Title: Information Security GRC Specialist

Location: Miramar, FL / Hybrid 3 days in office

Direct Hire

Salary: $85,000 - $90,0000/year + 5% discretionary bonus + benefits

Will work on the governance of the information security program, regulatory exams and submissions, cyber risk reporting, and vendor risk oversight.

Requirements

• 3+ years in GRC, information security, audit, or risk management REQUIRED
• Bachelor’s degree in Cybersecurity, Risk Management, Information Technology, or a related field; college degree required.​

• Experience with NYDFS 500, GLBA, FFIEC CAT, NIST CSF, NIST 800-53 - 
• Experience with ServiceNow GRC (risk, compliance, dashboards), Smartsheet, Qualys or similar GRC security tooling, or others.
• Experience designing and maintaining KRI/KPI dashboards and prepare regulatory and executive-level submissions.

• Certifications: CRISC, CISA a plus.​

Responsibilities

• Help draft and coordinate all information security regulatory submissions (e.g., DORA, GLBA, ECB and similar obligations).
• Help prepare quarterly ITOOC materials and CISO briefing packages (e.g., GIOC, IT Interlock) and maintain enterprise security policies aligned to NIST CSF.

• Support the cyber KRI program, including collection, analysis, and reporting to GIOC (monthly), ITOOC (quarterly), and regulators as required.
• Help maintain and update control mappings between standards and frameworks (e.g., GLBA to Head Office risk taxonomy, ISO 27001 to NIST CSF/800-53).

• Help conduct security risk assessments and validations for IT critical vendors and maintain a vendor risk register.
• Track control gaps against NIST 800-53, remediation timelines, and contractual security requirements.

Ascendo is a certified minority owned staffing firm, and we welcome and celebrate diversity. Ascendo is an Equal Opportunity Employer and does not discriminate on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, parental status, military service or any other characteristic protected by federal, state or local law.

Contact information

Ruben Rabines