GRC / Risk Management Lead
Leads the governance, risk and compliance programme on a large federal cybersecurity contract for Accenture Federal Services, based in Washington, DC, and heads a small team of GRC analysts. The lead owns…
Security and technology roles from across the Security Buzz community.
Leads the governance, risk and compliance programme on a large federal cybersecurity contract for Accenture Federal Services, based in Washington, DC, and heads a small team of GRC analysts. The lead owns…
Owns Commitments at Vanta, the compliance automation company, as a senior product manager working remotely in the US. The product uses the Vanta Agent to pull the security commitments companies make in…
Runs the security operations centre for ARCO, the family of construction companies, from St. Louis, leading a team of cybersecurity analysts who handle monitoring, triage and incident response. The role is both…
Leads hands-on FedRAMP 20x work for Semperis as its information system security officer, based in the Hoboken office on a hybrid schedule. The ISSO interprets each FedRAMP requirement for leadership, assessors and…
A FedRAMP information system security officer for Semperis, working hybrid from Phoenix and serving as the company's everyday expert on FedRAMP 20x. Reporting to the Head of Risk and Compliance, the ISSO…
Semperis is hiring its FedRAMP ISSO for the Addison, Texas office on a hybrid basis, to lead the company's move to FedRAMP 20x certification for its cloud identity security products. Working for…
The designated FedRAMP information system security officer at Semperis, the hybrid identity security company, reporting to the Head of Risk and Compliance who acts as ISSM; this posting is for the Austin…
A GRC analyst at Reltio, the data platform company owned by SAP, handling customer assurance, vendor risk and privacy requests. The analyst answers customer security, privacy, compliance and AI governance questionnaires with…
Runs MeridianLink's identity and access governance programme as a senior analyst working remotely in the US. The analyst owns user access reviews from planning to remediation, makes sure every in-scope system, privileged…
A senior analyst on Ping Identity's governance, risk and compliance team, reporting to the GRC Manager and working remotely in the US. The analyst runs enterprise and product risk assessments, supports ISO…
Builds ID.me's Common Control Framework from scratch: one control set written so engineers can implement it, with each control mapped across SOC 2, ISO 27001, PCI DSS, HIPAA, FedRAMP and the company's…
A manager in Riveron's Cyber Security Advisory practice, leading client engagements that build governance, risk and compliance and cybersecurity programmes, working remotely in the US. The practice helps organisations stand up programmes…