Security Governance & Audit Specialist

📋 Description

• Design and build a Common Control Framework (CCF) with a defined ownership model and
• Own and maintain the policy, standard, and procedure (PSSOP) library, including authorship, review
• Run the exception management process end-to-end, including risk-based approvals, compensating
• Manage framework intake and regulatory changes, including gap assessments and remediation planning
• Determine applicability of requirements to new products, services, and platforms, and record scope
• Support audit readiness, external audits, and internal audit processes, ensuring all controls are

🎯 Requirements

• 8+ years in security governance, risk, and compliance (GRC) in SaaS, cloud, or enterprise technology
• Experience building a multi-framework controls set from the ground up, including control design
• Working knowledge of FedRAMP, including FedRAMP 20x, Key Security Indicators, continuous and
• Experience writing and maintaining policies, standards, and procedures, and running a risk-based
• Experience assessing new frameworks (e.g., ISO/IEC 42001, ISO/IEC 27701) against an existing
• Audit exposure: supported SOC 2, ISO 27001, or PCI DSS audits, with understanding of control

🎁 Benefits

• Comprehensive medical, dental, and vision insurance
• Health savings account and flexible spending accounts (medical, limited purpose, dependent care
• Basic and voluntary life and AD&D insurance
• 401(k) with company match
• Parental leave
• Unlimited paid time off subject to the terms and conditions of the PTO policy, including 8