Principal Governance Risk and Compliance Analyst

5 days ago

Apply Now

Receive Emails with Similar Jobs

Red Canary

WebsiteLinkedInAll Job Openings

Threat Detection • Endpoint Detection & Response • Endpoint Security • Managed Security • Threat Hunting

201 - 500 employees

Founded 2017

🔒 Cybersecurity

🔐 Security

Description

• Lead governance, risk, and compliance initiatives • Conduct regular policy and control effectiveness reviews • Identify and implement auditing data automation projects • Lead internal audits and risk assessments • Manage external audits against standards like SOC 2 Type II • Maintain security and compliance certifications • Lead vendor risk management function • Respond to security and compliance inquiries from stakeholders • Support sales in vetting security terms in contracts • Oversee relevant security awareness training • Lead business continuity and incident response exercises

Requirements

• 5+ years of experience with SOC 2 Type II and ISO 27001 audits • 5+ years of managing or performing security questionnaires and vendor assessments • Experience addressing security and compliance terms in commercial contracts • Ability to articulate and shift between compliance and regulatory frameworks • Understanding of risks presented by cloud-native architecture and compliance strategies • Strong experience interacting with auditors • Expertise in identifying and mitigating risks • Experience in automating audit data collection • Outstanding written and verbal communication skills • Practical mindset balancing compliance and business needs • Ability to lead multiple projects simultaneously • Patient and positive attitude

Benefits

• Eligible for stock options • Participation in company's bonus program • Rich benefits program for full-time members