What are the responsibilities and job description for the Cybersecurity Specialist – GRC position at Spectra Force?
Role: Cybersecurity Specialist – GRC Location: Phoenix, AZ (Hybrid) Duration: 11.5 Months Top 3 Required Skills Application & Data Security Assessments IAM / RBAC / Segregation of Duties (SoD) Cloud Security & Risk Management Job Summary The Cybersecurity Specialist – GRC will conduct application and data security assessments for enterprise applications and projects, with a focus on Finance, Supply Chain, and Human Capital Management (HCM) environments. The role will evaluate application architecture, data flows, identity and access controls, cloud environments, encryption, third-party solutions, and overall security risks. The specialist will work closely with cybersecurity, architecture, infrastructure, application, and business teams to identify risks and ensure security requirements are addressed. Key Responsibilities Conduct data security assessments for Finance, Supply Chain, and HCM applications and projects. Review application architecture, integrations, APIs, and data flows to identify security risks. Assess sensitive data handling, including PII, financial, payroll, and supplier information. Evaluate Identity and Access Management (IAM), Role-Based Access Control (RBAC), Segregation of Duties (SoD), and privileged access. Collaborate with cybersecurity, enterprise architecture, infrastructure, and application teams during project implementation. Review encryption standards for data at rest and in transit. Assess third-party vendors and cloud solutions against security and compliance requirements. Track remediation activities and verify implementation of security recommendations. Prepare security assessment reports, risk documentation, and executive summaries. Support internal and external security audits. Required Qualifications Bachelor's degree in Computer Science, Information Security, Information Systems, or a related field. 3–8 years of experience in Information Security, Cybersecurity, GRC, or ERP Security. Experience conducting security assessments of SaaS platforms, preferably within Finance, Supply Chain, and Oracle HCM environments. Strong understanding of: Identity and Access Management (IAM) Data Classification Encryption Technologies Authentication and Authorization Secure SDLC Cloud Security Principles Years of Experience: 10 Years Preferred Skills Experience conducting security architecture and application security reviews. Understanding of cloud platforms such as AWS, Azure, or Google Cloud. Hands-on experience with security automation using Java or Python. Knowledge of ERP security models and Segregation of Duties (SoD). Familiarity with vulnerability management and risk assessment methodologies. Strong analytical, documentation, and communication skills. Ability to work effectively with cross-functional business and technical teams.