Information Security Compliance Manager

Job Summary

Seeking a full-time Information Security Compliance Manager with expertise in ISO, SOC, CMMC, and FedRAMP compliance who will manage automation of security plans, maintain risk assessments, and collaborate with cross-functional teams to ensure security controls are effectively implemented.

Key responsibilities

• Automate generation of System Security Plans (SSP) and develop automated Plans of Action and Milestones (POAMs)
• Communicate security compliance issues with stakeholders and track mitigation tasks while generating reports and metrics
• Coordinate vendor security assessments and ensure adherence to security policies and standards across Synack's infrastructure

Required qualifications

• 8+ years of experience in IT Security Strategy, Risk Management, and Compliance with a Cloud Service Provider
• Proficient in Python, Terraform, and CI/CD pipelines, with experience integrating tools with AI
• Familiarity with Enterprise Governance, Risk Management, and Compliance (GRC) tools
• Knowledge of security regulations and frameworks including ISO27000, SOC2, and FedRAMP
• Experience with event monitoring tools and Cloud Native Application Protection Platforms (CNAPP)