CyberSecurity Specialist

Job Title:CyberSecurity Specialist - Governance, Risk & Compliance (GRC)

Location:Hybrid Phoenix, AZ

Tax Term (W2, C2C):W2

Job Type (Permanent/Contract):Contract

Duration: Long Term

Description:

We are seeking an experienced CyberSecurity Specialist - Governance, Risk & Compliance (GRC) with 10+ years of experience in Information Security, Cybersecurity, Governance, Risk, Compliance (GRC), and ERP Security. The ideal candidate will have expertise in application and data security assessments, Identity and Access Management (IAM), Role-Based Access Control (RBAC), Segregation of Duties (SoD), cloud security, and enterprise risk management. The role involves conducting security assessments, identifying security risks, supporting audits, and collaborating with cross-functional teams to ensure compliance with enterprise security standards.

Role and Responsibilities:

• Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects.
• Review application architecture, integrations, APIs, and data flows to identify security risks.
• Assess sensitive data handling, including Personally Identifiable Information (PII), financial, payroll, and supplier information.
• Evaluate Identity and Access Management (IAM), Role-Based Access Controls (RBAC), Segregation of Duties (SoD), and privileged access.
• Collaborate with Cybersecurity, Enterprise Architecture, Infrastructure, and Application teams during project implementation.
• Review encryption standards for data at rest and data in transit.
• Assess third-party vendors and cloud solutions for security and compliance requirements.
• Track remediation activities and verify implementation of security recommendations.
• Prepare assessment reports, risk documentation, and executive summaries.
• Support internal and external security audits.

Required Skills:

• Governance, Risk & Compliance (GRC)
• Information Security
• Cybersecurity
• Application Security Assessments
• Data Security Assessments
• Cloud Security
• Risk Management
• Identity and Access Management (IAM)
• Role-Based Access Control (RBAC)
• Segregation of Duties (SoD)
• Privileged Access Management
• Secure SDLC
• Data Classification
• Encryption Technologies
• Authentication & Authorization
• API Security
• Application Architecture Review
• Third-Party Risk Assessments
• Vendor Security Assessments
• SaaS Security
• ERP Security
• Oracle HCM Security
• Finance Application Security
• Supply Chain Security
• AWS
• Microsoft Azure
• Google Cloud Platform (GCP)
• Vulnerability Management
• Risk Assessment Methodologies
• Security Audits
• Compliance
• Security Documentation
• Executive Reporting
• Java (Preferred)
• Python (Preferred)

Qualifications:

• Bachelor's degree in Computer Science, Information Security, Information Systems, or a related field.
• 10+ years of experience in Information Security, Cybersecurity, Governance, Risk & Compliance (GRC), or ERP Security.
• Experience conducting security assessments for SaaS platforms, preferably Finance, Supply Chain, and Oracle HCM.
• Strong understanding of IAM, RBAC, SoD, authentication, authorization, encryption technologies, data classification, Secure SDLC, and cloud security principles.
• Experience conducting security architecture and application security reviews.
• Knowledge of AWS, Azure, or Google Cloud Platform security.
• Hands-on experience with security automation using Java or Python is preferred.
• Knowledge of ERP security models and Segregation of Duties (SoD).
• Experience with vulnerability management and risk assessment methodologies.
• Strong analytical, documentation, communication, and stakeholder management skills.
• Ability to collaborate effectively with cross-functional business and technical teams.