Cybersecurity Governance, Risk, and Compliance (GRC) Lead

Artmac • Contract • Stamford, VT, US • 2d ago

Who We Are

Artmac Soft is a technology consulting and service-oriented IT company dedicated to providing innovative technology solutions and services to customers.

Job Description

Job Title : Cybersecurity Governance, Risk, and Compliance (GRC) Lead

Job Type : C2C

Experience : 7–20 Years

Location : Stamford, Vermont

Responsibilities

Strong understanding of global cybersecurity regulations and compliance standards.
Experience with international regulatory frameworks such as DORA, BaFin, and NY DFS.
Ability to conduct risk assessments and audits and provide mitigation strategies.
Proficiency in collaborating with cross-functional teams to develop security controls.
Excellent communication and interpersonal skills to engage with business stakeholders and external agencies.
Strong analytical skills to identify and address compliance gaps.
Ability to manage multiple regulatory requirements and client commitments effectively.
Experience in developing, documenting, and reporting compliance activities.
Certifications in Cybersecurity (e.g., CISSP, CISM, CISA, or equivalent)
Experience in financial services or insurance industries.
Proven track record in managing cybersecurity compliance in complex organizations.
Develop and maintain comprehensive cybersecurity regulatory and compliance programs.
Monitor and interpret evolving cybersecurity regulations and industry standards.
Stay updated on the latest changes in cybersecurity regulatory and compliance landscapes.
Manage all regulatory, compliance, and client commitments in a centralized view.
Conduct regular risk assessments and audits to ensure compliance with global regulations.
Identify compliance gaps and create roadmaps for meeting regulatory standards.
Collaborate with internal teams to design and implement security controls and policies.
Provide expertise on international regulatory frameworks, including NY DFS and DORA.
Maintain comprehensive documentation and reporting related to regulatory compliance.
Liaise with external auditors, regulatory agencies, and client requests as necessary.
Ensure compliance with global regulatory requirements, including DORA (Digital Operational Resilience Act), BaFin (German Federal Financial Supervisory Authority), and NY DFS (New York Department of Financial Services).