Security Compliance and Risk Project Manager
269 E. Grand Ave South San Francisco, CA 94080 US
Job Description
- Drive governance & compliance control requirements with key partners (Product, Corporate IT, Security, Internal Audit, Privacy and Compliance).
- Assist in internal and external audits and continuously monitor external compliance / regulatory environments for changes needed to be applied to our current practices
- Help establish and manage audit and attestation process using the internal GRC tool
- Regularly collaborate with subject matter experts (SME), product teams, business partners, and management to evaluate security controls, develop remediation and mitigation plans, and track progress towards issue closure.
- Review and work with SMEs to assist in documentation of internal policy requirements based on industry standards, and relevant regulations and understand how they apply within the organization
- Ensure the completion of various control activities by partnering with control owners throughout the organization
- Perform ad hoc audits & special projects in support of overall security risk management.
- Develop reports and dashboards to support the Compliance & Governance program
Qualifications
Required
5+ years of governance, audit, compliance, risk, and / or security experience
- Experience in a governance or regulatory compliance environment related across industries (HIPAA, FEDRAMP, SOC, GDPR, etc.)
- Experience developing, championing, and managing internal compliance programs.
- Technical knowledge of technology controls in various environments (SaaS-heavy) and management of those controls in a GRC solution / tool
- Analytical thinker who is highly organized and pays close attention to detail.
- Bachelor of Science degree in Information Systems, Computer Science, Accounting / Audit, or a related technical field required.
- Ability to review existing processes, identify potential improvements & work with the appropriate stakeholders to drive efficiencies
- Lead collaboration with a diverse set of internal and external stakeholders - strong interpersonal skills
- Ability to identify areas for improvement in an existing control / process and drive change
Desired
- Experience in GRC tools (ex: Archer, ServiceNow or similar)
- Practical experience with process improvement frameworks is a plus (ex: Six Sigma or other)
- Experience with agile methodologies
- Prior internal or external audit experience
CO, NY candidates may not be considered.
Share This Job:
Related Jobs:
Login to save this search and get notified of similar positions.Although this hasn't been an issue at The Planet Group, the staffing industry has seen an increase in people falsely representing themselves as recruiters to gather personal information from job seekers. For your safety, do not provide sensitive data to anyone you have not spoken with thoroughly and never provide banking information during the application process. Candidate safety is a top priority at The Planet Group.