Назад
Company hidden
3 дня назад

Manager, Compliance (GRC)

93 500 - 185 150$
Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Manager, Compliance (GRC): Leading global audit and certification programs, maintaining controls, and strengthening compliance operations across a SaaS environment with an accent on audit readiness, control automation, and regulatory change management. Focus on building scalable Vanta workflows, measuring control effectiveness, and coordinating remediation across security, legal, engineering, product, customer trust, and risk teams.

Location: Remote in the United States; New Jersey, United States of America is also listed.

Salary: $93,500–$185,150 USD base salary per year.

Company

hirify.global delivers continuous data, application, identity, and AI-system recovery across cloud-native and hybrid environments, using AI to support enterprise resilience.

What you will do

  • Lead the operation and maturity of global audit and certification programs, including maintenance, evidence collection, readiness, and remediation for 12+ commercial audits.
  • Identify control gaps and partner with control owners to implement sustainable improvements.
  • Build, automate, and refine controls and tests in Vanta, validating test results and evidence quality while establishing ownership and exception workflows.
  • Define compliance metrics covering control effectiveness, monitoring coverage, automation adoption, audit readiness, and remediation progress.
  • Partner with Information Security, Legal, Engineering, Product, Customer Trust, Risk, and other functions to embed compliance into daily operations.
  • Monitor regulatory and standards changes, translate them into program improvements, and provide senior compliance guidance for risk-informed decisions.

Requirements

  • 7+ years of professional experience in GRC, information security, and/or audit, preferably in a global technology or SaaS organization.
  • Working knowledge of security and compliance frameworks such as ISO 27001, ISO 27701, SOC 2 Type 2, NIST CSF, NIST 800-53, or similar frameworks.
  • Experience developing and maintaining policies, procedures, control documentation, and other compliance program materials.
  • Practical technical ability to use AI and automation, adapt tools and workflows to GRC needs, improve evidence collection and control monitoring, validate outputs, and protect sensitive information.
  • Strong analytical skills, attention to detail, and the ability to synthesize complex information into clear conclusions and recommendations.
  • Ability to build cross-functional relationships, influence stakeholders, navigate competing priorities, and drive work through completion.
  • Experience overseeing global compliance requirements, privacy requirements, and/or regulated cloud environments.

Nice to have

  • Experience with FedRAMP, CMMC, GovRAMP, or SOX.
  • Certifications such as CISA, CISM, CISSP, CRISC, or ISO 27001 Lead Auditor/Implementer.

Culture & Benefits

  • Remote role based in the United States.
  • Continuous professional development and product training.
  • Career growth and advancement opportunities.
  • Inclusive company culture and a comprehensive global benefits package.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →