Cybersecurity Governance Specialist (GRC)

Seeking an experienced Cybersecurity Governance Specialist to lead enterprise cybersecurity risk governance, threat risk assessments, and security architecture initiatives across IT, Cloud, and OT environments. Drive Zero Trust adoption, audit readiness, supply chain risk management, and stakeholder engagement to strengthen organizational cyber resilience. Must have 10+ years of experience in Cybersecurity GRC, Information Security Risk Management, or Security Architecture; Strong expertise in enterprise risk governance and security risk management; Hands-on experience in Threat Risk Assessments (TRA/TVRA) and threat modeling; Deep understanding of Zero Trust Architecture and security-by-design principles; Strong knowledge of Cloud security and security control frameworks; Experience in third-party, vendor, and software supply chain risk management; Ability to map security controls to MITRE ATT&CK and evolving threat TTPs; Excellent stakeholder management and risk communication skills. Familiarity with security policies and international security standards; Exposure to OT/ICS security environments; Certifications such as CISSP, CISM, CRISC, OSCP, or OSWE;