, Pennsylvania, United States Carnegie Mellon University Full time

    Job SummaryCarnegie Mellon University is seeking a highly skilled IT Compliance Specialist to join our team. As a key member of our Information Technology Services department, you will be responsible for ensuring our organization adheres to all relevant IT compliance standards and regulations, with a focus on NIST and Cybersecurity Maturity Model...

  • Compliance Specialist

    1 month ago


    Pittsburgh, Pennsylvania, United States MMS Group Full time

    Job DescriptionMMS Group is a leading provider of property management services, dedicated to delivering high-quality solutions to our clients. We are seeking an experienced Compliance Specialist to join our team and support our mission to provide excellent service to our clients and their residents.The Compliance Specialist will play a critical role in...


  • Pittsburgh, Pennsylvania, United States Carnegie Mellon University Full time

    Job SummaryCarnegie Mellon University is seeking a highly skilled IT Compliance Specialist to join our team. As a key member of our Information Technology Services department, you will be responsible for ensuring our organization adheres to all relevant IT compliance standards and regulations, with a focus on NIST and Cybersecurity Maturity Model...


  • Pittsburgh, Pennsylvania, United States Carnegie Mellon University Full time

    About the Role:Carnegie Mellon University is seeking a highly skilled and detail-oriented IT Compliance Specialist to join our team. As a key member of our Information Technology Services department, you will be responsible for ensuring that our organization adheres to all relevant IT compliance standards and regulations, with a focus on NIST and...


  • Pittsburgh, Pennsylvania, United States Carnegie Mellon University Full time

    Job SummaryWe are seeking a highly skilled and detail-oriented IT Compliance Specialist to join our team at Carnegie Mellon University. The successful candidate will be responsible for ensuring that our organization adheres to all relevant IT compliance standards and regulations, with a focus on NIST and Cybersecurity Maturity Model Certification (CMMC).Key...


  • Pittsburgh, Pennsylvania, United States Carnegie Mellon University Full time

    Job Summary:We are seeking a highly skilled IT Compliance Specialist to join our team at Carnegie Mellon University. The successful candidate will be responsible for ensuring that our organization adheres to all relevant IT compliance standards and regulations, with a focus on NIST and Cybersecurity Maturity Model Certification (CMMC).Key...


  • Pittsburgh, Pennsylvania, United States Inova Health System Full time

    Quality Assurance SpecialistThe Quality Assurance Specialist will assist and support Senior Analysts in maintaining specifications, packaging and supplier approvals, certifications and other tasks as required by Quality Assurance leadership.Key Responsibilities:Complete packaging artwork approvals for primary and secondary packaging items for all East Coast...


  • Pittsburgh, Pennsylvania, United States Logix Guru on behalf of our client Full time

    Logix Guru on behalf of our client is seeking a Flood Compliance and Quality Review Specialist to support their team in a dynamic environment.Responsibilities:- Conduct thorough reviews of flood compliance data- Ensure accuracy and quality of flood compliance reports- Collaborate with team members to achieve project goalsRequirements:- 4-month contract term-...