Senior Information Security GRC Specialist

BHG Financial

Senior Information Security GRC Specialist leading the Business Continuity and Disaster Recovery program at BHG Financial, committed to enhancing organizational resilience and risk management.

Posted 6/11/2026full-timeRemote • 🇺🇸 United StatesSeniorWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own and lead the enterprise Business Continuity and Disaster Recovery (BC/DR) program, including strategy, governance, and execution.
Define and maintain BC/DR frameworks, policies, and standards, including RTO/RPO expectations, system tiering, and recovery strategies.
Drive enterprise-wide Business Impact Analysis (BIA) processes to identify critical services, dependencies, and recovery priorities.
Establish and oversee BC/DR testing strategy, including scenario design, execution, and continuous improvement of recovery capabilities.
Evaluate organizational resilience and identify gaps, risks, and opportunities to improve recovery readiness.
Advise leadership on resilience risks, recovery tradeoffs, and business continuity investment priorities.
Report on BC/DR readiness and testing outcomes to senior leadership and support board-level reporting.
Lead or support risk assessments for critical systems, strategic initiatives, and operational processes.
Define and evaluate risk related to policy exceptions, resilience gaps, and third-party dependencies.
Collaborate with business and technology leaders to embed resilience into operational processes and system design.

Requirements

What you’ll need

Experience in a BC/DR role, with a solid understanding of planning and testing.
Eight (8) years of experience in the IS GRC field or combination of experience and education in related disciplines.
Bachelor’s Degree, ideally in Computer Engineering, Computer Science, Cybersecurity or Information Systems Management.
Possess current relevant certifications (e.g., CISA, CISM, CRISC, etc.) or be willing to obtain within 1 year of assignment.
Familiar with compliance requirements such as FFIEC, PCI, GLBA, CCPA, SOX, etc.
Familiar with IS frameworks such as SOC 2, NIST, ISO, FISMA, etc.
Familiar with IS risk frameworks such as OCTAVE, FAIR, ISACA Risk IT, ISO 27005, NIST CSF, etc.
The ability to manage multiple priorities and navigate complex issues.
Strong documentation skills.
Excellent interpersonal and communication skills, with the ability to adapt communication style for broader business.
Ability to analyze information.
Proficiency in tackling complex challenges.
Creative problem-solving abilities.
Ability to translate technical requirements to business objectives.
**Travel requirement:** All roles require travel during the first 6 months of employment to attend the BHG Oars in Experience. After the initial 6 months, ongoing travel is expected at approximately ~5% annually for periodic team on-sites, team meetings, and cross-functional collaboration.
**Work Authorization: **This role is not eligible for employer-provided immigration sponsorship. To be considered, applicants must already possess valid U.S. work authorization that will not require sponsorship now or in the future.

Benefits

Comp & perks

Medical/Rx/Dental/Vision coverage for employees and their eligible family members
Competitive PTO and vacation policies
1 Friday off each month for Wellness Weekends
Company 401(k) plan with employer contributions after one year
Company-sponsored training and certification opportunities
Quarterly award ceremonies where top achievers are celebrated and receive additional bonuses
Ongoing volunteer opportunities to give back to the community through our BHG Cares program

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Business ContinuityDisaster RecoveryBusiness Impact AnalysisRisk AssessmentPolicy EvaluationRecovery StrategiesTesting StrategyDocumentationInformation AnalysisProblem Solving

Soft Skills

Interpersonal SkillsCommunication SkillsAdaptabilityMulti-Priority ManagementCreative Problem SolvingLeadershipCollaborationAnalytical SkillsStrategic ThinkingContinuous Improvement

Certifications

CISACISMCRISC