CyberSecurity Specialist - GRC

Hello

Hope you're doing great.

We are currently looking for a CyberSecurity Specialist - GRC for an immediate need. This is a client-facing role, and the candidate will have regular interactions with various client managers.

CyberSecurity Specialist - GRC
Location: Phoenix, AZ- Hybrid

What are the top 3 skills required for this role?
1. Application & Data Security Assessments
2. IAM / RBAC / SoD
3. Cloud Security & Risk Management
Job Description/ Responsibilities
Key Responsibilities
Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects.
Review application architecture, integrations, APIs, and data flows to identify security risks.
Assess sensitive data handling, including Personally Identifiable Information (PII), financial, payroll, and supplier information.
Evaluate identity and access management (IAM), role-based access controls (RBAC), segregation of duties (SoD), and privileged access.
Collaborate with cybersecurity, enterprise architecture, infrastructure, and application teams during project implementation.
Review encryption standards for data at rest and in transit.
Assess third-party vendors and cloud solutions for security and compliance requirements.
Track remediation activities and verify implementation of security recommendations.
Prepare assessment reports, risk documentation, and executive summaries.
Support internal and external security audits.
Required Qualifications
Bachelor s degree in Computer Science, Information Security, Information Systems, or a related field.
3 8+ years of experience in Information Security, Cybersecurity, Governance, Risk, Compliance (GRC), or ERP Security.
Experience with security assessments of SaaS platforms, preferred: Finance, Supply Chain, and Oracle HCM.
Strong understanding of:
o Identity and Access Management (IAM)
o Data Classification
o Encryption Technologies
o Authentication and Authorization
o Secure SDLC
o Cloud Security Principles
Preferred Skills
Experience conducting security architecture or application security reviews.
Understanding of cloud platforms such as AWS, Azure, or Google Cloud.
Hands-on experience with security automation using Java or Python.
Knowledge of ERP security models and Segregation of Duties (SoD).
Familiarity with vulnerability management and risk assessment methodologies.
Strong analytical, documentation, and communication skills.
Ability to work effectively with cross-functional business and technical teams.