Manager - Information Security Compliance
Core
Manage enterprise-wide security governance, risk, and compliance (GRC) programs, focusing on control assurance, regulatory compliance, and continuous monitoring.
Role type
Manager, Information Security GRC
Builds
Automated evidence collection practices and continuous control monitoring programs
Domain
Cybersecurity Governance, Risk, and Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security control frameworks (CIS, SOC 2/3, NIST), regulatory compliance management, security control testing, team leadership, executive reporting
Preferred skills
Professional security management certifications (CISSP, CISA, CISM, CRISC)
Technologies
NIST Cybersecurity Framework, NIST SP800-53, CIS Controls, SOC 2/3 Trust Services Criteria
Responsibilities
Manage security control assurance programs and testing procedures; Ensure compliance with external regulatory obligations; Build continuous control monitoring programs; Interface with engineering teams to design security controls; Report compliance results and risk trends to leadership; Lead a team of GRC practitioners
Seniority
Manager, hands-on leadership
