Sr Manager, InfoSec Governance Risk and Compliance (GRC)

The role

You will lead and own the global Governance, Risk, and Compliance (GRC) program. You will manage a high-performing team and drive compliance efforts for various security certifications.

What you will do

• Lead and own the GRC program globally and manage a high-performing team.
• Manage and drive compliance efforts and audits for certifications like FedRAMP, IRAP, ISO 27001, HIPAA, SOC1/SOC2, and PCI DSS.
• Serve as a subject matter expert on security frameworks and standards.
• Manage and respond to customer security audit and compliance requests.
• Maintain continuous compliance and monitoring of security controls.
• Collaborate with Sales, Marketing, and Customer Success teams to communicate security posture.
• Review and negotiate information security exhibits and contractual terms with the legal team.
• Lead the Security Awareness and Training program.
• Track and drive remediation efforts for control deficiencies and gaps.
• Oversee the Third Party Risk and Vendor Security Assessment program.

Required qualifications

• At least 7+ years of experience leading GRC programs and managing compliance certifications and audits.
• At least 3+ years experience as a direct leader, managing a team.
• Strong knowledge of security frameworks such as NIST SP 800-53, NIST 800-171, ITAR, PCI DSS, SOC2, and FedRAMP.
• Ability to manage and influence stakeholders across multiple departments and time zones.
• Excellent project management, analytical, and problem-solving skills.
• Strong interpersonal and communication skills.
• Self-motivated with ability to work independently.
• Ability to handle multiple competing priorities and deadlines.

Nice to have

• Bachelor’s degree in related field

Benefits

• Medical
• Dental
• Vision
• Transportation
• Snacks and weekly lunches in the office
• Training and career development program
• Regular social events, competitive outings, team running events, and musical activities

About the company

Founded in 2000, Ivalua is a leading global provider of cloud-based procurement solutions. They offer a leading cloud-based spend management platform to help brands manage spend, suppliers, and ESG performance.