Cybersecurity & GRC

Overview

As a Cybersecurity & GRC Engineer at SysMind, you’ll play a critical role in strengthening our security posture, managing technology risks, and ensuring that security practices align with business objectives and regulatory requirements. You’ll work across security, IT, engineering, and business teams to identify risks, establish effective controls, and continuously improve our governance framework.

The role demands a blend of cybersecurity knowledge, risk management, analytical thinking, and strong attention to detail. You’ll help assess security controls, support audits, monitor compliance, and translate complex security requirements into practical processes that protect our people, systems, and data.

Your focus will be on maintaining a proactive security and compliance environment, ensuring that risks are identified, controls are effective, and the organization remains prepared for evolving threats and regulatory expectations.

‍

Roles & Responsibilities

• Develop and maintain cybersecurity, risk, and GRC frameworks aligned with business and regulatory requirements.
• Conduct security risk assessments, control assessments, and gap analyses to identify vulnerabilities and compliance risks.
• Support implementation and monitoring of security controls based on frameworks such as NIST CSF, NIST 800-53, ISO 27001, SOC 2, CIS Controls, and PCI DSS.
• Maintain policies, standards, procedures, risk registers, control documentation, and compliance evidence.
• Coordinate internal and external security audits, assessments, and compliance reviews, ensuring timely remediation of findings.
• Monitor security risks, vulnerabilities, incidents, and control effectiveness, escalating issues based on business impact.
• Partner with IT, engineering, HR, legal, and business teams to ensure security and privacy requirements are embedded throughout the SDLC and business processes.
• Support third-party/vendor risk management, including security questionnaires, due diligence, and ongoing risk monitoring.
• Assist with security awareness and training programs to promote a culture of security and accountability.
• Perform root-cause analysis and corrective/preventive action tracking for security and compliance deficiencies.
• Develop dashboards, metrics, and reports to communicate risk posture, compliance status, and remediation progress to leadership.
• Stay current with evolving cyber threats, regulatory requirements, security frameworks, and industry best practices.

‍

If you believe strong cybersecurity begins with proactive risk management and disciplined governance, and you’re passionate about protecting data, reducing risk, and building resilient organizations, apply to join SysMind’s cybersecurity and engineering excellence team.

‍