Senior Security Operations and GRC Professional

SmartNews

Cybersec

Security

About this role

On SmartNews’s Security team, this role covers product and corporate environments through Security Operations and Governance, Risk, and Compliance (GRC). It links threat response with security standards, risk assessment, and practical governance.

The work builds Detection & Response capabilities, automates triage, enrichment, containment, and evidence capture, and investigates emerging concerns in a lab. It coordinates vulnerability management and patching across IT and cloud systems, assesses infrastructure and AI implementations, converts ISMS policies into auditable workflows, and supports J-SOX and partner audits. AI governance work references ISO 42001 and NIST AI RMF.

Applicants need hands-on threat detection or incident response experience, including detection building, investigations, and playbook improvement. They also need knowledge of regulatory, personal-data, and compliance requirements; experience converting controls into scalable operations and working with business process owners; and practical AI-governance experience in a fast-adoption environment.

This is an AI-generated summary of the employer's original posting — details can be incomplete, out of date or simply wrong. Always confirm everything on the official posting before applying.