Senior GRC Specialist (On-site)

Job summary

The role focuses on managing human-related security risks within a critical infrastructure environment. The Senior GRC Specialist will lead initiatives to identify, assess, and mitigate risks stemming from human actions and decisions, contributing to the overall security resilience of the organization.

Qualifications

• Experience in Information Security, Security Governance, or Security Risk Management.
• Background in Human Risk Management, Security Behavior, or Security Awareness.
• Familiarity with GRC, Audit, Compliance, or Regulatory Assurance.
• Knowledge of ISMS and ISO 27001-based environments.
• Experience in critical infrastructure or highly regulated sectors.

Responsibilities

• Lead the identification and management of human-related security risks within the Security Risk Management framework.
• Develop risk-based communications and awareness activities to strengthen control effectiveness.
• Create and maintain metrics and reporting on human-related security risks and control effectiveness.
• Advise stakeholders on the influence of human factors on security risks.
• Facilitate workshops to support risk-informed decision-making.
• Embed human-risk considerations into governance and compliance processes.

Skills

• Strong understanding of how human behavior impacts security outcomes.
• Ability to influence stakeholders effectively.
• Clear and pragmatic communication skills.
• Comfortable engaging with both leadership and operational teams.
• Strategic thinking combined with practical execution.

Education

• Relevant degree or equivalent experience in a related field is preferred.

Tools

• Familiarity with risk management frameworks and compliance standards relevant to security governance.