GRC Platform & Program Coordinator (Intern)

WHAT YOU WILL DO

As the GRC Platform & Program Coordinator, you will be critical to the buildout of the function with cross-organizational impact. With an initial focus on Technology and Converged (digital and physical) security, the successful candidate will manage the GRC platform and advance diverse projects. In time, the scope of the role, like that of GRC at Blockchains, will encompass the enterprise, and the person in this role will need to grow accordingly. In the first year, it is anticipated that platform coordination will require at least 40% of the successful candidate’s time, with up to 25% each as cross-functional liaison and in project operations, and about 10% in ad hoc duties, as generated or assigned.

WHAT YOU WILL NEED TO SUCCEED

To succeed, you will need experience with a unique mix of attributes: fact-based, logical, analytical; self-directed technical savvy across SaaS and on-prem platforms, integrating and leveraging disparate data sources; ability to capture, assess and distill large amounts of information and to summarize their scope and significance; intuitive sense with the capacity to form, test, affirm or deny hypotheses; exemplary interpersonal skills, effortless interaction and native partnering with different personality types across professional functions – business, legal, IT, cybersecurity, application development to name a few – as well as both inside and outside the organization; effective at getting things done under occasionally tight timeframes, with minimal supervision and a robust sense of humor, influencing others loaded with things to do, too.

Essential or Desired Knowledge includes, but is not limited to:

• Governance: at least two years of experiential knowledge of IT and cybersecurity or enterprise governance provisions, no less than two of which have included drafting, for example, policies, plans, standards and protocols, processes and procedures, playbooks, and the like.
• Risk: no less than three years working with authoritative standards for IT and cybersecurity risk and controls, including NIST CSF, SP 800-53 r5 and 800-37 r2 or ISO 27000 Series and 31000:2018. Knowledge of assessment and independent validation best practices for the foregoing standards and SOC2 Type 2 would prove valuable.
• Compliance: no less than two years of exposure or commensurate knowledge derived from one year of applying cross-jurisdictional privacy regulations, such as GDPR, CCPPA, and NYDFS (bonus points for exposure to others, such as AML/CFT, by diverse regulators: FinCEN, OFAC, EU, Fed/FDIC/OCC).
• Knowledge of:
  • GRC Platforms: if you know what they are and understand what they do – from ITRM and TPRM to IRM/ERM – and what they need to work, how they work, and what they work with, you’ll have a strong start.
  • GRC Program: knowledge of IT and Cybersecurity project lifecycles and mechanics, well-versed in underlying infrastructure and operations, including change management, Dev(Sec)Ops, threat and vulnerability management, incident response, and data governance.
• Governance: experience across the analysis, drafting, approval, and implementation lifecycle of at least ten governance provisions (as defined above) or demonstrable experience standing up a governance model for IT (cite ITIL) or cybersecurity (cite NIST or ISO, or both).
• Risk: evidence of experience with an enterprise risk registry or crafting frameworks for risk profiling, harmonized threat analysis, the discovery of risk appetite, justification of response options for discovered risks, and corresponding control recommendations in IT or cybersecurity settings.
• Compliance: at least one year of experience tactically applying corporate legal and compliance provisions to technology – IT or cybersecurity – for Privacy especially (other regulations will be considered, especially if they are cross-jurisdictional).
• Hands-on experience with
  • GRC Platforms: if you have two or more years working at the console on Archer GRC or ServiceNow (GRC module), you’ll be more than qualified for this role.
  • GRC Program: if you have lifecycle experience of at least five TPRM or two SOC2 Type 2 internal and five external reviews, you’ll be qualified for this role. Bonus points for experience applying GRC elements in other IT, cybersecurity, or enterprise projects (such as new risk models, drafted policy or procedural gap closures, or implemented compliance provisions) that you will need to explain.

OUR VISION

Blockchains is committed to protecting and empowering individuals through the development of applications, services, and ecosystems designed to change the way people interact with technology, infrastructure, and each other. Software solutions in development by Blockchains focus on preparing the world for the next phase of the internet’s evolution – Web 3.0 – with an emphasis on digital identity, digital asset custody, IoT, and a stable means of digital payment.

Blockchains is dedicated to innovation, and its efforts do not stop at software. Blockchains envisions a world transformed by blockchain technology, in which digital- and real-world interactions are interwoven. Blockchains plans to build out a real-life sandbox in northern Nevada, where it, along with other like-minded companies and individuals, can come together to innovate and collaborate to create a better future for all.

YOUR EDUCATION AND EXPERIENCE

Preference will be given to candidates with at least a BA/BS. Demonstrable training or certifications in relevant technologies – from Windows or Mac to Office 365, SharePoint or Teams, Asana, and other workflow-automation tools – may prove helpful. The ability to procure, analyze, evaluate and explain large amounts of data succinctly and engage colleagues, vendors and partners, clients, and others with a smile is as essential as attention to detail and native organizational skills.

Blockchains, Inc. (“Blockchains”) is proud to be a diverse workforce, and we are committed to inclusion and diversity to ensure equal opportunity for all applicants. Blockchains provides equal employment opportunities to all employees and applicants regardless of race, color, religion, sex, sexual orientation, gender identity and/or expression, national origin, age, marital status, physical or mental disability, veteran status, or any other characteristic protected by federal, state, or local laws.

When you apply to a job on this site, the personal data contained in your application will be collected by Blockchains, Inc. (“Controller”), which is located at 610 Waltham Way, Sparks, NV 89437 and can be contacted by emailing [email protected]. Controller’s data protection officer is Edward O'Connor, who can be contacted at [email protected]. Your personal data will be processed for the purposes of managing Controller’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment.
Your personal data will be shared with Greenhouse Software, Inc., a cloud services provider located in the United States of America and engaged by Controller to help manage its recruitment and hiring process on Controller’s behalf. Accordingly, if you are located outside of the United States, your personal data will be transferred to the United States once you submit it through this site. Because the European Union Commission has determined that United States data privacy laws do not ensure an adequate level of protection for personal data collected from EU data subjects, the transfer will be subject to appropriate additional safeguards under [either the standard contractual clauses or the Privacy Shield]. You can obtain a copy of the standard contractual clauses by contacting us at [email protected].
Your personal data will be retained by Controller as long as Controller determines it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have to right to data portability. In addition, you may lodge a complaint with an EU supervisory authority.