GRC Specialist

BCM One is looking to add a GRC Specialist to its growing global compliance team. The role will bridge Information Security Governance, Risk & Compliance (GRC) and IT Service Management (ITSM) disciplines to strengthen the global IT operations and compliance posture.

Requirements

• 5+ years of experience in Security Governance, Risk & Compliance
• Strong knowledge of GRC frameworks such as ISO 27001, SOC 2, NIST 800-53, CIS Controls, GDPR
• Proven experience supporting internal and external audits
• Ability to identify, assess, and prioritize risks using risk-based thinking and sound judgment
• Skilled at monitoring security and compliance performance through KPIs, SLAs, and OLAs
• Strong documentation, analytical, organizational skills, and attention to detail
• Ability to manage multiple priorities and deadlines in a fast-paced, global environment
• Strong communication skills, able to explain technical and compliance concepts to non-technical audiences
• Experience working cross-functionally with IT, security, compliance, and business teams across geographies
• Familiarity with ITIL processes (incident, problem, change, request, asset/configuration management)

Benefits

• Competitive industry salaries
• Comprehensive medical, dental, and vision insurance
• Company-provided life and disability insurance
• Matching 401(k) plan
• Employee Emergency Assistance Fund
• Paid holidays and vacation time
• FMLA