Manager - Information Security Compliance

📋 Description

• Hand-on technical manager leading GRC initiatives in an enterprise security program.
• Focus on security control assurance, regulatory compliance, policies and standards, and automated
• Collaborate with engineering teams to design and improve security controls and automation of tests.
• Report compliance, risk trends, and remediation priorities to senior leadership with dashboards and

🎯 Requirements

• 8+ years in information security governance, risk, compliance, or security assessment/audit.
• 4+ years in security control assessment; 2+ years leading or managing others.
• Domain expertise in CIS Controls, SOC 2/3, NIST CSF, and NIST SP800-53; experience mapping controls
• Technical understanding of security controls and implementing them in a complex enterprise IT
• Ability to develop and refine control tests tailored to specific implementations; strong
• Bachelor's degree in Information Systems/Computer Science or related field, or equivalent

🎁 Benefits

• Hybrid work schedule based in Reston, VA.
• Competitive base salary with discretionary bonus and potential stock awards.
• Equal opportunity employer; strong benefits package described on Our Careers Page.