Director, Governance Risk and Compliance

Job not on LinkedIn

🕒 September 23

🇺🇸 United States – Remote

💵 $154k - $209k / year

⏰ Full Time

🔴 Lead

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Anthology Inc

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💰 Venture Round on 2023-01

Anthology delivers education and technology solutions so that students can reach their full potential and learning institutions thrive. Millions of students around the world are supported throughout their education journey via Anthology’s ecosystem of flagship SaaS solutions and supporting services, including the award-winning Blackboard® (LMS), Anthology® Student (SIS/ERP), and Anthology® Reach (CRM). Through the Power of Together, we are uniquely inspiring educators and institutions with innovation that is meaningful, simple and intelligent to help customers redefine what’s possible and create life-changing opportunities for people everywhere. www.anthology.com.

📋 Description

• Lead efforts to assess the confidentiality, integrity, and availability of information through the company’s global Information Security Management System (ISMS) • Assess compliance with company security policies and operate internal and third-party risk management processes • Review and measure the effectiveness of information security controls • Advise systems architecture, systems deployment, application configuration, Product Management, Legal, Finance, and senior management teams • Translate NIST, ISO, SOC, and PCI-DSS frameworks and regulations into practical security controls, processes, and risk-posture reporting • Develop and maintain ISMS documentation, including policies, standards, and procedures • Recommend security program alignment with compliance requirements • Manage information risk, design security controls, and assess implementation, including identity and access management • Monitor regulatory environments, security threats, and compliance best practices; update policies and procedures • Maintain and improve organizational information security awareness • Coordinate external audits with 3PAO, ISO/SOC auditors, PCI DSS QSA firms, and other assessors, including responses and remediation • Conduct vendor risk assessments and ensure third-party compliance with security and privacy standards • Monitor Security Incident Response and Business Continuity Management activities • Measure ISMS control effectiveness and communicate findings to senior management • Enforce ISMS document control processes • Assist with forecasting, planning, risk assessment, vendor management, and program budget management • Research and recommend new technologies • Manage projects from business requirements and project planning through successful completion • Mentor and cross-train team members and manage personnel

🎯 Requirements

• US Citizenship • 10+ years of hands-on experience in IT audit and/or compliance • Strong documentation and communication skills • Strong understanding of security standards and frameworks including ISO27000 series, NIST Special Publication 800 series, SOC audits, and security requirements of Data Privacy laws • Previous experience gaining an ATO or P-ATO for a cloud implementation under the FedRAMP, GovRAMP or IL-4 programs • Understanding of software development lifecycle methodologies, cloud and server infrastructure, network technologies • Experience managing security staff, collaboration and relationship building with global teams • Fluency in written and spoken English • Current CISA, CISM, CISSP or equivalent certification is strongly preferred