Contract Position - GRC Risk Assessment

Key Responsibilities Translate complex technical concepts into clear, user-friendly language for non-technical audiences. Assess and analyze enterprise IT infrastructure, including file shares, shared drives, servers, and storage systems, to identify security risks and access control gaps. Maintain accurate documentation of security findings, remediation plans, and technical procedures. Conduct permission reviews and recommend secure remediation actions based on security best practices, least-privilege principles, and Zero Trust methodologies. Analyze and optimize file system permissions, including NTFS, SMB, shared folder permissions, and identity-based access controls. Collaborate with stakeholders to understand business requirements and align remediation activities with organizational objectives. Review and remediate vulnerabilities identified through security assessment and governance tools. Participate in incident, request, change, and problem management processes in accordance with ITIL practices. Contribute to security governance, compliance, and risk management initiatives. Develop, modify, and maintain PowerShell scripts to automate security and administrative tasks. Perform security assessments related to Active Directory, file systems, identity governance, and privileged access management. Work independently and collaboratively within cross-functional teams to achieve project and operational objectives. Provide recommendations to enhance data security, access governance, and operational efficiency. Stay current with emerging cybersecurity threats, vulnerabilities, and industry best practices. Technical Skills Access Management and Identity Security Strong understanding of NTFS permissions in Windows Server Experience with SMB share permissions in Windows and Linux environments Knowledge of NFS share permissions Understanding of Access Control Lists (ACLs) and Access Control Entries (ACEs) Hands-on experience with Active Directory (AD) users, groups, computers, organizational units, and Group Policy Management Strong understanding of IAM concepts, including Least Privilege and RBAC Security Tools: Preferred: Tenable Varonis Alternatives Qualys VMDR Rapid7 InsightVM Wiz Microsoft Purview Soft Skills Mandatory Excellent verbal and written communication skills Strong analytical and problem-solving abilities Stakeholder management with a customer-centric approach Strong planning, organizational, and attention-to-detail skills Ability to manage multiple priorities effectively Strong interpersonal and collaboration skills Flexibility and adaptability in dynamic environments Self-motivated, accountable, and results-oriented Qualifications Bachelor's or equivalent .