Director of Governance Risk Compliance

Job Summary

Leading the governance, risk, and compliance efforts, the full-time remote Director of Governance Risk Compliance will manage the organization's Information Security Management System (ISMS), ensuring compliance with security policies and regulations while advising various teams on risk management and security controls.

Key responsibilities

• Developing and maintaining ISMS documentation, including policies and procedures for risk management and compliance
• Conducting vendor risk assessments and coordinating external audit engagements with security assessors
• Staying current on regulatory environments and updating policies and procedures to reflect best practices

Required qualifications

• US Citizenship
• 10+ years of hands-on experience in IT audit and/or compliance
• Strong understanding of security standards and frameworks including ISO27000 series and NIST Special Publication 800 series
• Previous experience gaining an ATO or P-ATO for a cloud implementation under FedRAMP or GovRAMP
• Understanding of software development lifecycle methodologies and cloud infrastructure