Governance Risk and Compliance Specialist

As a Governance Risk and Compliance Specialist, you will be responsible for ensuring the organization meets governance, risk and compliance standards, including identity management. You will work closely with leadership, legal and technology teams to establish policies and procedures that ensure compliance with internal company regulations and standards related to identity management. Your primary objective will be to protect the organization's assets and reputation by identifying and mitigating risks, ensuring the implementation of appropriate controls and promoting a culture of compliance throughout the company.

**Core Responsibilities**
- Develop and maintain security policies and procedures, ensuring compliance with relevant frameworks, laws and regulations, such as ISO27001, GDPR, CCPA, and HIPAA, including identity and access management, across the organization.
- Conduct risk assessments to identify potential security vulnerabilities and develop plans to mitigate risks.
- Collaborate with cross-functional teams to implement and maintain data privacy and security controls throughout the organization.
- Provide security guidance and support to development and operations teams to ensure that security best practices are incorporated into software development and deployment processes.
- Manage the Cybersecurity training plan for the entire company as an Awareness policy.
- Coordinate with the legal and compliance team to ensure that the organization's policies and processes comply with data privacy and information protection regulations.
- Participate in security audits and assessments, both internal and external, to ensure compliance with relevant regulations and frameworks.
- Stay up to date with the latest security trends, threats, and techniques in cybersecurity, ensuring EdgeUno’s security posture remains robust and adaptive in a rapidly evolving landscape.
- Participate in the management of security incidents related to identity management and assist in the response to security emergencies when necessary.
- Monitor and report the status of regulatory compliance and key risk metrics related to identity management to organizational leaders.
- Provide advice and guidance on regulatory compliance, risk management and identity management issues to project teams and business units.

**Requirements**:

- A bachelor's degree in information systems, computer science or a closely related field; a combination of education and equivalent work experience.
- Proven experience in Informartion Security, with a focus on data privacy, risk, and governance.
- Strong knowledge of security frameworks such as NIST, ISO 27001, and CIS Controls.
- Knowledge of compliance regulations such as GDPR, CCPA, and HIPAA.
- Experience with security technologies such as firewalls, intrusion detection systems, and vulnerability scanners.
- Strong analytical and problem-solving skills, with the ability to think critically and objectively.
- Excellent communication in English and interpersonal skills, with the ability to work collaboratively with cross-functional teams.
- Security certifications such as CISSP, CISM, or CISA are a plus.

**What We Offer**

At EdgeUno, we offer a competitive compensation package, development, and training opportunities to shape and realize your career goals, and a trustful environment where you can be yourself, share your thoughts, and create a valued partnership. We're looking for someone who shares our passion for innovation and our commitment to bringing high-speed internet to every person in Latin America. Join us and make an impact