Sr GRC & Compliance Manager
New
J
JobgetherSecurity compliance
Candidates based in the United States, CST & EST consideredFull-TimeManager
Salary125,000 - 150,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- At least five years of professional experience in information security governance, risk management, compliance, auditing, or a closely related discipline.
- Required Skills
- HIPAA
Requirements
- At least five years of experience in information security governance, risk management, compliance, auditing, or a closely related discipline.
- Hands-on experience managing SOC 2 or comparable security audits, including control mapping, evidence collection and validation, auditor coordination, and remediation tracking.
- Strong understanding of security and IT controls, including identity and access management, change management, vulnerability management, incident response, logging and monitoring, backup and recovery, third-party risk, and security governance.
- Ability to coordinate compliance across technical teams and business functions, establish control ownership, and maintain stakeholder accountability.
- Strong evidence-review skills, including assessing whether documentation demonstrates that a control operated as expected.
- Project and program management experience managing deadlines, dependencies, competing priorities, remediation, and escalations.
- Written and verbal communication skills to explain technical audit findings, compliance risks, and remediation needs to technical teams and executive leadership.
- Organizational skills and attention to detail for maintaining structured documentation, tracking open items, and reporting status.
- Ability to work effectively in a remote environment and provide occasional after-hours support for production implementations or critical system issues when required.
- Preferred: Experience managing enterprise compliance programs across multiple entities, departments, or business units.
- Preferred: Familiarity with GRC or audit management platforms and structured evidence repositories.
- Preferred: Knowledge of NIST Cybersecurity Framework (NIST CSF), CIS Controls, and ISO 27001; CISA, CISM, CRISC, CISSP, or equivalent practical experience.
Responsibilities
- Lead day-to-day execution of security, risk, compliance, and AI governance programs.
- Manage compliance activities across SOC 2, ISO 27001, HITRUST, FISMA, HIPAA, and PCI-DSS.
- Coordinate the PCI-DSS audit cycle, including scope, control ownership, evidence, readiness, remediation, auditor requests, fieldwork, and reporting.
- Establish an AI Governance program with appropriate controls, accountability, documentation, and risk management processes.
- Maintain consolidated mappings of audit requirements and controls across business units, systems, and reports.
- Coordinate control owners and validate audit evidence before submission to external auditors.
- Identify control deficiencies, evidence gaps, and risks, and drive remediation plans with accountable owners.
- Maintain a centralized risk register, evidence-tracking process, compliance calendar, and recurring control-testing procedures.
- Develop compliance policies and governance documentation, and report audit status, risks, and remediation progress to leadership.
- Implement a repeatable, year-round compliance operating model following the PCI-DSS audit.
View Full Description & ApplyYou'll be redirected to the employer's site
