Job Title Cyber Security Specialist GRC (ERM) FAIR (Factor Analysis of Information Risk) is Mandatory Job Summary We are seeking a Cyber Security Specialist to lead and support enterprise-level Risk Management (ERM) and GRC programs. The role involves conducting audits, risk assessments, and process improvements aligned with frameworks like ISO 27001, CMMC, CMMI, and FAIR (Factor Analysis of Information Responsibilities : Conduct and guide cybersecurity audits and risk assessments across ISO 27001, CMMC, CMMI, and FAIR. Define, implement, and oversee ERM frameworks and risk mitigation plans. Identify key business risks, control gaps, and operational weaknesses; monitor remediation. Develop and enhance security policies, procedures, and standards. Communicate compliance and risk requirements to stakeholders across all levels. Drive continuous process improvement for IT security, compliance, and GRC : 56 years of experience in enterprise security audits, compliance, or risk management (Big Four experience preferred). Strong knowledge of risk management frameworks including FAIR; prior work in FAIR implementation is essential. Certification: CISA, ISO 27001 Auditor, CMMI/CMMC Auditor, FAIR certification (preferred). Graduate/Postgraduate in any discipline. (ref:hirist.tech)