Join the Blithequark Team: A Leader in Cyber Protection and Risk Management
Blithequark is a pioneering organization in the field of cyber protection, risk management, and compliance. We are seeking an experienced GRC (Governance, Risk, and Compliance) professional to join our team as a Full Stack GRC Professional. As a key member of our cybersecurity crew, you will play a crucial role in guiding GRC-related activities, ensuring the clean execution of various tasks, and contributing to the enchanting world of Blithequark.
About the Role
We are looking for a highly skilled and experienced GRC professional to assist with our Third-Party Risk Management (TPRM) software and internal safety compliance requirements. The successful candidate will be responsible for managing the internal safety compliance necessities and implementation of regulations, tactics, and frameworks at Blithequark. This is a remote, part-time or full-time opportunity with a competitive salary of $80,000 per year.
Key Responsibilities
- Assist with Blithequark's Global Third-Party/Internal Risk Method for wearing out cyber danger related due diligence exams
- Validate incoming third-party/internal danger assessment requests, operating with business stakeholders to confirm the details of the request and the scope of the engagement
- Behavior kick-off periods with business stakeholders and any related third-party for conducting the TPA
- Coordinate the distribution of due diligence questionnaires to internal stakeholders/third-party, review submitted questionnaires for completeness, and decide dangers springing up from the contemporary design and operational effectiveness of the internal/third-party's security controls
- File responses, associated findings, and remediation plans in Blithequark's systems
- Draft/review reports for the checks performed and ensure respective commercial enterprise stakeholders finalize critiques
- Be a sturdy liaison to ensure any queries are spoke back concerning the risk control technique and evaluation to the business or third events as required
- Carry out continuous tracking of third-party events via Blithequark's systems for current/new findings and music any findings to closure
- Perceive opportunities of improvement inside Blithequark's systems and strategies
- Paintings intently with chance lead/supervisor to time table and execute a spread of different assisting activities related to the chance management program
Governance, Threat, and Compliance
- Lead and help the improvement of cybersecurity hazard and compliance related strategies to ensure treatment of cybersecurity chance consistent with Blithequark's threat urge for food
- Maintain and document compliance towards information safety associated guidelines and processes through planning, checking out, remediating, tracking, and reporting on manipulate critiques and threat checks
- Lead development and shipping of compliance and danger education and ongoing communications that assist power tradition of protection and compliance
- Retaining abreast of regulatory changes, new guidelines, technology, and internal policy modifications on the way to further pick out new key chance regions
- Lead the sports to preserve and guide ISO 27001 popular
Competencies & Attributes for Fulfillment
Understanding and Competencies
- Outstanding stakeholder management
- Working understanding of information security related high-quality practices and requirements consisting of ISO 2700x, SOC 2 necessities, SSAE 16/18 requirements, and many others
- Experience in the control of hazard, controls, and compliance
- Expertise of hazard evaluation methodologies – qualitative/quantitative
- Super analytical and problem-solving abilities
- Super presentation making and delivery abilities
Personal Attributes
- Robust interpersonal abilities
- Ability to navigate rapid-paced surroundings and be bendy with working hours
- Fantastic communication abilities, both verbal and written
- Adapt speedy to converting conditions and power high-quality change
Preferred Training & Enjoy
- Applicable Bachelor's/Grasp's diploma from an accepted university or equivalent experience
- 4 years of enjoy throughout third-birthday party risk control, records security, and audit & compliance tracking (minimum of 2-3 years in TPRM/internal audit)
- Preferred revel in with a massive company and/or large four accounting company
- One or greater credentials - CISA, CRISC, ISO27001 L./LI, CISSP
- Experience in AI/ML is a plus
Career Growth Opportunities and Learning Benefits
At Blithequark, we are committed to the growth and development of our employees. We offer a range of learning benefits, including:
- Professional development opportunities
- Mentorship programs
- Training and certification programs
- Industry conferences and events
Work Environment and Company Culture
Blithequark is a dynamic and innovative company with a strong culture of collaboration and teamwork. We offer a flexible and remote work environment, allowing our employees to work from the comfort of their own homes. Our company values include:
- Innovation
- Integrity
- Respect
- Accountability
- Excellence
Compensation, Perks, and Benefits
We offer a competitive salary of $80,000 per year, as well as a range of perks and benefits, including:
- Health insurance
- Retirement plan
- Paid time off
- Flexible work hours
- Remote work opportunities
How to Apply
If you are a motivated and experienced GRC professional looking for a new challenge, please apply now to join our team at Blithequark. We look forward to hearing from you!
Apply Now
Interview Questions
As part of our interview process, we may ask you the following questions:
Tell me about yourself
Please provide a brief precis of your professional heritage, capabilities, and reviews. Focus on applicable info and your enthusiasm for the function.
Why do you want to work for Blithequark?
Please speak the agency's values, project, or popularity that align along with your profession desires. Point out precise elements of the business enterprise that attracted you.
What's your best electricity?
Highlight a relevant energy, including problem-fixing, leadership, or a technical skill. Support your solution with an example.
What's your greatest weakness?
Talk a weak point, but emphasize how you're operating to improve it. For instance, "I am operating on improving my time management abilities."
Tell me about a hard situation you've got confronted at work and how you handled it
Use the STAR approach (state of affairs, venture, movement, result) to provide an in depth response, showcasing your hassle-solving talents.
Why should we hire you for this role?
Highlight your relevant qualifications, stories, and how they make you the excellent match for the position. Mention your enthusiasm for Blithequark and the job.
In which do you notice yourself in 5 years?
Share your career aspirations and how they align with Blithequark's boom. This demonstrates long-term commitment.
What do you understand about our merchandise/services?
Research Blithequark's services and point out specific services or products. Explain how you accept as true with they gain customers.
How do you handle running below stress?
Describe your capacity to stay calm, prioritize tasks, and talk correctly in excessive-stress situations. Provide an example.
Tell me about a time you labored in a team
Describe a a hit team challenge. Emphasize your collaboration, conversation, and trouble-solving abilities.
What is your chosen paintings style or work environment?
Share your alternatives, but be adaptable. Point out that you may paintings correctly in different settings.
Do you have got any questions for us?
Usually have questions organized. Ask about Blithequark's tradition, crew dynamics, expectancies, or upcoming initiatives. It demonstrates your hobby.
Apply Now