کارشناس فناوری اطلاعات | GRC Specialist

ما به دنبال یک متخصص GRC برای پیوستن به تیم امنیت سایبری خود هستیم. در این نقش ، شما به شما اطمینان می دهید که سازمان ما با مدیریت ریسک ، انطباق و فرایندهای حاکمیت ، استانداردهای امنیت اطلاعات داخلی و خارجی را رعایت کند. چارچوب هایی مانند NIST ، COBIT و CIS. چارچوب ها (CIS ، NIST ، COBIT).
- توجه شدید به جزئیات ، ذهنیت تحلیلی و مهارت های ارتباطی.
- گواهینامه هایی مانند امنیت+، CISA ، یا CISSP یک پلاس بزرگ هستند. تیم ها.

---

We are looking for a GRC Specialist to join our cybersecurity team. In this role, you’ll help ensure our organization meets internal and external information security standards by managing risk, compliance, and governance processes.

Key Responsibilities:

- Develop, update, and maintain information security policies and procedures.
- Perform risk assessments and control testing.
- Identify and report security gaps or control failures.
- Support teams with remediation actions and track their progress.
- Help implement security frameworks like NIST, COBIT, and CIS.
- Prepare reports and dashboards for leadership.
- Deliver awareness sessions and assist with training programs.

Requirements:

- Bachelor’s degree in IT, Business, or related field (Associate degree also considered).
- At least 2 years in a GRC role or 3 years in cybersecurity-related work.
- Knowledge of frameworks (CIS, NIST, COBIT).
- Strong attention to detail, analytical mindset, and communication skills.
- Certifications like Security+, CISA, or CISSP are a big plus.

Nice to Have:

- Experience creating metrics and dashboards.
- Background in audits, compliance, or risk remediation.
- Ability to work independently and across teams.

Work Conditions:
- Sunday - Thursday
- 8:30 - 17:00
- District 1, Tehran