Security and Compliance Manager
Core
Manage the day-to-day security and compliance program, coordinate audits, operate risk management, and maintain ISMS policies for an agentic data trust platform.
Role type
Senior GRC Manager (Security & Compliance)
Builds
Enterprise-grade data trust platform (Ataccama ONE)
Domain
Data Quality, Governance, and Security
Required skills
GRC program management, audit coordination (SOC 2, ISO 27001), risk register maintenance, policy authoring, contract security review, RFx/questionnaire management, regulatory assessment, team leadership, stakeholder liaison, automation/scripting
Preferred skills
AI tool guardrails, cloud architecture fluency, incident response input, vendor risk management, security awareness training
Technologies
AWS, Azure, Kubernetes, CI/CD
Responsibilities
Run security compliance program day to day, coordinate internal and external audits, operate corporate risk management program, maintain ISMS policy and standards library, review security terms in customer contracts, manage RFx and customer security questionnaire process, assess and onboard new compliance standards, build and maintain internal GRC processes, provide input into incident response and vendor risk management, manage a small team of compliance specialists, drive security awareness and training initiatives, liaise with stakeholders across departments
Seniority
Senior, hands-on IC with team management
