Introduction to arenaflex
arenaflex is a leading organization in the field of cybersecurity, dedicated to protecting its assets and ensuring the highest level of compliance with industry standards and regulations. As a remote data entry and GRC professional, you will be part of a dynamic team that is passionate about cybersecurity and committed to delivering exceptional results. Our team is comprised of experienced cybersecurity specialists who formulate and implement techniques and recommendations to help the organization align with its business goals while managing risks effectively and meeting industry guidelines and standards.
Job Overview
We are seeking an experienced data entry and GRC professional to join our team as a remote, part-time or full-time specialist. As a key member of our cybersecurity team, you will be responsible for guiding GRC-related activities, ensuring clean and efficient execution of various tasks, and assisting in the management of internal security compliance requirements and implementation of regulations, tactics, and frameworks. Your expertise will play a critical role in supporting the organization's risk management program and ensuring the highest level of compliance with industry standards and regulations.
Key Responsibilities
- Third-party risk management (TPRM) software management and maintenance
- Assisting in the development and implementation of the organization's global third-party/internal risk method for conducting cyber risk-related due diligence exams
- Validating incoming third-party/internal risk assessment requests and operating with business stakeholders to confirm the details of the request and the scope of the engagement
- Conducting kick-off sessions with business stakeholders and related third-parties for conducting the TPA
- Coordinating the distribution of due diligence questionnaires to internal stakeholders/third-parties, reviewing submitted questionnaires for completeness, and identifying risks arising from the current design and operational effectiveness of the internal/third-party's security controls
- Filing responses, associated findings, and remediation plans in the arenaflex systems
- Drafting/reviewing reports for the checks performed and ensuring respective business stakeholders finalize reviews
- Serving as a strong liaison to ensure any queries are responded to concerning the risk control technique and evaluation to the business or third-parties as required
- Carrying out continuous monitoring of third-parties via arenaflex systems for current/new findings and tracking any findings to closure
- Identifying opportunities for improvement within the arenaflex systems and strategies
- Working closely with the risk lead/supervisor to schedule and execute a range of different supporting activities related to the risk management program
Governance, Risk, and Compliance
In this role, you will also be responsible for leading and supporting the development of cybersecurity risk and compliance-related strategies to ensure treatment of cybersecurity risk consistent with the organization's risk appetite. You will maintain and document compliance towards information security associated guidelines and processes through planning, testing, remediating, monitoring, and reporting on control reviews and risk assessments. Additionally, you will lead the development and delivery of compliance and risk education and ongoing communications that support a culture of security and compliance.
Essential Qualifications
To be successful in this role, you will need to possess the following essential qualifications:
- Relevant bachelor's/master's degree from an accredited university or equivalent experience
- Minimum of 4 years of experience in third-party risk management, records security, and audit & compliance tracking (minimum of 2-3 years in TPRM/internal audit)
- Preferred experience with a large company and/or large four accounting firm
- One or more credentials - CISA, CRISC, ISO27001 L. /LI, CISSP
- Experience in AI/ML is a plus
Skills and Competencies
In addition to the essential qualifications, you will need to possess the following skills and competencies:
- Outstanding stakeholder management skills
- Working understanding of information security related high-quality practices and requirements, including ISO 2700x, SOC 2 requirements, SSAE 16/18 requirements, and others
- Experience in the control of risk, controls, and compliance
- Expertise in risk evaluation methodologies – qualitative/quantitative
- Super analytical and problem-solving abilities
- Super presentation making and delivery abilities
- Strong interpersonal skills
- Ability to navigate rapid-paced environments and be flexible with working hours
- Fantastic communication abilities, both verbal and written
- Adapt quickly to changing conditions and drive high-quality change
Career Growth Opportunities and Learning Benefits
At arenaflex, we are committed to providing our employees with opportunities for career growth and development. As a remote data entry and GRC professional, you will have access to a range of training and development programs, including:
- Professional certifications and training programs
- Mentorship and coaching from experienced professionals
- Opportunities for career advancement and promotion
- Access to industry-leading technologies and tools
Work Environment and Company Culture
At arenaflex, we pride ourselves on our dynamic and supportive work environment. As a remote employee, you will be part of a global team that is passionate about cybersecurity and committed to delivering exceptional results. Our company culture is built on the following values:
- Integrity and trust
- Collaboration and teamwork
- Innovation and creativity
- Customer focus and satisfaction
- Continuous learning and improvement
Compensation, Perks, and Benefits
As a remote data entry and GRC professional at arenaflex, you will be eligible for a range of compensation, perks, and benefits, including:
- Competitive salary and bonus structure
- Comprehensive health and wellness program
- Retirement savings plan and matching program
- Paid time off and holidays
- Professional development and training programs
- Access to industry-leading technologies and tools
Conclusion
If you are a motivated and experienced data entry and GRC professional looking for a new challenge, we encourage you to apply for this exciting opportunity. As a remote employee at arenaflex, you will be part of a dynamic team that is passionate about cybersecurity and committed to delivering exceptional results. With a range of career growth opportunities, learning benefits, and a supportive work environment, this is an opportunity not to be missed. Apply now to join our team and take your career to the next level!
Apply Now