[Hiring] Staff Specialist Cybersecurity Engineer @BMC Helix

Role Description

Helix is seeking a detail-oriented and proactive Governance, Risk & Compliance (GRC) Staff Specialist Cybersecurity Engineer to support the organization's risk management, compliance, and governance programs. The role focuses on third party audits, assessments, risk assessments, compliance monitoring, and strengthening internal controls.

Key Responsibilities

• Governance
  • Maintain security documentations (policies, standards, and procedures).
  • Coordinate policy reviews and governance reporting.
  • Maintain and manage artifact libraries.
• Risk Management
  • Conduct risk assessments and maintain risk registers.
  • Monitor remediation activities and emerging risks.
  • Lead risk management meetings and build relationships with the stakeholders.
• Compliance
  • Lead internal and third-party audits, compliance reviews, and control assessments.
  • Coordinate compliance requirements and validate artifacts for NIST, SOC 2, ISO, and others as needed.
  • Track findings and corrective actions.
  • Review vendor exhibits and provide timely response to customer requests.
• Stakeholder Management
  • Collaborate with IT, Security, Legal, and business teams to manage the GRC program.
  • Provide risk and compliance awareness guidance.
• Tools and Technologies
  • Proficiency in using cloud platforms such as AWS, OCI, etc.
  • Should have hands-on experience with any GRC tools.
  • Understand the purpose of security tools used within the company and how they are utilized to meet the compliance requirements.
  • Understanding tools to automate the compliance artifact gathering.
  • Proficient in using AI tools such as co-pilot, etc.

Qualifications

• Bachelor's/master's degree in IT, Computer Science, Cybersecurity, Risk Management.
• Exposure to government compliance requirements (global) is a must.
• 5+ years of GRC, Risk, Audit or Compliance experience.
• Knowledge of risk management and compliance frameworks.
• Willing to learn new tools and technologies.
• Strong analytical and communication skills.
• Should be willing to work in EMEA hours - 12.30PM to 9.30PM IST.

Preferred Certifications

• CRISC
• CISA
• CISSP
• CGRC
• ISO 27001 Lead Implementer/Auditor
• ISO 42001 Lead Implementer/Auditor

Preferred Knowledge Areas

• ISO 27001, 27701, 27034, 27035
• NIST CSF
• SOC 2
• CSA Star
• C5
• IRAP
• ENS
• FedRAMP

Key Competencies

• Risk Assessment
• Regulatory Compliance
• Internal Controls
• Audit Coordination
• Policy Development
• Stakeholder Management

Benefits

• Competitive salary with a midpoint of 2,117,800 INR.
• Variable plan and country-specific benefits.
• Commitment to fair and equitable pay practices.

EEOC Statement

Helix is committed to equal opportunity employment regardless of race, age, sex, creed, color, religion, citizenship status, sexual orientation, gender, gender expression, gender identity, national origin, disability, marital status, pregnancy, disabled veteran or status as a protected veteran.