Manager, Governance, Risk & Compliance

🕒 July 14

🇺🇸 United States – Remote

💵 $150k - $170k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Accela

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2000

💼 Consulting

📦 Logistics

🏗️ Construction

Consulting • Logistics • Construction

Accela is a leader in providing cloud-based solutions designed to modernize government services. Their unified suite of innovative applications focuses on building more connected communities through enhanced efficiency and secure data management. Accela empowers local and state governments by streamlining processes such as building permits, licensing, cannabis regulation, and environmental health. With a focus on civic solutions, Accela aims to improve public sector operations by eliminating data silos and facilitating better interactions with residents. By leveraging their SaaS platform, governments can enhance service delivery, increase transparency, and reduce operational costs, leading to significant time and cost savings.

📋 Description

• Lead the governance, risk, and compliance function across security policies, standards, risk management, audits, third-party risk, and control operations. • Develop, maintain, and operationalize global security policies, standards, procedures, control documentation, and exception processes. • Own audit readiness and ongoing compliance programs across frameworks such as SOC 2, ISO 27001, GovRAMP, PCI DSS, HIPAA, NIST CSF, NIST 800-53, CCPA/GDPR, and other customer or regulatory requirements. • Lead GovRAMP and PCI DSS readiness, including control mapping, evidence collection, remediation tracking, stakeholder coordination, audit preparation, and audit support. • Coordinate audit evidence collection, control testing, remediation tracking, auditor communication, and management responses. • Maintain the security risk register, including identification, assessment, ownership, remediation, acceptance, exception tracking, and executive reporting of security risks. • Partner with control owners across Security, IT, Engineering, Legal, HR, Finance, Product, and Operations to ensure control effectiveness and accountability. • Manage third-party and supply chain risk management, including vendor security reviews, due diligence, risk assessments, contract security input, and remediation tracking. • Support customer security reviews, questionnaires, trust center content, security documentation, and customer-facing compliance responses. • Develop metrics and dashboards for audit status, control health, risk posture, vendor risk, policy exceptions, compliance readiness, and remediation progress. • Support incident response and privacy incident processes by ensuring regulatory, contractual, audit, and customer notification obligations are understood and tracked. • Partner with the CISO to communicate security posture, compliance progress, key risks, control gaps, and trade-offs to executives, customers, auditors, and regulators. • Drive continuous improvement of the GRC operating model, including automation, evidence reuse, control rationalization, risk prioritization, and policy lifecycle management.

🎯 Requirements

• 6+ years of experience in security governance, risk management, compliance, audit, third-party risk, or related cybersecurity roles. • Experience managing or supporting audits and compliance programs for SOC 2, ISO 27001, GovRAMP, PCI DSS, HIPAA, NIST 800-53, or similar frameworks. • Strong understanding of security controls, policy management, risk assessment, control testing, evidence collection, and audit readiness practices. • Experience working with auditors, customers, internal stakeholders, and executive leadership. • Experience managing third-party risk or vendor security review programs. • Ability to translate complex compliance obligations into practical business and technical requirements. • Strong project management skills with the ability to manage multiple audits, risks, remediation efforts, and stakeholder workstreams simultaneously. • Excellent written and verbal communication skills.

🏖️ Benefits

• flexible time off • comprehensive medical, dental, and vision plans • family planning benefits • 401(k) retirement savings plan with company match • health savings account with company contributions • flexible spending account • life, accident, and disability coverage • business travel insurance • employee assistance programs • other well-being benefits