GRC Consultant

Skills

The Cybersecurity Regulatory and Compliance Lead will be responsible for facilitating compliance with our global regulations including developing implementing and managing the organization Cybersecurity compliance programs. This role involves ensuring adherence to relevant laws regulations and standards conducting risk assessments and providing guidance on best practices to mitigate security risks.

Description

Gen Re is seeking a highly skilled Cybersecurity Regulatory and Compliance Lead to join the IT Security Governance, Risk, and Compliance (GRC) team and ensure our operations meet global regulatory requirements. The candidate must have a strong background in global cyber regulations, compliance, and technology, and must be highly adaptive. The candidate must be highly collaborative, organized, and analytical, and is expected to partner effectively and influence IT management and business stakeholders.

Responsibilities

• Develop and maintain comprehensive Cybersecurity regulatory and compliance programs.
• Monitor and interpret regulatory requirements and industry standards.
• Stay updated on the latest Cybersecurity regulatory and compliance changes.
• Manage all regulatory, compliance and client commitments in a single view.
• Conduct regular risk assessments and audits to ensure compliance to regulations.
• Identify compliance gaps and develop roadmaps to achieve compliance to regulations.
• Collaborate with internal teams to implement security controls and policies.
• Provide expertise on international regulatory frameworks such as NY DFS and DORA
• Maintain documentation and reporting related to regulatory and compliance.
• Liaise with external auditors, regulatory agencies and client requests as needed.
• Ensure compliance with global regulations, including DORA (Digital Operational Resilience Act), BaFin (German Federal Financial Supervisory Authority), and NY DFS (New York Department of Financial Services)