Role: Specialist
Required Skills: Cyber Security | GRC
Qualification: BACHELOR OF COMPUTER SCIENCE
Experience: 10 - 15 Years
Function: TECHNOLOGY
Apply By: 2026-12-20
Must Have Technical/Functional Skills
- Working understanding of cybersecurity, risk management, compliance, vulnerability management, audit, or third-party risk concepts.
- Ability to evaluate common security evidence, identify incomplete or inconsistent information, and escalate potential risk concerns.
- Strong attention to detail, documentation discipline, and ability to manage multiple assessment or remediation activities concurrently.
- Clear written and verbal communication skills, including the ability to summarize technical or control information for business stakeholders.
- Proficiency with Microsoft Office; experience with GRC, vendor risk, vulnerability management, ticketing, or reporting tools is preferred.
- Experience contributing to audits, regulatory compliance activities, control testing, risk assessments, or vendor due diligence reviews.
- Familiarity with frameworks and regulations such as NIST CSF, NIST 800-53, NYDFS, GLBA, SOX, SOC reporting, ISO 27001, or related standards.
- Relevant certification or progress toward CRISC, CISA, Security+, CDPSE, CTPRP, or a similar certification is a plus.
Roles & Responsibilities
- Execute assigned GRC activities, including risk documentation, control mapping, exception tracking, and assessment record maintenance.
- Support policy, standard, and procedure lifecycle activities by coordinating updates, collecting input, and validating evidence of approvals.
- Prepare materials for governance forums, risk reviews, audit discussions, and compliance reporting using established templates and data sources.
- Coordinate vendor assessment intake, due diligence requests, follow-ups, and stakeholder communications through closure.
- Review vendor questionnaires, SOC reports, ISO certifications, penetration test summaries, vulnerability information, business continuity documentation, and other due diligence artifacts for completeness and risk relevance.
- Document assessment conclusions, remediation items, missing evidence, and residual risk considerations in alignment with defined TPRM procedures.
- Support vulnerability governance activities by tracking remediation status, exception requests, risk acceptance documentation, and aging issues.
- Partner with technology and risk stakeholders to validate ownership, required evidence, and remediation progress for identified vulnerabilities or control gaps.
- Contribute to recurring metrics and reporting related to vulnerability trends, overdue remediation, exception volume, and issue closure.
- Collect, organize, and validate audit evidence in accordance with defined control objectives and regulatory expectations.
- Assist with remediation tracking for audit findings, control gaps, risk acceptances, and compliance action items.
- Maintain documentation aligned to frameworks and requirements such as NIST CSF, NIST 800-53, NYDFS, GLBA, SOX, SOC reporting, and ISO 27001.
- Maintain and enhance routine metrics for risk assessment volume, vendor status, vulnerability remediation, open issues, and documentation completeness.
- Identify opportunities to improve templates, procedures, evidence requests, stakeholder instructions, and process consistency.
- Support process improvement efforts by documenting pain points, recommending practical updates, and helping implement approved changes.
TCS Employee Benefits Summary:
Discretionary Annual Incentive.
Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
Family Support: Maternal & Parental Leaves.
Insurance Options: Auto & Home Insurance, Identity Theft Protection.
Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
Time Off: Vacation, Time Off, Sick Leave & Holidays.
Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
Salary Range: $81,000-$109,500 a year