Director, Governance Risk and Compliance

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $154k - $209k / year

⏰ Full Time

🔴 Lead

🚔 Compliance

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Anthology Careers

WebsiteLinkedInAll Job Openings

1 - 10 employees

👥 HR Tech

🤝 B2B

☁️ SaaS

HR Tech • B2B • SaaS

Anthology Careers is a company specializing in onboarding services and HR solutions for businesses. They provide tools and support for processes such as ADP onboarding, Workbright I-9 employment verification, and time and attendance management. The company also offers specific services for Canadian hires, ensuring compliance with various employment laws and regulations. Their platform facilitates the seamless onboarding of new employees while offering assistance through FAQs and live support.

📋 Description

• Lead efforts to assess the confidentiality, integrity and availability of information through the company's global ISMS framework • Assess compliance with company security policies • Operate internal and third-party risk management processes • Review and measure the effectiveness of information security controls • Liaise with and advise systems architecture, systems deployments, and application configuration teams • Develop and maintain ISMS documentation, including policies, standards, and procedures • Recommend security program alignment with compliance requirements to the CISO, Product Management, Legal, and Finance leadership teams • Manage information risk and collaboratively design and assess information security controls, including identity and access management • Monitor evolving regulations, security threats, and compliance best practices and update policies and procedures • Maintain and improve organizational information security awareness • Translate business and information security needs into the ISMS • Coordinate external audits with 3PAO, ISO/SOC auditors, PCI DSS QSA firms, and other security assessors, including responses and remediation • Conduct vendor risk assessments and ensure third-party compliance with security and privacy standards • Review and monitor Security Incident Response and Business Continuity Management activities across business continuity and disaster recovery lifecycles • Measure ISMS control effectiveness and communicate findings to senior management • Enforce document control management processes for the ISMS • Assist with forecasting, planning, and risk assessment for evolving security control coverage aligned with technology strategy • Maintain and apply industry knowledge and best practices • Research and recommend new technologies • Manage projects, including business requirements analysis, project plans, and completion tracking • Assist with vendor management, forecasting, and program budget management • Manage personnel, including mentoring and cross-training team members

🎯 Requirements

• US Citizenship • 10+ years of hands-on experience in IT audit and/or compliance • Strong documentation and communication skills • Strong understanding of security standards and frameworks including ISO27000 series, NIST Special Publication 800 series, SOC audits, and security requirements of Data Privacy laws • Previous experience gaining an ATO or P-ATO for a cloud implementation under the FedRAMP, GovRAMP or IL-4 programs • Understanding of software development lifecycle methodologies, cloud and server infrastructure, network technologies • Experience managing security staff, collaboration and relationship building with global teams • Fluency in written and spoken English • Current CISA, CISM, CISSP or equivalent certification is strongly preferred • Candidates must be legally authorized to work in the country where the role is based at the time of hire and must maintain that authorization for the duration of employment • The company does not provide visa sponsorship or immigration support for this position

🏖️ Benefits

• Additional compensation such as company bonus or benefits • Equal employment opportunity/affirmative action protections