Crocs - GRC Engineer

Overview :

Reporting into Information Security, the Governance, Risk, and Compliance (GRC) Engineer plays an instrumental role in guiding GRC strategies and processes. As the primary GRC authority in India and supporting the global GRC team, this engineer works directly with other partners such as Legal, Risk, Internal Audit, etc. to ensure the alignment of the company's IT and Enterprise risk management framework with its business objectives and regulatory requirements. The GRC Engineer possesses a combination of technical expertise, background in GRC, and applicable frameworks. They will identify, track, and address potential risks, while proactively improving the company's overall GRC posture.

What You'll Do :

Third Party Risk Management :

• Act as a local point of contact for the IT Third Party Risk Management Program.
• Maintain the chosen GRC platform to programmatically capture Cyber / IT risks, timely analysis to enable risk control and reporting.
• Implement security controls, risk assessment framework, and program that aligns to regulatory requirements, chosen frameworks, and other internal requirements through collaboration with other key department partners.
• Implement processes to automate and continuously supervise information security controls, exceptions, risks, and testing.
• Develop performance measures, dashboards, and evidence artifacts.

Policy and Procedure Management :

Audit and Compliance Management :

Risk Management :

What You'll Bring to the Table :

Risk Management Skills :

(ref : hirist.tech)