Senior GRC Specialist (Risk and Business Continuity)
Description
Senior GRC Specialist
Job Title: Senior GRC Specialist (Risk and Business Continuity)
Department: Governance, Risk, and Compliance (GRC)
Reports To: Vice President, Information Security and Compliance
Overview
Senior GRC Specialist role is critical in ensuring that the organization's risk management processes are comprehensive, and that effective business continuity strategies are in place to manage and mitigate operational risks.
Key Responsibilities
- Risk Management: Lead the development and implementation of risk management strategies and frameworks. Conduct regular risk assessments to identify, evaluate, and prioritize risks in alignment with corporate objectives.
- Business Impact Analysis (BIA): Conduct and maintain BIAs to determine and quantify the impact of disruptions to business operations and services. Ensure these analyses are updated to reflect changing business conditions.
- Business Continuity Planning (BCP): Develop, implement, and maintain comprehensive BCP strategies to ensure timely recovery of operations in the event of an incident. Coordinate BCP exercises to validate and refine plans.
- Compliance Monitoring: Ensure all risk management and business continuity practices comply with regulatory requirements and industry standards, including ISO 22301, ISO 27001, and other relevant frameworks.
- Training and Awareness: Facilitate training sessions and workshops to raise awareness and competence in risk management, BIA, and BCP across the organization.
- Incident Management Support: Provide expert guidance and support during incidents that trigger business continuity plans. Analyze the effectiveness of response strategies and recommend improvements.
- Reporting and Documentation: Prepare detailed reports on risk exposure, compliance issues, and business continuity readiness for senior management. Ensure all documentation is up-to-date and compliant with legal and regulatory requirements.
Required Qualifications
- Bachelor’s degree in Risk Management, Business Administration, Information Technology, or a related field; Master’s degree preferred.
- Professional certifications such as Certified Risk Manager (CRM), Certified Business Continuity Professional (CBCP), or similar.
- Minimum of 7 years of experience in GRC, with a strong focus on risk management and business continuity planning.
- Proven track record of developing and managing BIA and BCP processes in a complex business environment.
Key Skills
- Excellent analytical and strategic thinking skills.
- Strong project management abilities and leadership skills.
- In-depth knowledge of risk assessment tools and methodologies.
- Experience with GRC platforms and software.
- Effective communication skills, both written and verbal.