Cybersecurity GRC Specialist
Key Skills for This Role
Full Job Posting
Key responsibilities
- Cybersecurity Risk Management
- Perform and coordinate cybersecurity risk assessments.
- Maintain the cybersecurity risk register and track risk treatment activities.
- Coordinate with risk owners on mitigation actions, deadlines, and risk acceptance.
- Support periodic cybersecurity risk reporting and management reviews.
- Third-Party Security Risk Management
- Conduct security assessments and due diligence for third-party vendors, SaaS solutions, software products, and service providers.
- Identify, document, and communicate third-party cybersecurity risks and recommended mitigation measures.
- Coordinate security requirements and remediation activities with business owners, Procurement, Legal, Privacy, and vendors.
- Support ongoing monitoring and reassessment of relevant third parties.
- Customer Security & Due Diligence
- Coordinate responses to customer security questionnaires and cybersecurity due diligence requests.
- Support customer security audits and requests for security documentation and evidence.
- Maintain reusable and validated security information to improve the consistency and efficiency of customer responses.
- Compliance, Governance & Audit Support
- Support ISO/IEC 27001 and other applicable cybersecurity and compliance requirements.
- Maintain a central repository of cybersecurity policies, standards, certifications, audit evidence, and approved security responses.
- Support internal and external audits and track findings and remediation activities.
- Monitor implementation of cybersecurity policies and compliance requirements.
- Essential requirements
- 3–5 years of experience in cybersecurity GRC, information security risk management, compliance, audit, or third-party security risk management.
- Practical experience conducting cybersecurity risk assessments and third-party/vendor security assessments.
- Good working knowledge of ISO/IEC 27001 and information security risk management principles.
- Experience supporting security audits, customer security assessments, due diligence requests, and compliance activities.
- Ability to manage risk documentation, remediation actions, evidence, and reporting in a structured manner.
- Desired skills
- Strong analytical and risk assessment skills with attention to detail.
- Understanding of third-party security risk, SaaS/cloud security, data protection, and GDPR considerations.
- Good understanding of common security controls and frameworks such as ISO/IEC 27001, NIST, and CIS Controls.
- Strong written and verbal communication skills with the ability to explain security risks in clear business language.
- Strong stakeholder coordination skills and ability to work effectively with IT, Legal, Privacy, Procurement, business teams, customers, and vendors.
- Proactive, structured, and collaborative approach with strong ownership and accountability.
- RIB may require all successful applicants to undergo and pass a comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third party personal data may involve additional background check criteria.
- RIB is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business.
- Come and join RIB to create the transformative technology that enables our customers to build a better world.
Qualifications
- 3–5 years of experience in cybersecurity GRC, information security risk management, compliance, audit, or third-party security risk management.
- Practical experience conducting cybersecurity risk assessments and third-party/vendor security assessments.
- Good working knowledge of ISO/IEC 27001 and information security risk management principles.
- Experience supporting security audits, customer security assessments, due diligence requests, and compliance activities.
- Ability to manage risk documentation, remediation actions, evidence, and reporting in a structured manner.
- Strong analytical and risk assessment skills with attention to detail.
- Understanding of third-party security risk, SaaS/cloud security, data protection, and GDPR considerations.
- Good understanding of common security controls and frameworks such as ISO/IEC 27001, NIST, and CIS Controls.
- Strong written and verbal communication skills with the ability to explain security risks in clear business language.
- Strong stakeholder coordination skills and ability to work effectively with IT, Legal, Privacy, Procurement, business teams, customers, and vendors.
- Proactive, structured, and collaborative approach with strong ownership and accountability.
- RIB may require all successful applicants to undergo and pass a comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third party personal data may involve additional background check criteria.
- RIB is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business.
- Come and join RIB to create the transformative technology that enables our customers to build a better world.
Preferred Qualifications
- Desired skills
About RIB Software
Making engineering and construction more efficient and sustainable.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at RIB Software
Customer Care Consultant (Tech Support, Customer Support)
Sydney, AUS
Sales Development Representative
Brisbane, AUS
RIB seeks a Sales Development Representative to generate and qualify opportunities for construction and engineering software solutions. The role involves prospect outreach, pipeline development, lead qualification, and c
Enterprise Account Executive
Brisbane, AUS
RIB seeks a senior enterprise sales professional to own and expand major AECO accounts, win new customers, and grow adoption of its software portfolio. The role involves complex commercial negotiations, executive relatio
Lead Frontend Engineer (React.js)
Rib, IND
Senior Regional Marketing Specialist, APAC
Brisbane, AUS
Customer Care Consultant (Tech Support, Customer Support)
Sydney, AUS
Sales Development Representative
Brisbane, AUS
Enterprise Account Executive
Brisbane, AUS
Sales Development Representative
Brisbane, AUS
Enterprise Account Executive
Brisbane, AUS
Senior Software Engineer
Alpharetta, USA