Be an early applicantLess than 25 applicants

Company

Korn Ferry · 10 hours ago

GRC Consultant (Contract)

United States

Contract

Remote

Senior Level

$75/hr - $75/hr

7+ years exp

Maximize your interview chances

Business Consulting and Services

Actively Hiring

No H1B

Hiring Manager

Jeff Dean

Insider Connection @Korn Ferry

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

In collaboration with the Sr. Director Compliance & Privacy, ensure that all essential elements of Korn Ferry’s data privacy framework are fully implemented within Digital teams.

Develop process enhancements and requirements to enable the business to maintain compliance while developing solutions at a rapid pace.

Ensure that documentation and other privacy and security artifacts for digital products are kept current and available in support of meeting regulatory requirements and certifications.

Educate the Digital team on privacy and security best practices and standards for the purpose of incorporating these into products and processes.

Work closely with SMEs in the business, IT Security, Corporate IT, Development, etc. to ensure all stakeholders are in alignment with future processes and controls.

Ensure that digital teams understand data privacy and security requirements created by contractual arrangements, country regulations, data transfers, data deletions, etc.

Partner with the Corporate Technology function on enterprise-wide compliance initiatives including ISO 27001 and ISO 27018 certification, GDPR compliance requirements and other regulatory initiatives.

Work with Privacy and Security to identify and/or facilitate internal risk management reviews.

Maintain comprehensive reporting that informs management of status of on-going privacy and security projects, deadlines and highlights risks and remediation progress.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Digital ComplianceInformation SecurityRisk ManagementPrivacy RegulationsAuditISO 27001GDPR ComplianceProject ManagementCISACIACDPSENISTCOBITArtificial IntelligenceRobotic Process AutomationMachine LearningPowerPoint

Required

7+ years of hands-on experience in a consulting, audit, or technology environment.

Demonstrated planning, organizational and project management skills with the ability to work across multiple, complex projects.

Ability to understand broader business issues, must have a high degree of business acumen.

Ability to communicate and consult with senior management.

Experience with identifying privacy and security risks and working with others to determine and plan remediations.

Ability to collect and manage evidence repositories.

Ability to influence understanding of internal subject matter experts and external auditors.

Strong analytical, organizational, and consulting skills.

Strong knowledge of information security, audit, risk management, privacy, and other organizational compliance functions.

Strong written and verbal communication skills.

Self-motivated team player with strong work ethic and the ability to 'get things done.'

Ability to handle multiple projects and deadlines and thrive in a fast-paced environment.

Resourceful, good listener with good problem-solving skills.

Proactive and comfortable exercising initiative.

Strong aptitude for analysis as it relates to determining data relationships, attributes, and data workflows.

Ability to identify and evaluate sophisticated business and technology risks, internal controls which mitigate risks, and opportunities for control improvement.

Four-year bachelor’s degree, preferably in Business, Risk Management or Computer Science.

Preferred

Experience of working with development teams preferred.

Certifications in privacy or security areas a plus (CISA, CIA, CDPSE).

Working knowledge of consulting practices.

Certifications such as SOC (SSAE 16), SOX (Sarbanes-Oxley compliance), ISO 27001 and 27018, CSF.

Familiarity with standards and compliance frameworks such as NIST and COBIT.

Knowledgeable of and interest in learning about new technologies like Artificial Intelligence (AI), Robotic Process Automation (RPA), Machine Learning (ML).