We're hiring! At Cognizant we have an ideal opportunity for you to be part of one of the largest companies in the digital sector worldwide. A Great Place To Work where we look for people who contribute new ideas, experiencing a dynamic and growing environment. At Cognizant we promote an inclusive culture, where we value different perspectives providing career growth and development opportunities. #WelcomeToCognizant
Governance, Risk & Compliance (GRC) Specialist
Position Summary
The Governance, Risk & Compliance (GRC) Specialist is responsible for supporting the organization's governance framework, risk management processes, and compliance initiatives. This role ensures that business operations, technology environments, and security controls align with regulatory requirements, industry standards, and internal policies. The GRC Specialist works closely with cross-functional teams to identify risks, assess controls, drive remediation efforts, and maintain compliance with applicable regulations and frameworks.
Key Responsibilities
Governance
Support the development, implementation, and maintenance of corporate governance policies, standards, and procedures.
Assist in establishing and monitoring governance processes to ensure alignment with organizational objectives.
Facilitate policy reviews and updates based on regulatory changes and business needs.
Promote awareness of governance and compliance requirements across the organization.
Risk Management
Conduct risk assessments and maintain risk registers.
Identify, evaluate, and monitor operational, cyber, technology, and third-party risks.
Collaborate with stakeholders to develop risk mitigation strategies and remediation plans.
Track risk treatment activities and provide regular reporting to management.
Support enterprise risk management (ERM) initiatives.
Compliance
Monitor compliance with applicable laws, regulations, and industry standards.
Support internal and external audits, assessments, and compliance reviews.
Coordinate evidence collection and documentation for audits and certification activities.
Assist in maintaining compliance with frameworks such as ISO 27001, SOC 2, NIST, GDPR, HIPAA, PCI-DSS, SOX, or other applicable regulations.
Investigate compliance gaps and recommend corrective actions.
Reporting & Documentation
Prepare risk and compliance reports, dashboards, and presentations for leadership.
Maintain accurate documentation of policies, procedures, risk assessments, controls, and audit findings.
Track compliance metrics and key risk indicators (KRIs).
Stakeholder Collaboration
Partner with Information Security, IT, Legal, Privacy, Internal Audit, and business teams.
Provide guidance on compliance requirements and risk management best practices.
Support vendor risk assessments and third-party compliance reviews.
Required Qualifications
Bachelor's degree in Information Security, Information Technology, Business Administration, Risk Management, Cybersecurity, or a related field.
3+ years of experience in Governance, Risk & Compliance, Information Security, Audit, Risk Management, or related areas.
Knowledge of risk management methodologies and compliance frameworks.
Experience supporting audits and regulatory assessments.
Strong analytical, organizational, and problem-solving skills.
Excellent written and verbal communication skills.
Ability to manage multiple projects and priorities effectively.
Preferred Qualifications
Professional certifications such as:
CRISC (Certified in Risk and Information Systems Control)
CISA (Certified Information Systems Auditor)
CISM (Certified Information Security Manager)
CISSP (Certified Information Systems Security Professional)
CGRC (Certified in Governance, Risk and Compliance)
ISO 27001 Lead Implementer or Lead Auditor
Experience with GRC platforms such as ServiceNow GRC, Archer, OneTrust, AuditBoard, or MetricStream.
Knowledge of cloud security compliance frameworks (AWS, Azure, Google Cloud).
Required Skills
Governance and policy management
Risk assessment and risk analysis
Regulatory compliance
Audit support and remediation management
Control testing and monitoring
Project coordination
Stakeholder management
Data analysis and reporting
Documentation management
Success Metrics
Timely completion of risk assessments and compliance reviews.
Successful support of internal and external audits.
Reduction of identified compliance gaps and risk exposures.
Accuracy and completeness of governance and compliance documentation.
Effective collaboration with stakeholders to drive risk and compliance initiatives.
Location: Hybrid/Remote
Employment Type: Full-Time
Experience Level: Mid-Level to Senior-Level Depending on Business Needs
À propos de Cognizant
Cognizant (NASDAQ: CTSH) est un AI Builder et une entreprise de services numériques (ESN) élaborant des solutions complètes d’IA maximisant les investissements pour des résultats concrets. Sa profonde expertise des métiers, des processus et des technologies lui permet d’intégrer dans les systèmes technologiques le contexte unique de chaque organisation de l’ingénierie à la production à l’échelle. Son objectif: améliorer l’efficacité des équipes, créer de la valeur et permettre aux grandes entreprises de rester performantes dans un monde qui évolue rapidement. Pour en savoir plus: cognizant.ai ou @cognizant.
À savoir avant de postuler
- Autorisation de travail: Cognizant ne prendra en considération que les candidats à ce poste qui sont légalement autorisés à travailler au Canada sans avoir besoin d'un parrainage de l'employeur, aujourd'hui ou à l'avenir.
- Mesures d’adaptation: Si vous avez un handicap qui nécessite des mesures d’adaptation raisonnable pour effectuer une recherche d’emploi ou poser une candidature, veuillez envoyer un courriel à [email protected] avec votre demande et vos coordonnées.
- L’IA dans notre processus de recrutement: Nous utilisons des outils d'intelligence artificielle (IA) pour trier et évaluer les candidatures efficacement. Notre équipe examine ensuite les candidatures et décide qui passe à l’étape suivante.
- Poste à pourvoir: Sauf indication contraire, ce poste est actuellement vacant et nous cherchons à le pourvoir.
- Exigences linguistiques: Nous demandons à tous les candidats de posséder une connaissance de base de l’anglais afin de faciliter les communications internes. Pour les postes au Québec, la capacité à communiquer efficacement en anglais est requise car vous fournirez des services à et collaborerez avec des parties prenantes anglophones situées hors de la province.
- Inclusion: Cognizant est un employeur souscrivant au principe de l’égalité d’accès à l’emploi. Votre candidature et votre dossier ne seront pas examinés en fonction de la race, de la couleur, du sexe, de la religion, des croyances, de l'orientation sexuelle, de l'identité de genre, de l'origine nationale, du handicap, des renseignements génétiques, de la grossesse, du statut d'ancien combattant ou de toute autre caractéristique protégée par les lois fédérales, provinciales ou locales.
