Director, Governance Risk and Compliance

Posted 70ds ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Director managing Governance Risk and Compliance for global EdTech ecosystem supporting over 150 million users. Assessing information security and compliance frameworks for effective risk management in the organization.

Responsibilities:

  • Leading efforts to assess the confidentiality, integrity and availability of information via the framework set forth in the company’s global Information Security Management System (ISMS)
  • Assessments of compliance with company security policies
  • Operating an internal and third-party risk management process
  • Regular review and measurement of the effectiveness of information security controls
  • Liaising with and advising various teams including those responsible for systems architecture, systems deployments and application configuration
  • Developing and maintaining the organization's ISMS documentation
  • Recommendations to the CISO, Product Management, Legal, and Finance leadership teams
  • Information risk management and collaborative design of information security controls
  • Conducting vendor risk assessments and ensuring third-party compliance
  • Reviewing and monitoring the activities of the Security Incident Response and Business Continuity Management teams
  • Managing the recurring measurement of the effectiveness of ISMS controls
  • Assisting with forecasting, planning and risk assessment relevant to evolving security control coverage
  • Researching and recommending use of new technologies
  • Project management including analysis of business requirements and tracking projects to successful completion
  • Managing personnel including mentoring and cross-training of team members

Requirements:

  • US Citizenship
  • 10+ years of hands-on experience in IT audit and/or compliance
  • Strong documentation and communication skills
  • Strong understanding of security standards and frameworks including ISO27000 series, NIST Special Publication 800 series, SOC audits, and security requirements of Data Privacy laws
  • Previous experience gaining an ATO or P-ATO for a cloud implementation under the FedRAMP, GovRAMP or IL-4 programs
  • Understanding of software development lifecycle methodologies, cloud and server infrastructure, network technologies
  • Experience managing security staff, collaboration and relationship building with global teams

Benefits:

  • Health insurance
  • Retirement plans
  • Paid time off
  • Flexible work arrangements
  • Professional development opportunities