🛠 Tech Stack

💼 About This Role

You'll lead technology risk assessments for a fast-growing cybersecurity company, ensuring operational resilience and compliance. You'll protect the organization by identifying and mitigating risks across vendors and technology environments.

🎯 What You'll Do

• Conduct technology risk assessments across new and existing applications
• Review and evaluate risk exception requests and compensating controls
• Perform third-party vendor security assessments and due diligence
• Track risk plan milestones and drive issue management follow-ups

📋 Requirements

• 5+ years of experience in Information Security or GRC
• Deep knowledge of GRC concepts and frameworks like NIST SP 800-53/CSF, ISO 27001
• Hands-on experience with GRC platforms (e.g., Archer, ServiceNow, MetricStream, Vanta)

✨ Nice to Have

• Experience with cloud technologies and SaaS environments
• Familiarity with automation of GRC tasks

🎁 Benefits & Perks

• 🏖️ Unlimited PTO
• 🏥 Comprehensive health insurance
• 📈 401k matching
• 💻 Remote flexibility
• 📚 Professional development