Senior Security Governance, Risk & Compliance Specialist

Job not on LinkedIn

🔥 12 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Clario

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1973

🏥 Healthcare

💼 Consulting

📦 Logistics

💰 Private Equity Round on 2019-10

Healthcare • Consulting • Logistics

Clario is a company specializing in accelerating clinical trials from initiation to implementation through advanced technologies and services. Since 2018, Clario has revolutionized endpoint analyses in clinical trials by integrating over 30 artificial intelligence-enabled solutions across more than 600 active trials, enhancing data quality and patient privacy while expediting data collection processes. Clario provides a comprehensive clinical trial management platform, offering solutions such as eCOA, cardiac safety, medical imaging, precision motion, and respiratory services in various therapeutic areas including oncology, cardiology, and neurology. Known for its global reach, Clario supports clinical trials in over 100 countries with a strong focus on decentralized and hybrid trial models. The company's commitment to patient safety and innovation is reflected in their over 26,000 trials and involvement in numerous new drug approvals.

📋 Description

• Support and mature the organization’s Security GRC program • Ensure IT, Product, and Information Security controls align with policies, standards, regulations, and best practices • Coordinate and support external client audits, certifications, and assessments, including SOC 1, SOC 2, ISO 27001/2700x, client audits, and other assessments or accreditations • Evaluate compliance status, identify control gaps, develop remediation plans, track progress, and drive issues through resolution • Support the risk management framework, including inherent and residual risk assessments, risk tolerance evaluation, risk discussions, and internal and third-party risk assessments • Assess, monitor, and manage information security risks associated with third parties, vendors, and external partners • Support audit responses, client questionnaires, RFPs, findings, and assurance requests • Develop, maintain, and govern Information Security policies, standards, procedures, and documentation • Identify and recommend improvements to IT and Information Security compliance processes • Apply ISO/IEC 27001, NIST, COBIT, and ITIL frameworks • Develop compliance and risk reports, metrics, and management insights • Support security education and awareness initiatives • Collaborate with technical and non-technical teams and influence stakeholders • Contribute to GRC tools, platforms, processes, and operational procedures • Prioritize multiple initiatives and deliverables while maintaining quality and attention to detail • Perform other related duties and projects as assigned

🎯 Requirements

• Bachelor’s degree in Information Systems, Information Technology, Cybersecurity, or a related field; an Associate’s degree may be considered based on relevant experience and certifications • 5+ years of experience in Information Technology, Information Security, Governance, Risk, and/or Compliance • Strong experience building, maintaining, or maturing Security Governance, Risk, and Compliance programs • Solid understanding of information security risk management and compliance methodologies • Experience facilitating and leading risk discussions using qualitative and quantitative information • Knowledge of ISO/IEC 27001, NIST Cybersecurity Framework, NIST 800-53, COBIT, and ITIL • Experience supporting or coordinating security audits, assessments, certifications, and client assurance activities • Experience with third-party/vendor security risk management • Understanding of solution lifecycle management and related information security and compliance requirements • Experience developing and implementing SOPs, policies, and processes • Ability to influence and collaborate with stakeholders at different levels without formal authority • Ability to establish and leverage internal and external cross-functional relationships • Strong business acumen and ability to translate business needs into practical security and compliance solutions • Excellent written and verbal communication skills for technical and non-technical audiences • Experience working with globally distributed teams and stakeholders • Ability to adapt to evolving security risks, regulations, technologies, and business requirements • Relevant security certifications preferred, such as CISSP, CRISC, CISM, CISA, or FAIR