Director of Governance Risk Compliance

Job Summary

Leading the governance, risk, and compliance efforts, the full-time remote Director of Governance Risk Compliance will develop and maintain information security policies, manage risk assessments, and ensure compliance with various security standards while advising senior management on the company's risk posture.

Key responsibilities

• Developing and maintaining the organization's Information Security Management System (ISMS) documentation and policies
• Conducting vendor risk assessments and coordinating external audit engagements to ensure compliance with security standards
• Staying current on regulatory environments and updating policies and procedures to mitigate security threats

Required qualifications

• US Citizenship
• 10+ years of hands-on experience in IT audit and/or compliance
• Strong understanding of security standards and frameworks including ISO27000 series and NIST Special Publication 800 series
• Previous experience with gaining an ATO or P-ATO for cloud implementations under FedRAMP or GovRAMP
• Experience managing security staff and collaborating with global teams