Compliance and Risk Manager

🕒 Outubro 29

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

🚔 Conformidade

👻 Score fantasma 12%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 12 dias.
• As vagas desta empresa costumam ser preenchidas em 46 dias.
• Sem salário divulgado.

Candidatar-se

Encontrar Vagas Remotas Similares

Sembi

SiteLinkedInTodas as Vagas

201 - 500 funcionários

Fundada em 2023

☁️ SaaS

🔐 Segurança

🤝 B2B

SaaS • Security • B2B

A Sembi é um provedor B2B de SaaS que oferece um portfólio unificado de ferramentas de qualidade e segurança de software. Oferece gestão de testes, automação, relatórios e otimização de testes impulsionada por IA (TestRail, Xray, Testmo, Ranorex, Xporter, DesignWise) juntamente com soluções de segurança de aplicativos e análise de códigos (PreEmptive, Kiuwan). A Sembi foca em facilidade de uso, escalabilidade e suporte de nível empresarial para ajudar equipes de desenvolvimento e QA a melhorar a qualidade, fortalecer a segurança e acelerar a entrega de produtos.

Descrição

• Own the compliance program for all Sembi brands, including SOC 2 audits, penetration testing, SIG and CAIQ responses, and NIST self-assessments • Build and operate an enterprise risk management program • Stand up and maintain a risk register, define the assessment methodology, drive remediation with system owners, and report risk posture to executive leadership quarterly • Run third-party risk management, including vendor assessment and tiering, subprocessors, and ongoing review cycles • Lead selection, implementation and administration of a GRC platform, including control mapping, evidence automation and vendor risk workflows • Own customer assurance, including security questionnaires, compliance agreement requests, Vanta trust centers and reusable assurance artifacts • Maintain the policy set and control framework against GDPR, CCPA, DORA, NIS2, HIPAA and the EU AI Act; finalize and operationalize AI governance policies • Handle data subject rights requests, deletion requests and DPA execution in partnership with Legal • Lead and develop the compliance team, set priorities, define ownership and mature the function • Support incident response and post-incident compliance obligations alongside Security • Report to the VP of Operations and work directly with Security, Legal, Engineering and Sales leadership

🎯 Requisitos

• 7+ years in compliance, governance or risk within SaaS or technology, including 2+ years leading a program or a team • Hands-on ownership of SOC 2 Type II audits from scoping through report issuance, ideally across multiple entities or product lines • Demonstrated experience building a risk program, a risk register or a third-party risk process where none existed • Experience implementing or administering a GRC platform such as Vanta, Drata, AuditBoard or OneTrust; full implementation ownership strongly preferred • Working knowledge of ISO 27001, NIST and SOC 2 control frameworks • Practical fluency in GDPR and US state privacy law • Familiarity with AI governance obligations and emerging requirements including the EU AI Act • Experience answering enterprise customer security and privacy diligence and engaging directly with customer security teams • Ability to drive remediation through engineering and product teams not directly managed • Strong written and verbal communication skills; ability to manage multiple workstreams, prioritize effectively and solve problems in a fast-moving environment • CISSP, CISA, CRISC or IAPP certifications preferred, not required • Employee must be based in the United States

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo