GRC Lead

Kforce has a client in Detroit, MI that is seeking a GRC Lead. Responsibilities:

• The GRC Lead is responsible for establishing, implementing, and maintaining a corporate-wide information security governance program designed to help ensure the Security program and it's supporting capabilities and processes are effectively protecting information and system assets
• Responsible for proactively identifying, evaluating and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of the company
• Periodic assessments are expected to be performed to validate that Information Security controls are appropriate and operating effectively
• Bachelor's degree in Computer Science or related field, or equivalent work experience
• Master's degree in Computer Science, Information Security, or related field preferred
• CISSP, CRISC, CISA, CISM or other relevant certifications preferred
• 3-5+ years of information security experience in any combination of risk management, information security or information technology leadership with 5 years of direct managerial experience, with experience managing remote team members across global locations
• 3-5 years participation and experience across various compliance, regulatory and common industry security policy areas (NIST; PCI; FFIEC; ISO; SOX; etc.) as they relate to banking, technology and software industry
• Proficiency in information security domains, including policies and standards, risk and control assessments, access controls, regulatory compliance, technology resiliency, risk and control governance and metrics, incident management, secure systems development lifecycle, vulnerability management and data protection
• Excellent communication (verbal and written) and customer service skills; Strong interpersonal, communication, and presentation skills applicable to a wide audience including senior and executive management
• Excellent organization/project planning, time management, and change management skills across multiple functional groups and departments
• Demonstrate relevant leadership competencies as specified in the Trust's competency definitions