Security Compliance Manager

We are looking for a highly motivated Security Compliance Manager with a deep security and compliance background to lead system development and process improvement. As part of Deploy's Security Team, you will collaborate with engineers and auditors to meet security compliance controls as well as enhance security compliance capabilities. As a Security Compliance Manager, you will oversee the execution of our Information Security program for evaluating compliance with industry standards (ISO, SOC), federal regulations, and customer contractual requirements. You will have complete ownership and accountability of programs from start to finish, aimed at improving the Deploy Company personnel screening compliance and risk monitoring. The ideal candidate is comfortable interacting with both technology and business leaders across the organization at all levels. You will drive consensus among stakeholders and verify that controls are effective, or remediated to become effective.

Responsibilities

Manage Deploy's current risk management program; Manage external and internal audits, including reviewing materials for accuracy and adherence to regulatory expectations; Implement ISMS in coordination with executive and mid-level management; Develop reports capturing key business trends, metrics, and compliance status with recommended updates and evidence; Work with Engineering and Product teams to identify process improvements in change management, access management and general technology process controls; Provide compliance, risk, and controls expertise to support information security and compliance initiatives; Protect the business by assisting with cyber security risk assessments; Maintain awareness of industry best practices for data handling as it relates to the role; Manage a comprehensive Governance, Risk and Compliance program; Adhere to and champion policies, guidelines and procedures pertaining to the protection of information assets; Manage external security, privacy, and compliance requirements, including vendor and external requirements; Report actual or suspected security and/or policy violations/breaches; Define, develop, implement, and maintain policies and processes for consistent privacy practices and compliance with applicable privacy laws; Support Deploy's security review process from beginning to end; Serve as subject matter expert for information security principles, especially vendor and cloud security, and promote a culture of security; Interface with staff to facilitate efficient and secure use of technology services

Requirements

Bachelor's degree or related experience; Minimum 4+ years experience related to conducting risk-based assessment for information systems and/or operations; Minimum 1+ years experience running a comprehensive Governance, Risk and Compliance program; Minimum 2+ years experience leading industry standard (ISO 27001 or SOC 1/2) audits from either side; Strong knowledge of applicable privacy laws (CCPA/CPRA, GDPR); Thorough understanding of vulnerability management, penetration testing, and attack simulations; Experience supporting enterprise-wide Security Compliance programs designed to anticipate, assess, and minimize control gaps and audit findings; Ability to communicate in a written and oral format to technical and non-technical audiences in a business-friendly manner; Demonstrated success in a competitive environment; Highly self-motivated and ambitious in achieving goals; Strong team player, but can work and execute independently; Driven; Hungry to learn and actively look for opportunities to contribute; Highly organized and detail-oriented; can handle multiple projects and dynamic priorities

Benefits

Stock options may be offered in addition to base salary