[TEST] Cybersecurity & GRC Supervisor

Responsibilities Apply defense-in-depth concepts and information security controls (administrative, technical, physical, operational, deterrent, and compensating controls) within day-to-day security activities. Own technical implementation, configuration, and optimization of security technologies: IAM/PAM, NAC/TACACS, DLP, NDR/EDR, sandboxing, email gateway, MDM, and SIEM (advanced query writing and use-case development). Support compliance activities related to information security frameworks and standards such as ISO 27001, SOC 2 Type II, and ISO 27701. Manage and track different audit missions and provide the support needed to stakeholders in the remediation plan. Develop and review information security and corporate policies and processes to ensure alignment with information security standards and regulations. Execute and support the information security awareness program, including security awareness trainings, phishing simulation campaigns, and awareness sessions. Assess new user access requests and review existing access permissions against the least privilege and need-to-know principles. Support information security assurance activities and risk management practices. Track and follow up on vulnerability remediation efforts in collaboration with IT, engineering, and operations teams. Requirements Bachelor's degree in engineering or computer science. 7+ years of relevant experience. GRC-related certification (e.g., CISSP, CISA, CRISC, ISO 27001 Lead Implementer/Lead Auditor) is preferred. Strong understanding of information security and IT governance frameworks and standards such as ITIL, PCI, SOC 2 Type II, ISO 27001. Strong knowledge of user access governance. Basic knowledge of information security assurance activities and risk management practices. Familiarity with cloud computing platforms and cloud security principles. Excellent written and verbal communication skills, with proven ability to produce clear, high-quality security documentation and reports.