Remote Sr. Security Compliance Specialist Job in Durham, NC Avalara

Who you are

• Bachelor's degree in computer science or equivalent experience
• 3+ years of security, governance, compliance, or risk management experience, in FinTech or SaaS environment
• 3+ years of professional experience working with ISO 27001, SOC 1, SOC 2, SOX, NIST and other similar frameworks
• Experience with global corporate security, risk management, or governance roles
• 3+ years working with security governance frameworks, regulatory requirements, and industry best practices (e.g., ISO 27001, NIST, GDPR, CCPA)
• Familiarity with security technologies, GRC tools (eg: ServiceNow), and methodologies
• Experience in security and privacy risk management principles
• Excellent communication skills across multiple partners and customers verbally and in writing

What the job involves

• Support a growing team building on the security compliance function
• Coordinate security compliance external assessments such as SOC 1, SOC 2, ISO 27001
• Handle coordination of quality control of assigned compliance controls such as access reviews, change reviews, terminated user analysis
• Ensure controls are performed by all partners within defined Service level agreements
• Perform compliance assessments and work with system owners to fix
• Help enhance Avalara's common controls framework
• Help collect and migrate control information into Avalara's GRC platform
• Be the contact for go-to-market related security inquiries
• Partner with Sales organization to support the sales engagement lifecycle, including customer meetings and customer security inquiries
• Develop customer-facing security documentation
• Identify areas for automation and business process improvements
• Partner with internal and external groups on multiple simultaneous projects

Application process

• Apply online