Security Specialist

SOFTSWISS is hiring a Security GRC Specialist to join their Security Governance, Risk, and Compliance team, focusing on strengthening security governance frameworks and supporting security initiatives across the company.

• 1+ years of experience in Information Security, Security GRC, IT Governance, Risk Management, Compliance, Security Operations, or a related field.
• Experience conducting security assessments, security reviews, or vendor security assessments.
• Experience developing security policies, standards, procedures, or governance documentation.
• Experience planning or supporting Security Awareness programs, phishing simulations, or security training initiatives.
• Experience with reporting and analytics tools.
• Basic scripting or workflow automation skills.
• Experience with Jira, Confluence, Google Workspace, or similar collaboration platforms.
• Familiarity with AI tools (ChatGPT, Gemini, Claude, etc.) to improve documentation, research, and operational efficiency.

• Perform Security Reviews for internal projects, business initiatives, and technology changes.
• Conduct Vendor Security Assessments and support third-party risk management activities.
• Participate in Security by Design reviews by identifying security risks and defining security requirements early in the project lifecycle.
• Develop, review, and maintain security policies, standards, guidelines, and governance documentation.
• Support Governance, Risk, and Compliance initiatives, including risk assessments, control implementation, and security process improvements.
• Plan, coordinate, and continuously improve Security Awareness initiatives, including employee training and phishing simulation campaigns.
• Measure the effectiveness of security awareness activities through reporting, metrics, and recommendations for improvement.
• Support the Security Disciplinary Framework and other governance-related processes.
• Identify opportunities to automate and optimize Security GRC processes, reporting, and operational workflows.
• Collaborate with cross-functional stakeholders to improve the organization's overall security posture and security maturity.