Apply on Employer Site

Meta · 8 hours ago

Cloud Security GRC Specialist

Washington, DC

Full-time

Onsite

Senior Level

$153K/yr - $209K/yr

7+ years exp

Meta is a technology company that builds platforms to connect people and grow businesses. They are seeking a Cloud Security GRC Specialist to lead programs in Cloud Security and ensure compliance with regulations while collaborating with various stakeholders.

Computer Software

Comp. & Benefits

Responsibilities

Lead significant programs of work across various levels of cross-functional (XFN) teams in Cloud Security and Cloud GRC areas

Collaborate with team members and stakeholders to understand or identify defined work problems and program goals, obtain prioritized deliverables, and discuss program impact

Design, implement, and/or assess security controls and frameworks

Implement maturity frameworks across multiple programs factoring in emerging regulations and proactive detection of risks

Assess and document emerging regulatory impact on established policy and control frameworks

Identify, communicate, and collaborate with relevant stakeholders within one or more teams to drive impact and work toward mutual goals

Establish learnings, best practices, standardized frameworks and tools across GRC and related teams

Develop detailed program/project plans in partnership with cross-functional teams

Identify opportunities for information sharing, process improvement and automation

Support business travel on an as needed basis (up to 10%)

Qualification

Information SecurityCloud SecurityRisk ManagementComplianceControl FrameworksCSP ExperienceSecurity CertificationsCommunication SkillsProblem SolvingCollaboration

Required

7+ years experience in information security and/or technology risk including one or more domains (e.g., access management, vulnerability management, change management, business continuity, application security, asset management)

Demonstrable familiarity with key Cloud Security, Risk Management and Compliance concepts

4+ years of experience in hands on security, with at least one of the major CSPs (AWS, GCP, Azure)

Experience in a GRC function overseeing Cloud implementations at scale

Experience in designing and implementing control frameworks

Experience in assessing security deficiencies in information systems and recommending mitigating controls in a corporate environment