HQ - GRC Lead

1 hour, 13 minutes ago
Full-time
Lead
Cybersecurity
Jobandtalent

Jobandtalent

Jobandtalent is a world-leading job marketplace that connects workers with companies through its innovative app. With a focus on workforce optimization, the platform offers thousands of flexible jobs and cutting-edge technology to streamline the hiring...

Professional Services
1K-5K
Founded 2009
$1300M raised

Description

  • Own and lead the company’s GRC strategy across SOX, ISO 27001, and GDPR.
  • Design, implement, and maintain SOX control frameworks, including documentation, testing, and audit readiness.
  • Build and manage the Information Security Management System (ISMS) aligned with ISO 27001.
  • Ensure GDPR compliance across data processing activities, including data mapping, DPIAs, and privacy controls.
  • Lead internal and external audits and serve as the primary point of contact for auditors.
  • Identify compliance gaps and drive remediation plans with technical and non-technical teams.
  • Develop governance policies, procedures, and risk management frameworks.
  • Partner with Engineering and Security teams to embed controls into systems and SDLC processes.
  • Monitor regulatory and compliance changes and translate them into actionable requirements.

Requirements

  • 8+ years of experience in GRC, Risk, Compliance, or IT Audit roles.
  • Strong hands-on experience with SOX compliance programs, including design, testing, and audit coordination.
  • Solid knowledge of ISO 27001 and experience managing or supporting ISMS implementation.
  • Practical experience with GDPR in a product or corporate environment.
  • Experience working with internal and external auditors.
  • Strong stakeholder management and communication skills across technical and non-technical teams.
  • Ability to translate regulatory requirements into scalable business processes.
  • Fluent English.
  • Experience in SaaS or product-led companies is preferred.
  • Experience in Big 4 firms such as Deloitte, EY, PwC, or KPMG, or similar audit environments is preferred.
  • Familiarity with cloud environments such as AWS, GCP, or Azure is preferred.
  • Security certifications such as CISA, CISM, or ISO 27001 Lead Implementer/Auditor are preferred.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Ethics and Compliance Operations Specialist

Nebius 51-250 Internet Software & Services

Nebius is hiring an Ethics & Compliance Operations Specialist to strengthen and scale its global compliance program within a fast-growing international AI cloud company.

Confluence JIRA
28 minutes ago

Compliance Filings Specialist

PrePass 51-250 Road & Rail

PrePass is hiring a Compliance Filings Specialist to manage federal and state motor carrier compliance filings for transportation customers, ensuring submissions are accurate, timely, and fully compliant across multiple jurisdictions.

1 hour, 13 minutes ago

Compliance Manager

iT1 51-250 Internet Software & Services

iT1 is seeking a Compliance Manager in Tempe, AZ to oversee company-wide compliance programs supporting regulatory, contractual, and industry requirements across security, privacy, and operations.

Git
1 hour, 15 minutes ago

Medical Director, Clinical Regulatory Affairs

Oscar 1K-5K Insurance

Oscar is seeking a Medical Director for its Clinical Affairs team to lead clinical policy, regulatory, and compliance operations for its health insurance business.

1 hour, 28 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers