Senior Compliance Specialist

Vaga não está no LinkedIn

🕒 Outubro 14

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟠 Sênior

🚔 Conformidade

👻 Score fantasma 16%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 27 dias.
• As vagas desta empresa costumam ser preenchidas em 73 dias.
• Sem salário divulgado.

Candidatar-se

Encontrar Vagas Remotas Similares

Mechanical Orchard

SiteLinkedInTodas as Vagas

11 - 50 funcionários

💼 Consultoria

📦 Logística

📣 Marketing

💰 $2.000.000 Seed Round em 2022-10

Consulting • Logistics • Marketing

A Mechanical Orchard é uma empresa de tecnologia nativa em IA que se especializa na modernização de sistemas e software legados. Sua abordagem inovadora envolve o uso de ferramentas aprimoradas por IA para reinventar e operar aplicações críticas de negócio, especialmente as em mainframes, com risco mínimo. A empresa utiliza um processo iterativo de engenharia reversa e replicação para modernizar progressivamente e migrar aplicações para a nuvem, mantendo a estabilidade dos sistemas enquanto possibilita a inovação. Como líderes em modernização de sistemas legados, a Mechanical Orchard ajuda as empresas a se adaptar às mudanças do mercado de forma rápida e eficiente, garantindo que seus sistemas estejam preparados para o futuro.

Descrição

• Own the day-to-day operation and continuous improvement of ISO 27001, SOC 2, and GDPR compliance programs. • Maintain program scope, track compliance obligations, schedule reviews, maintain documentation, and ensure audit readiness. • Inspect systems and workflows, assess control effectiveness, and collect and validate evidence from CSPs and internal systems. • Lead the internal audit program, including planning and conducting audits, documenting findings, and verifying corrective actions. • Lead pursuit of CMMC certification, agency-specific ATOs, NIST SP 800-171, and other federal and defense requirements. • Define scope, assess controls, identify gaps, drive remediation, identify applicable STIGs, and maintain SSPs, POA&Ms, and authorization documentation. • Lead enterprise risk management, chair risk committee meetings, maintain the risk register, and facilitate risk assessments and treatment actions. • Develop and maintain security and compliance policies, procedures, and control documentation. • Lead external audits and compliance assessments as primary contact for auditors and assessors. • Oversee vendor and third-party security risk reviews. • Serve as the organization’s DPO and advise on privacy compliance, DPIAs, data subject requests, and supervisory-authority communications. • Support customer security and compliance due diligence for federal and defense opportunities. • Oversee security awareness and compliance training programs. • Own and optimize Vanta compliance tooling, integrations, monitoring, and evidence collection workflows. • Drive recurring control activities, including access reviews, incident response exercises, and business continuity and recovery tests. • Report compliance status, audit findings, remediation progress, and certification readiness to leadership.

🎯 Requisitos

• 5+ years of experience in GRC, information security compliance, or audit, including direct ownership of security compliance programs and remediation efforts. • Proven experience obtaining and maintaining agency-specific ATOs, including preparing authorization packages, addressing assessment findings, and managing ongoing compliance and continuous monitoring requirements. • Hands-on experience administering Vanta or a comparable GRC platform, including configuring scope, control mappings, integrations, and automated evidence collection. • Ability to directly inspect cloud configurations, IAM, logging, and operational workflows; collect and validate evidence from source systems; and assess control design and operating effectiveness. • Demonstrated experience leading SOC 2 examinations and/or ISO 27001 certification audits from scoping and readiness through completion and remediation of findings. • Strong working knowledge of CMMC, NIST SP 800-171, RMF, and applicable STIGs, including translating requirements into controls, evidence, and remediation actions. • Strong knowledge of GDPR and CPRA, with practical experience advising on privacy compliance, maintaining processing records, and supporting DPIAs and data subject requests. • Degree in information security, computer science, information systems, or a related field, or equivalent practical experience. • Relevant professional certifications such as CCA, CCP, CRISC, CISM, or CISSP are preferred. • Prior experience as an ISSM or ISSO is strongly preferred.

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo