Analyste Sécurité GRC (Intermédiaire)

Responsibilities

• Manage the cybersecurity regulatory compliance program by assessing requirements, collecting evidence, and maintaining documentation
• Monitor regulatory, privacy, and cybersecurity best practice changes and apply GRC expertise across products, practices, and procedures
• Liaise with internal and external auditors to implement and maintain compliance and data protection controls
• Manage cybersecurity examinations from internal control functions (2LoD, 3LoD) and external audits
• Track audit findings and regulatory recommendations
• Collect and automate metrics and reporting to demonstrate risk reduction
• Improve and industrialize operating models (evidence collection, reporting, documentation, and repeatable processes)
• Challenge and enhance existing practices related to regulatory exams, findings management, reporting, and control assessments
...