Information Security Engineer: II (Intermediate)

Location: Quincy, MA Salary: $60.00 USD Hourly - $65.00 USD Hourly Description:
Job description:

The Cybersecurity GRC AI & Process Automation Engineer will be responsible for designing and implementing automation solutions across Cybersecurity Governance, Risk, and Compliance (GRC) processes, with a particular focus on improving the efficiency, traceability, and governance of Risk and Control Self-Assessment (RCSA) activities.

The role will leverage Artificial Intelligence (AI), Generative AI, intelligent workflows, and process automation technologies to reduce manual effort, streamline evidence collection and validation, improve tracking of risk and control activities, and provide greater visibility into the status and effectiveness of cybersecurity controls.

The resource will work closely with Cybersecurity, Risk Management, Compliance, Technology, and control owners to identify manual and fragmented processes and transform them into standardized, automated, and auditable workflows.

Key Responsibilities:

Drive automation initiatives across Cybersecurity GRC, with an initial focus on RCSA and control management processes.

Design and implement automated workflows for the collection, organization, validation, and tracking of control evidence across multiple teams and systems.

Reduce manual effort associated with RCSA activities, including evidence requests, follow-ups, status tracking, control assessments, documentation, and reporting.

Establish centralized tracking and workflow capabilities to provide clear visibility into evidence status, outstanding actions, ownership, due dates, exceptions, and remediation activities.

Leverage AI and Generative AI to support evidence analysis, identify gaps or inconsistencies, summarize control information, and assist control owners and risk teams throughout the assessment lifecycle.

Improve traceability and audit readiness by maintaining structured records of evidence, approvals, assessments, decisions, and supporting documentation.

Develop dashboards and management reporting to provide real-time visibility into RCSA progress, control status, evidence completeness, overdue activities, and key risk indicators.

Support regulatory, audit, and risk management activities through automated evidence collection, workflow tracking, and reporting.

Identify additional opportunities to automate Cybersecurity GRC processes and establish reusable capabilities that can be scaled across other risk and control activities.

Requirements:

1. Experience in Cybersecurity Governance, Risk, and Compliance

2. Experience designing and implementing automated workflows to streamline risk, compliance, and control processes.

English proficency (Spanish is a plus)

Medical, dental, and vision insurance are available to qualified candidates who meet eligibility requirements.
By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.

Contact:

This job and many more are available through The Judge Group. Please apply with us today!