Governance, Risk, and Compliance Lead

Job Description

• Provide subject matter expertise in merging acquisition employees into SOC2 and ISO27001 certifications.
• Oversee and manage SOC2 and ISO compliance processes, ensuring continuous readiness and maintaining certification status.
• Regularly review, update, and improve security and privacy policies to align with industry standards and regulations like GDPR and US privacy laws.
• Act as the SME in automating and streamlining evidence collection for audits and compliance processes.
• Lead the onboarding of newly acquired businesses into the SOC2 and ISO compliance framework.
• Ensure the business stays compliant with evolving GDPR and US privacy regulations.
• Work with cross-functional teams to identify opportunities to improve cybersecurity posture, response, and compliance.

• Proven experience in mergers and acquisitions, specifically 1st year audit from an acquisition for both SOC2 and ISO27001.
• Proven experience managing SOC2 and ISO 27001 compliance in a SaaS or technology company.
• Strong knowledge of GDPR, US privacy laws, and evolving global privacy requirements.
• Expertise in audit management, including serving as a primary point of contact for external auditors.
• Experience with evidence collection automation and managing compliance cadence activities.
• Ability to integrate newly acquired teams and systems into existing security and compliance processes.
• Experience working with Windows environments and mobile device management for PCs.
• Strong communication and leadership skills.

• Medical, dental, and vision insurance
• Short-term and long-term disability insurances
• AD&D and life insurance
• 401k plan
• Paid vacation, sick leave and holidays
• Six weeks of paid parental leave