Join arenaflex, a leading innovator in the field of cybersecurity, as a highly skilled GRC Professional to guide GRC-related activities and ensure the smooth execution of various tasks within the team. As a key member of the Cybersecurity Crew, you will play a vital role in formulating and implementing techniques and recommendations to help arenaflex align with its commercial goals while dealing with threats correctly and meeting industry guidelines and standards.
**About arenaflex**
arenaflex is a cutting-edge organization that specializes in cybersecurity solutions, aiming to ease the magic of innovation and technology. Our team of experts is dedicated to staying ahead of the curve, constantly exploring new innovations in the field of cybersecurity. As a member of our team, you will have the opportunity to work on exciting projects, collaborate with talented individuals, and contribute to the growth and success of arenaflex.
**Job Summary**
We are seeking an experienced GRC Professional to join our team as a Cyber Protection & Compliance Specialist. In this role, you will be responsible for guiding GRC-related activities, managing internal safety compliance needs, and implementing regulations, tactics, and frameworks at arenaflex. You will work closely with the Manager (Governance, Threat, and Compliance), Cyber, and Statistics Safety to ensure the smooth execution of various tasks and projects.
**Key Responsibilities**
* Assist in the management of arenaflex's Third-Party/ Internal Risk Management (TPRM) software
* Help the Walt Disney Organization's (arenaflex) global Third-Party/Internal Risk Method for wearing out cyber danger-related due diligence exams
* Validate incoming Third-Party/Internal Risk Assessment requests, working with business stakeholders to confirm the details of the request and the scope of the engagement
* Coordinate the distribution of due diligence questionnaires to internal stakeholders/Third-Party, review submitted questionnaires for completeness, and decide risks arising from the current design and operational effectiveness of the internal/Third-Party's security controls
* File responses, associated findings, and remediation plans in the arenaflex systems
* Draft/review reviews for the checks performed and ensure respective business stakeholders finalize critiques
* Be a strong liaison to ensure any queries are responded to concerning the Risk Control Technique and Evaluation to the business or Third-Party as required
* Carry out continuous tracking of the Third-Party via arenaflex systems for current/new findings and report any findings to closure
* Perceive opportunities for improvement within the arenaflex systems and strategies
* Work intensely with Chance Lead/Supervisor to time-table and execute a range of different assisting activities related to the Chance Management Program
**Governance, Threat, and Compliance**
* Lead and assist in the improvement of cybersecurity hazard and compliance-related strategies to ensure treatment of cybersecurity chance consistent with the agency's threat urge for food
* Maintain and document compliance towards information safety-associated guidelines and processes through planning, checking out, remediating, tracking, and reporting on manipulate critiques and threat checks
* Lead development and shipping of compliance and danger education and ongoing communications that assist power tradition of protection and compliance
* Retaining abreast of regulatory changes, new guidelines, technology, and internal policy modifications on the way to further pick out new key chance regions
* Lead the team to preserve and guide ISO 27001 popular
**Competencies & Attributes for Fulfillment**
* Understanding and competencies
* Outstanding stakeholder management
* Working understanding of information security-related high-quality practices and requirements consisting of ISO 2700x, SOC 2 necessities, SSAE 16/18 requirements, and many others
* Experience in the control of hazard, controls, and compliance
* Expertise of hazard evaluation methodologies – qualitative/quantitative
* Super analytical and problem-solving abilities
* Super presentation making and delivery abilities
**Personal Attributes**
* Robust interpersonal abilities
* Ability to navigate rapid-paced surroundings and be bendy with working hours
* Fantastic communication abilities, both verbal and written
* Adapt speedily to converting conditions and power high-quality change
**Preferred Training & Experience**
* Applicable Bachelor's/Grasp's diploma from an accepted university or equivalent experience
* 4 years of enjoy throughout Third-Party Risk Control, Records Security, and Audit & Compliance Tracking (minimum of 2-Three years in TPRM/Internal Audit)
* Preferred revel in with a massive company and/or large four accounting company
* One or greater credentials - CISA, CRISC, ISO27001 L./LI, CISSP
* Experience in AI/ML is a plus
**What We Offer**
* Competitive salary of $80,000 per year
* Opportunity to work with a leading innovator in the field of cybersecurity
* Collaborative and dynamic work environment
* Professional development and growth opportunities
* Comprehensive benefits package, including health insurance, retirement plan, and paid time off
* Flexible work arrangements, including remote work options
**How to Apply**
If you are a motivated and experienced GRC Professional looking for a new challenge, please submit your application, including your resume and a cover letter, to [insert contact information]. We look forward to hearing from you!
**About arenaflex Careers**
At arenaflex, we are committed to attracting and retaining the best talent in the industry. Our team is passionate about innovation, collaboration, and excellence, and we are looking for like-minded individuals to join us on our journey. If you are interested in learning more about arenaflex and our career opportunities, please visit our website at [insert website URL].
**Tips for Applying**
* Make sure to tailor your application to the specific job requirements and qualifications
* Highlight your relevant experience and skills, and provide specific examples of your accomplishments
* Show enthusiasm and passion for the industry and the company
* Demonstrate your ability to work collaboratively and effectively in a team environment
* Follow up with a phone call or email to express your interest in the position and to inquire about the status of your application
**Contact Us**
If you have any questions or would like to learn more about the position, please do not hesitate to contact us at [insert contact information]. We look forward to hearing from you!