Experienced Full Stack GRC Professional – Cyber Protection, Governance, Threat, and Compliance Specialist
At arenaflex, we're on a mission to revolutionize the world of entertainment and beyond. As a leader in the industry, we're committed to innovation, creativity, and excellence in everything we do. We're now seeking an experienced Full Stack GRC Professional to join our team as a Cyber Protection, Governance, Threat, and Compliance Specialist. This is an exciting opportunity to contribute to the enchanting world of arenaflex from the comfort of your own home.
About arenaflex
arenaflex is a global leader in the entertainment industry, known for its commitment to innovation, creativity, and excellence. With a rich history of producing beloved films, television shows, and theme park experiences, arenaflex continues to push the boundaries of what's possible. Our team of talented professionals is dedicated to creating immersive and engaging experiences that captivate audiences around the world.
The Cybersecurity Team
Our Cybersecurity Team is a dynamic and collaborative group of experts who work together to protect arenaflex's digital assets and ensure the security of our systems and data. As a Cyber Protection, Governance, Threat, and Compliance Specialist, you'll be part of a team that's passionate about staying ahead of the latest threats and technologies. Our team is committed to innovation, and we're always looking for new ways to improve our processes and stay ahead of the curve.
Key Responsibilities
As a Cyber Protection, Governance, Threat, and Compliance Specialist, you'll be responsible for:
- Assisting the arenaflex Cybersecurity Team in the implementation and management of our Third-Party Risk Management (TPRM) software
- Validating incoming third-party risk assessment requests and working with business stakeholders to confirm the details of the request and the scope of the engagement
- Coordinating the distribution of due diligence questionnaires to internal stakeholders and third-party vendors, reviewing submitted questionnaires for completeness, and identifying potential risks
- Filing responses, associated findings, and remediation plans in arenaflex's systems
- Drafting and reviewing reviews for the checks performed and ensuring that respective business stakeholders finalize critiques
- Serving as a liaison to ensure that any queries are responded to concerning the risk control technique and evaluation to the business or third parties as required
- Conducting continuous tracking of third-party vendors via arenaflex's systems for current/new findings and escalating any findings to closure
- Identifying opportunities for improvement within arenaflex's systems and strategies
- Working intensely with the Chance Lead/Supervisor to time-table and execute a range of different assisting activities related to the chance management program
Governance, Threat, and Compliance
As a Cyber Protection, Governance, Threat, and Compliance Specialist, you'll also be responsible for:
- Leading and assisting the improvement of cybersecurity risk and compliance-related strategies to ensure the treatment of cybersecurity risk consistent with the agency's threat appetite
- Maintaining and documenting compliance towards information security-related guidelines and processes through planning, checking out, remediating, tracking, and reporting on manipulate critiques and threat checks
- Leading the development and shipping of compliance and danger education and ongoing communications that assist power tradition of protection and compliance
- Retaining abreast of regulatory changes, new guidelines, technology, and internal policy modifications to further pick out new key chance regions
- Leading the team to preserve and guide ISO 27001 popular
Competencies & Attributes for Fulfillment
To be successful in this role, you'll need to possess:
- Understanding and competencies in GRC, cybersecurity, and compliance
- Outstanding stakeholder management
- Working understanding of information security-related quality practices and requirements, including ISO 2700x, SOC 2 requirements, SSAE 16/18 requirements, and others
- Experience in the control of risk, controls, and compliance
- Expertise of risk evaluation methodologies – qualitative/quantitative
- Super analytical and problem-solving abilities
- Super presentation making and delivery abilities
Personal Attributes
As a Cyber Protection, Governance, Threat, and Compliance Specialist, you'll need to possess:
- Robust interpersonal abilities
- Ability to navigate rapid-paced surroundings and be bendy with working hours
- Fantastic communication abilities, both verbal and written
- Adapt speedily to converting conditions and power high-quality change
Preferred Qualifications & Experience
* Applicable Bachelor's/Grasp's diploma from an accepted university or equivalent experience
- 4 years of enjoy throughout third-party risk control, records security, and audit & compliance tracking (minimum of 2-3 years in TPRM/internal audit)
- Preferred revel in with a massive company and/or large four accounting company
- One or greater credentials - CISA, CRISC, ISO27001 L./LI, CISSP
- Experience in AI/ML is a plus
About arenaflex Careers
We're excited to hear from you! If you're passionate about cybersecurity, governance, threat, and compliance, and you're looking for a challenging and rewarding role, we'd love to hear from you. Please submit your application, including your resume and a cover letter, to [insert contact information].
What We Offer
As a Cyber Protection, Governance, Threat, and Compliance Specialist at arenaflex, you'll enjoy a competitive salary, comprehensive benefits package, and opportunities for career growth and development. You'll also be part of a dynamic and collaborative team that's passionate about innovation and excellence.
How to Apply
If you're ready to take your career to the next level, please submit your application, including your resume and a cover letter, to [insert contact information]. We can't wait to hear from you! Apply Job! Apply for this job