Governance, Risk & Compliance Manager

September 12

Apply Now

Receive Emails with Similar Jobs

Wrapbook

WebsiteLinkedInAll Job Openings

Wrapbook is a smart, intuitive platform that makes production payroll and accounting easier, faster, and more secure.

51 - 200

💰 $100M Series B on 2021-11

Description

Engaging in developing policy lifecycle, Third Party Risk, and Security Awareness initiatives. Leading the organization-wide information security compliance capability by designing, developing, and implementing programs to ensure IT activities, processes, and procedures align with necessary requirements, policies, and regulations. Representing Wrapbook in information security matters through clear communication with all levels of company staff and external parties. Establishing requirements and policies for our employees to follow. Own Information Security Policy lifecycle. Coordinating risk collection and review activities, resulting in calibrated risks for presentation. Enhancing the current approach to assess and track Third Party Risk. Developing and maintaining customer assurance packages and other self-service security resources. Maintaining and optimizing continuous compliance tools to effectively track security-oriented work. Spearheading the Security Awareness program, fostering a robust security culture across Wrapbook. Coordinating and tracking security programs and audits, including project scope, decisions, involved parties, timelines, measurements, and success criteria. Cultivating productive relationships with partners and stakeholders to ensure security programs integrate with and support cross-functional teams.

Requirements

Bachelor’s degree in a technical field (ex: IT, Engineering, Accounting, Business Admin) or 5+ years of related field expertise At least 5 total years of experience working in Security/GRC and are able to demonstrate knowledge of core Security basics. Working understanding of compliance in cloud-native technology stacks Ability to develop security standards and guidelines based on best practices and industry standards 3+ years of experience with advanced auditing. Bonus if multiple frameworks. 3+ years of Project and/or Program management experience with ability to demonstrate organization, communication, execution and leadership to drive outcomes. Understanding of common security and privacy standards, regulations, and laws relating to cloud, privacy and application security (e.g., SOC 1 and 2, ISO 27001 - ISMS, ISO27017 - Cloud Security, ISO27018 - Protection of PII in the Cloud, GDPR/CCPA) Empathy for customers and a thoughtful listener. Able to build trust and relationships with fully virtual team members. Excellent communication and interpersonal skills, with the ability to effectively communicate and present cybersecurity risks and recommendations to stakeholders at all levels. Detail oriented and accountable for results.

Benefits

Unlimited Paid Time Off Work from anywhere in Canada and USA Health and Dental benefits Up to $1500 towards IT set up for your home Up to 2% matching RRSP / 401K Learning and Development opportunities Up to $50 USD/ $66.50 CAD towards Internet/Cell phone service