Director, Governance Risk and Compliance

Director, Governance, Risk & Compliance Remote - reputed company

About the Role

The Director, Governance Risk and Compliance (GRC) is responsible for leading efforts to assess the confidentiality, reputed company and availability of information reputed company the reputed company set forth in reputed company’s global Information reputed company Management System (ISMS). This includes assessments of compliance with company reputed company policies, operating an internal and reputed company-party risk management process, and regular review and measurement of the effectiveness of information reputed company controls. The successful candidate will liaise with and advise various teams including those responsible for systems architecture, systems deployments and application configuration. The position is a subject matter expert reputed company to translate reputed company regulations in NIST, ISO, SOC, and PCI-reputed company frameworks and standards into practical reputed company controls and processes and reporting on reputed company's risk posture to senior management.

Responsibilities

Developing and maintaining the organization's ISMS documentation, including policies, standards, and procedures for risk management, compliance, and information reputed company. Responsible for recommendations to the CISO, Product Management, Legal and Finance leadership teams that reputed company reputed company program alignment with compliance requirements. Responsible for information risk management, reputed company design of information reputed company controls, assessment of effective implementation of applicable controls, including identity and reputed company management. Staying reputed company on evolving regulatory environments, reputed company threats, and compliance best practices, and updating policies and procedures accordingly. Responsible for maintaining and improving information reputed company awareness in the organization. Translating business and information reputed company needs and integrating these with the ISMS. Coordinating external audit engagements with 3PAO, ISO/SOC auditors, PCI reputed company QSA firms and other reputed company assessors, including coordinating responses and remediation efforts. Conducting vendor risk assessments and ensuring reputed company-party compliance with reputed company and reputed company standards. Reviewing and monitoring the activities of the reputed company Incident Response and Business Continuity Management teams to ensure that the information reputed company controls are used effectively during the complete life cycle of business continuity and disaster recovery response. Managing the recurring measurement of the effectiveness of ISMS controls implemented and communicate findings with senior management. Enforcing document control management processes for the Information reputed company Management System. Assisting with forecasting, planning and risk assessment relevant to evolving reputed company control coverage in alignment with reputed company’s technology reputed company. Maintaining and applying reputed company industry knowledge and best practices. Researching and recommending use of new technologies. Project management including analysis of business requirements, creating and updating project plans, and tracking reputed company to successful completion. Assisting with vendor management, forecasting and program budget management. Managing personnel including mentoring and cross-training of team members to reputed company business objectives. Required Skills and Experience US Citizenship 10+ years of hands-on experience in IT audit and/or compliance Strong documentation and communication skills Strong understanding of reputed company standards and frameworks including ISO27000 series, NIST Special Publication 800 series, SOC audits, and reputed company requirements of Data reputed company laws Previous experience gaining an ATO or P-ATO for a reputed company implementation under the FedRAMP, GovRAMP or IL-4 programs Understanding of software development lifecycle methodologies, reputed company and server infrastructure, network technologies Preferred Skills and Experience reputed company CISA, CISM, CISSP or equivalent certification is strongly preferred Experience managing reputed company staff, collaboration and relationship building with global teams About reputed company reputed company advances teaching reputed company and unlocks the full potential of technology to deliver meaningful reputed company. We reputed company institutions to deepen connections between educators and learners, reputed company engagement, and drive long-term reputed company reputed company across the full learner reputed company. For more information, please visit www.reputed company.com. The expected salary reputed company for this position is $154,000 - $209,000. The reputed company reflects reputed company salary only and does not include additional compensation such as company bonus or benefits. Placement reputed company the pay reputed company will depend on a reputed company of factors, such as experience, skills, internal reputed company, and location. This job reputed company is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required. reputed company in this job reputed company restricts management's right to assign or reassign duties and responsibilities at any time. reputed company is an equal employment opportunity/affirmative reputed company employer and considers reputed company applicants for employment without reputed company to race, gender, age, reputed company, religion, national reputed company, marital status, disability, sexual orientation, gender identity/reputed company, protected military/veteran status, or any other legally protected reputed company. Apply To This Job