Information Security & Privacy GRC Advisor

About the role

We are looking for an Information Security & Privacy GRC Advisor to join RSA’s global security team. The role will serve as the primary point of contact for customer security inquiries, manage assurance queues, and ensure timely resolution of security tickets.

Key responsibilities

• Respond promptly to customer‑related security inquiries and own the Customer Assurance queue.
• Escalate exceptions to senior leadership and drive tickets to resolution and customer satisfaction.
• Identify and suggest enhancements to standard processes, acting as the voice of the customer.
• Collaborate with internal functions (IT, HR, Legal, Facilities, etc.) on security projects and issue mitigation.
• Facilitate external audit activities and support audit readiness.

Required profile

• Bachelor’s degree in Computer Science, Computer Engineering or a related field.
• Minimum 5 years of experience in information security or privacy, preferably in a technology environment.
• At least one recognized security certification (e.g., Security+, ISO 27001, CISA, CISSP, CRISC).
• Excellent verbal and written communication skills in English.
• Ability to work across global time zones with high attention to detail.

Required skills

• Intermediate knowledge of information security and privacy concepts.
• Working knowledge of security frameworks such as ISO 27001, NIST 800‑53, NIST CSF, EU GDPR, and PCI DSS.
• Hands‑on experience conducting security control assessments using industry frameworks.
• Strong risk‑management understanding.