How Remoteville checks and expires listings
Staff Lead, GRC
Skills
Data PrivacyGovernanceRisk ManagementAnd CompliancePrivacy CompliancePrivacy PoliciesPrivacy Regulations
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Bachelor’s degree in Computer Science, Info Security, Business Admin, Privacy Law, or related field.
- Advanced degree or relevant certifications preferred (e.g., CISSP, CISM, CISA, CIPP).
- Minimum 10 years experience in security, compliance, and privacy roles, with leadership experience.
- Hands-on experience conducting audits and risk assessments.
- Deep understanding of compliance frameworks and privacy regulations (e.g., SOC 2, ISO 27001, NIST CSF, PCI, HITRUST, GDPR, CCPA).
- Proficiency in writing and implementing Info Security and Privacy Policies, Standards, Guidelines, and Procedures.
- Experience with Security Exception processes, risk management, and privacy impact assessments.
- Familiarity with software development and cloud computing security principles.
- Experience managing GRC tools and processes.
- Excellent communication skills for diverse audiences.
- Strong project management abilities.
- Detail-oriented with a bias toward action and continuous improvement.
Day to day
- Develop an integrated information security, compliance, and privacy controls model.
- Drive creation and execution of security and privacy compliance roadmap.
- Conduct risk assessments to identify vulnerabilities and formulate remediation plans.
- Oversee audit activities and manage integration of audit findings.
- Develop and implement privacy policies in compliance with data protection regulations.
- Provide support to stakeholders and communicate the company’s compliance and privacy position.
- Build and enhance automated security, compliance, and privacy processes.
- Coordinate cross-functional team meetings to address control gaps and align on goals.