Related skills
gdpr iso 27001 ccpa vanta nist 800-53📋 Description
- Coordinate IT security governance, risk and compliance across the enterprise
- Oversee security compliance activities, incl. risk assessments and audits
- Respond to security RFIs from customers/partners; review and negotiate agreements
- Support SOC2, ISO 27001, NIST 800-53 and other standards
- Conduct audit readiness assessments and coordinate resources
- Support GRC system implementation and administration
🎯 Requirements
- 3+ years in GRC with 1 year on a GRC automation tool (Vanta/Drata/Sprinto); Vanta preferred
- Experience designing and implementing information security policies and controls
- Experience in external security audits; SOC2 Type II preferred
- Strong knowledge of security tech/architecture (encryption, cloud security, IDS, DLP, app security)
- Advanced Third-Party Risk (TPRM) analysis; 3+ years evaluating SaaS vendors
- Privacy & DPAs; mapping vendor risks to GDPR/CCPA/HIPAA
🎁 Benefits
- Hybrid Work Model - 2–3 days in office
- Medical Insurance - Employee + dependents covered
- Life Insurance - Protection for what matters most
- Retirement Match Program - We invest in your future
- Paid Time Off - PTO + sick & casual leave
- Professional Development - Reimbursement program
Meet JobCopilot: Your Personal AI Job Hunter
Automatically Apply to All Other Jobs. Just set your
preferences and Job Copilot will do the rest — finding, filtering, and applying while you focus on what matters.
Help us maintain the quality of jobs posted on Empllo!
Is this position not a remote job?
Let us know!