Sr GRC & Compliance Manager (CST & EST considered)

📋 Description

• Lead security, risk, compliance, and AI governance programs
• Manage SOC 2, ISO 27001, HITRUST, FISMA, HIPAA, PCI-DSS compliance
• Coordinate PCI-DSS audit cycle and evidence collection
• Develop and maintain compliance policies and control narratives
• Maintain centralized risk register and evidence tracking
• Report on audit status, risks, and remediation progress

🎯 Requirements

• 5+ years in information security governance, risk, compliance, or auditing
• Hands-on SOC 2 or comparable security audit management
• Strong understanding of IT controls (IAM, change, vulnerability, incident)
• Proven project and program management capabilities
• Excellent written and verbal communication skills
• Preferred: CISA, CISM, CRISC, or CISSP certification

🎁 Benefits

• Remote position
• Medical, dental, and vision insurance
• 401(k) plan with employer matching
• PTO and paid holidays
• Professional growth opportunities