Director, Governance, Risk & Compliance
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Director of Governance, Risk & Compliance at CompassMSP leading compliance programs like SOC 2 and HITRUST. Overseeing risk management and team development in a managed services context.
Responsibilities:
- The enterprise policy and ISMS framework. Control mapped, maintained in Vanta, and governed by a formal annual review and approval cycle.
- The enterprise risk register, the scoring methodology behind it, and quarterly risk reporting to the executive team and the board.
- The certification roadmap. SOC 2 Type II, then HITRUST CSF and PCI DSS, with ISO 27001 to follow. You select the auditors, run the programs, and deliver the opinions.
- The third party risk program, and a centralized response capability for inbound client security questionnaires across SIG Lite, CAIQ, and custom formats.
- Compliance-as-a-Service. A tiered, recurring compliance offering for our client base, from SOC 2 readiness at the SMB end through multi framework managed compliance at the enterprise end. You design it, launch it, and grow it.
- Compliance program support to our CMMC practice, which serves defense industrial base clients and is pursuing C3PAO authorization.
- A seat on the Security Steering Committee alongside the CEO, CFO, CTO, and VP of Operations.
Requirements:
- Eight or more years in security, risk, or compliance, with at least three leading a GRC function or multi framework program.
- Compliance program experience inside an MSP, MSSP, or another multi tenant service provider. This one matters. Service provider compliance is a different discipline from single enterprise compliance, and we are looking for someone who already knows the difference.
- At least one SOC 2 Type II taken from readiness to clean opinion with you owning it.
- Real depth in two or more of: HITRUST CSF, PCI DSS, NIST CSF, NIST SP 800-171 and CMMC, ISO 27001.
- Hands on with a compliance automation platform. Vanta preferred, and you should be the person who configures the integrations, not the person who watches someone else do it.
- Fluency with formal risk methodology and a track record of running a risk register that executives actually use to make decisions.
- The ability to sit in front of a CEO or a board and explain risk as a business decision rather than a compliance demand.
- Leadership experience. You have hired and developed analysts and you want to build a team, not just a program.
- Nice to have****
- CISA, CRISC, CISM, or CISSP. HITRUST CCSFP. PCI ISA or QSA. CMMC RP or CCP.
- You have built a compliance service that clients paid for, not only a program that satisfied auditors.
- Private equity backed growth environment experience, including diligence support.
Benefits:
- Competitive pay
- Quarterly Bonuses
- Progressive PTO
- Medical/Dental/Vision/Life/Disability available
- Tax deferred retirement plan with company match
- Career Development and Coaching
- Fun work environment!
Similar Jobs
Senior Consultant, Gas Utility Regulation
Consultant/Senior Consultant at Current Energy Group focusing on gas utility regulation and policy analysis. Collaborating with clients on state-level utility policies and regulatory filings in the energy sector.
License Compliance Specialist
License Compliance Specialist at Ruvixx managing compliance cases in North America. Engaging with customers and stakeholders to drive software licensing success.
Compliance Advisor
Compliance Advisor at HarmonyCares managing compliance program for healthcare operations. Collaborating with teams to ensure adherence to federal and state regulations and best practices.
Compliance and Ethics Intern – Fall
Compliance and Ethics Intern assisting with assessments of compliance to laws and regulations. Collaborating with compliance teams and providing support on various projects.
Clinical Services Lead – Regulatory
Clinical Services Lead ensuring partner satisfaction by managing deliverables and team productivity. Collaborating with clinical teams to maintain high-quality service delivery.
Retirement Plan Compliance Administrator
Retirement Plan Compliance Administrator ensuring client plans remain compliant with IRS and ERISA regulations. Collaborating with consultants to maintain high-quality work in retirement plan compliance.
GRC Coordinator
GRC Coordinator managing Third-Party Risk Management processes within a growing SaaS group. Organizing compliance requests and maintaining documentation for audits.
Compliance Lead 2, Regulatory Compliance
Compliance Lead overseeing adherence to banking regulations and managing compliance programs at N3XT, a financial services startup bridging traditional markets and blockchain.
Regional Clinical Compliance Manager
Regional Clinical Compliance Manager ensuring clinical trial compliance at country and site levels in France. Collaborating with global stakeholders to protect patient safety and data integrity.
Regional Clinical Compliance Manager
Regional Clinical Compliance Manager ensuring compliance in clinical trials. Responsible for managing compliance risks and providing guidance on GCP requirements in UK.
Regional Clinical Compliance Manager
Regional Clinical Compliance Manager at BeOne overseeing clinical trial compliance in Romania. Collaborating with country teams for regulatory compliance and patient safety assurance.
Regional Clinical Compliance Manager
Regional Clinical Compliance Manager responsible for compliance oversight in clinical trials. Collaborating with global stakeholders to safeguard patient safety and data integrity.
Regional Clinical Compliance Manager
Regional Clinical Compliance Country Manager overseeing clinical trial compliance in Spain. Engaging stakeholders while ensuring adherence to Good Clinical Practice and regulatory requirements.
Dangerous Goods & Transportation Compliance Specialist – Gefahrgutbeauftragter
Compliance Specialist ensuring regulations in transportation of dangerous goods. Collaborating across teams to maintain safe and compliant supply chains in Europe.
Regulatory Fisheries Biologist
Regulatory Fisheries Biologist providing technical support for ESA consultations and environmental compliance for NOAA. Evaluating impacts on marine species and ensuring regulatory compliance.
Corporate Affairs Specialist – Regulatory
Regulatory Specialist ensuring Skeelo's legal framework across global markets. Mapping regulatory environments and supporting institutional legal formulations.
Senior Compliance Specialist
Sr. Compliance Specialist overseeing compliance onboarding processes for regulated entities at Monato. Focusing on KYC, PLD, and regulatory adherence.
Chemical Regulatory Analyst
Entry-level Chemical Regulatory Analyst ensuring regulatory data compliance. Collaborating on safety data sheets and regulatory information management for chemical products.
Compliance Operations Analyst
Compliance Operations Analyst supporting eBay's AML Transaction Monitoring program. Working with a team to identify unusual activities and ensure regulatory compliance.
Compliance Improvement Manager
Compliance Improvement Manager driving compliance initiatives and optimizing call center operations for HealthPlanOne. Collaborating with teams to enhance compliance processes in Medicare call center environment.