Remote Staff Lead, GRC Job in Utah, United States Snap Finance

Who you are

• Bachelor’s degree in Computer Science, Info Security, Business Admin, Privacy Law, or related field.
• Advanced degree or relevant certifications preferred (e.g., CISSP, CISM, CISA, CIPP).
• Minimum 10 years experience in security, compliance, and privacy roles, with leadership experience.
• Hands-on experience conducting audits and risk assessments.
• Deep understanding of compliance frameworks and privacy regulations (e.g., SOC 2, ISO 27001, NIST CSF, PCI, HITRUST, GDPR, CCPA).
• Proficiency in writing and implementing Info Security and Privacy Policies, Standards, Guidelines, and Procedures.
• Experience with Security Exception processes, risk management, and privacy impact assessments.
• Familiarity with software development and cloud computing security principles.
• Experience managing GRC tools and processes.
• Excellent communication skills for diverse audiences.
• Strong project management abilities.
• Detail-oriented with a bias toward action and continuous improvement.

What the job involves

• Develop an integrated information security, compliance, and privacy controls model.
• Drive creation and execution of security and privacy compliance roadmap.
• Conduct risk assessments to identify vulnerabilities and formulate remediation plans.
• Oversee audit activities and manage integration of audit findings.
• Develop and implement privacy policies in compliance with data protection regulations.
• Provide support to stakeholders and communicate the company’s compliance and privacy position.
• Build and enhance automated security, compliance, and privacy processes.
• Coordinate cross-functional team meetings to address control gaps and align on goals.