Listing Description

How you’ll spend your time:

• Help evolve LogicGate’s GRC programs with rapid scale and growth of processes in mind


• Drive and manage our suite of certifications, SOC 2 Type 2 and ISO 27001, and identify new certifications that will bring value to LogicGate’s target sales market


• Work closely with senior leadership across our Engineering, Product, Customer and Operations teams to set the standard for compliance programs with pragmatic solutions to current and future compliance challenges


• Become the biggest internal user and champion for our own product, the Risk Cloud


• Be a thought leader in the GRC space by sharing your experiences working with the Risk Cloud product through blogs, podcasts and internal enablement with Marketing and Sales


• Craft automation or technology recommendations around control enforcement and work with various Engineering & Technology stakeholders to make it happen, securely


• Act as program manager for security and compliance support to establish trust for our Go to Market teams as we engage with prospects and customers

We get excited about you if you have:

• You have 4+ years of experience building and/or managing InfoSec, privacy or compliance programs


• You have expertise in managing audits on either side of the table


• You are deeply knowledgeable about at least two of the following compliance frameworks: FedRAMP/NIST 800-53, ISO 27001/27701, GDPR/CCPA, SSAE 16/18


• You bring great project and stakeholder management experience


• You have a solid background partnering with technical and business teams to create pragmatic solutions around control exceptions and control design


• You are comfortable architecting and aligning new or changing frameworks against a baseline set of controls and evolving or adding controls as appropriate


• You believe in writing great documentation with a desire to educate others on leading GRC practices across the full lifecycle of control management


• You have a familiarity with automation techniques or tools for control testing or evidence collection