Applyπ Austin, Chicago, New York City, Salt Lake City, San Francisco
π§ Full-Time
πΈ 153000.0 - 180000.0 USD per year
π Revenue Intelligence Technology
- 6+ years of overall experience.
- 5+ years of relevant Information Security or Governance Risk Compliance (GRC) experience.
- Basic Cloud Security Knowledge.
- GRC tool and automation experience.
- In-depth knowledge of control and Risk frameworks including PCI DSS, NIST 800-37, ISO 27001, SOC 2.
- Ability to be hands-on and help the team succeed.
- Ability to navigate ambiguity in a fast-changing environment.
- Familiarity with attack frameworks and mitigation.
- Create and update Security Policies, standards and procedures.
- Create and manage corporate-wide security training.
- Plan, coordinate, and implement work assignments with process owners, control owners, external auditors, and consultants.
- Perform control testing, document results, and provide updates to the business.
- Partner with internal stakeholders on designing internal controls for ongoing risk mitigation.
- Clearly communicate security issues and risks to diverse audiences.
- Manage, perform, and report on Security Risk Assessments.
- Educate and train process and control owners on security practices.
- Ensure compliance with applicable controls based on a unified control framework.
- Evaluate and advise on new certification programs and security standards.
- Proactively identify and improve processes to enhance Gongβs programs.
- Work independently on complex programs and assignments with diverse teams.
Posted 3 months ago
Apply