Grc Specialist

Overview

1) Minimum bachelor's degree level or holds a relevant professional qualification or relevant experience (typically at least 6 years) in information security (GRC).

2) Educated to bachelor's degree level, holds a relevant professional qualification, and may have a postgraduate qualification such as an MSc, MBA, or other appropriate business, engineering, scientific or industry qualification.

• Have knowledge and experience as below:
  • Applying specific quality standards to all tasks undertaken to ensure that deliverables are accurate and complete.
  • Principles, practices, tools, and techniques of IT auditing.
  • Methods and techniques for reporting progress and financial conformance against an agreed plan.
• Have technical and business skills as below:
  • Communicate well, both orally and in writing, and has the skill to influence through persuasion in a formal context. Has a good overall knowledge of wide areas of information systems practice and applications. Understands the need to maintain a practical and pragmatic approach to standards compliance.
  • The system or method for the management of quality within the employing organizations IT practices, including quality planning, assurance, and control.
• Monitor status of risks, and reports status and need for action to senior colleagues.
• Demonstrate financial awareness as a part of risk management (e.g., cost-effectiveness analysis of proposed counter measures).
• Assist with development of agreed countermeasures and contingency plans.
• Collect and collate evidence as part of formally conducted and planned reviews of activities, processes, products, or services, including information and communications technology applications.
• Examine records as part of specified testing strategies for evidence of compliance with management directives, or the identification of abnormal occurrences.