Compliance and Risk Manager

🔥 1 minute ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

🚔 Compliance

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Sembi

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2023

☁️ SaaS

🔐 Security

🤝 B2B

SaaS • Security • B2B

Sembi is a B2B SaaS provider delivering a unified portfolio of software quality and security tools. It offers test management, automation, reporting, and AI-driven test optimization (TestRail, Xray, Testmo, Ranorex, Xporter, DesignWise) alongside application security and code-analysis solutions (PreEmptive, Kiuwan). Sembi focuses on ease of use, scalability, and enterprise-grade support to help development and QA teams improve quality, strengthen security, and accelerate product delivery.

📋 Description

• Own the compliance program for all Sembi brands, including SOC 2 audits, penetration testing, SIG and CAIQ responses, and NIST self-assessments • Build and operate an enterprise risk management program • Stand up and maintain a risk register, define the assessment methodology, drive remediation with system owners, and report risk posture to executive leadership quarterly • Run third-party risk management, including vendor assessment and tiering, subprocessors, and ongoing review cycles • Lead selection, implementation and administration of a GRC platform, including control mapping, evidence automation and vendor risk workflows • Own customer assurance, including security questionnaires, compliance agreement requests, Vanta trust centers and reusable assurance artifacts • Maintain the policy set and control framework against GDPR, CCPA, DORA, NIS2, HIPAA and the EU AI Act; finalize and operationalize AI governance policies • Handle data subject rights requests, deletion requests and DPA execution in partnership with Legal • Lead and develop the compliance team, set priorities, define ownership and mature the function • Support incident response and post-incident compliance obligations alongside Security • Report to the VP of Operations and work directly with Security, Legal, Engineering and Sales leadership

🎯 Requirements

• 7+ years in compliance, governance or risk within SaaS or technology, including 2+ years leading a program or a team • Hands-on ownership of SOC 2 Type II audits from scoping through report issuance, ideally across multiple entities or product lines • Demonstrated experience building a risk program, a risk register or a third-party risk process where none existed • Experience implementing or administering a GRC platform such as Vanta, Drata, AuditBoard or OneTrust; full implementation ownership strongly preferred • Working knowledge of ISO 27001, NIST and SOC 2 control frameworks • Practical fluency in GDPR and US state privacy law • Familiarity with AI governance obligations and emerging requirements including the EU AI Act • Experience answering enterprise customer security and privacy diligence and engaging directly with customer security teams • Ability to drive remediation through engineering and product teams not directly managed • Strong written and verbal communication skills; ability to manage multiple workstreams, prioritize effectively and solve problems in a fast-moving environment • CISSP, CISA, CRISC or IAPP certifications preferred, not required • Employee must be based in the United States

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume