Security Industry Specialist, Subsidiary & Acquisition GRC
Core
Drive regulatory compliance requirements for consumer devices (Ring, Blink, Amazon Keys) and ensure successful audit executions by designing and executing security/compliance programs.
Role type
Senior GRC specialist (subsidiary & acquisition)
Builds
High-impact security or compliance programs for consumer devices and cloud environments
Domain
Consumer IoT devices, Cloud Security, Regulatory Compliance
Required skills
Security risk assessment, Compliance program design, Technical control review, Regulatory requirement rationalization, Security metrics development, Control library maintenance
Preferred skills
AWS Professional certification, Software engineering best practices, Cryptography knowledge, Security architecture design
Technologies
AWS, NIST, SOC 2, ISO 27001, PCI DSS, HIPAA
Responsibilities
Assess maturity of processes and controls for data protection and insider threats; Engage with business teams to ensure compliance to information security policies; Review technical security controls like access controls and encryption; Liaise with auditors to articulate control implementation; Develop and maintain security risk metrics.
Seniority
Senior, hands-on IC