Description:

Job Title: GRC Manager

Location: Offshore

Experience: 8 to 12 Years

Employment Type: Full-Time

Position Overview:

We are seeking experienced GRC Managers (C1/C2 level) to support NIST SP 800-53 risk and control assessment programs. This role focuses on hands-on execution, including control testing, evidence collection, documentation, and audit support, working closely with an onsite Lead SME.

The ideal candidate will demonstrate strong attention to detail, structured thinking, and a proactive approach to closing gaps and following up with stakeholders.

Key Responsibilities:

NIST SP 800-53 Control Testing & Assessment:

- Execute control design and operating effectiveness testing aligned to NIST SP 800-53.

- Perform detailed control walkthroughs, sample testing, and documentation reviews.

- Support assessments across cyber, IT, and operational control domains.

Evidence Collection & Validation:

- Coordinate with control owners to request, track, and validate evidence.

- Review evidence for relevance, completeness, and audit defensibility.

- Maintain structured repositories and clear audit trails.

Risk & Issue Management:

- Identify control gaps, deficiencies, and inconsistencies.

- Document risks, issues, and remediation actions clearly and accurately.

- Support follow-up reviews and validation of remediation efforts.

Governance & Documentation Support:

- Review policies, standards, and procedures for control alignment.

- Assist in maintaining control descriptions, narratives, and assessment artefacts.

Execution & Coordination:

- Proactively follow up with stakeholders to close pending actions.

- Track progress, dependencies, and deliverables.

- Escalate risks, delays, or quality concerns to the onsite lead.

Required Qualifications:

- 8 to 12 years of experience in GRC, IT Audit, Cyber Risk, or Compliance.

- Strong working exposure of NIST SP 800-53 controls.

Hands-on experience with:

- Control testing and evidence validation

- Audit and assurance support

- Cross-domain control environments

- Good understanding of governance frameworks and control best practices.

- Strong written and verbal communication skills.

- Ability to work independently and manage multiple deliverables.

Preferred Qualifications:

- Exposure to ISO 27001, NIST CSF, SOC, or SOX.

- Experience working with GRC tools for evidence and assessment tracking.

- Prior experience supporting large or regulated enterprise clients.

Key Competencies:

- Strong execution and follow-up discipline.

- Attention to detail and documentation accuracy.

- Structured and analytical approach to control assessment.

- Clear and professional communication.

- Ability to work effectively in distributed delivery models.