Director, Governance Risk and Compliance

Job not on LinkedIn

🕒 September 23

🇺🇸 United States – Remote

💵 $154k - $209k / year

⏰ Full Time

🔴 Lead

🚔 Compliance

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Anthology Careers

WebsiteLinkedInAll Job Openings

1 - 10 employees

👥 HR Tech

🤝 B2B

☁️ SaaS

HR Tech • B2B • SaaS

Anthology Careers is a company specializing in onboarding services and HR solutions for businesses. They provide tools and support for processes such as ADP onboarding, Workbright I-9 employment verification, and time and attendance management. The company also offers specific services for Canadian hires, ensuring compliance with various employment laws and regulations. Their platform facilitates the seamless onboarding of new employees while offering assistance through FAQs and live support.

📋 Description

• Lead efforts to assess the confidentiality, integrity and availability of information through the company’s global Information Security Management System (ISMS) • Assess compliance with company security policies • Operate internal and third-party risk management processes • Regularly review and measure the effectiveness of information security controls • Liaise with and advise teams responsible for systems architecture, systems deployments and application configuration • Develop and maintain ISMS documentation, including policies, standards, and procedures for risk management, compliance, and information security • Recommend security program alignment with compliance requirements to the CISO, Product Management, Legal, and Finance leadership teams • Manage information risk, collaboratively design information security controls, and assess effective implementation of applicable controls, including identity and access management • Monitor evolving regulatory environments, security threats, and compliance best practices and update policies and procedures • Maintain and improve information security awareness across the organization • Translate business and information security needs and integrate them with the ISMS • Coordinate external audits with 3PAO, ISO/SOC auditors, PCI DSS QSA firms, and other security assessors, including responses and remediation • Conduct vendor risk assessments and ensure third-party compliance with security and privacy standards • Review and monitor Security Incident Response and Business Continuity Management teams’ activities throughout business continuity and disaster recovery lifecycles • Manage recurring measurement of ISMS control effectiveness and communicate findings to senior management • Enforce document control management processes for the ISMS • Assist with forecasting, planning, and risk assessment for evolving security control coverage aligned with technology strategy • Maintain and apply current industry knowledge and best practices • Research and recommend new technologies • Manage projects, including business requirements analysis, project plan creation and updates, and project tracking through completion • Assist with vendor management, forecasting, and program budget management • Manage personnel, including mentoring and cross-training team members

🎯 Requirements

• US Citizenship • 10+ years of hands-on experience in IT audit and/or compliance • Strong documentation and communication skills • Strong understanding of security standards and frameworks including ISO27000 series, NIST Special Publication 800 series, SOC audits, and security requirements of Data Privacy laws • Previous experience gaining an ATO or P-ATO for a cloud implementation under the FedRAMP, GovRAMP or IL-4 programs • Understanding of software development lifecycle methodologies, cloud and server infrastructure, network technologies • Experience managing security staff, collaboration and relationship building with global teams • Fluency in written and spoken English • Current CISA, CISM, CISSP or equivalent certification is strongly preferred • Candidates must be legally authorized to work in the country where the role is based at the time of hire and must maintain that authorization for the duration of employment • The company does not provide visa sponsorship or immigration support for this position