Governance, Risk & Compliance

Responsibilities:
• Assist with the management of security policies, standards, and procedures in alignment with industry best practices and customer contractual obligations
• Capture, document and manage information security risks, ensuring risk acceptance or risk remediation plans are documented
• Respond to SecurID customer requests regarding security and resiliency posture and practices, supporting and enabling winning new business and retaining existing customers
• Enhance the portfolio of sales / customer consumable materials that describe the security and resiliency posture, policies, controls, processes and practices within the SecurID organization
• Develop tools and processes and contribute to a library of responses to respond to customer security questionnaires, ensuring accurate and effective responses are provided in a timely manner to customer requests
• Act as an expert resource in the negotiation of acceptable Information Security contract provisions/language with customer and internal legal teams
• Facilitate audit activities with external audit firms and internal resources for SOC 2 Type II, ISO 27001/2and customer audit engagements
• Effectively manage, track and resolve findings and issues arising from external or customer audits alongside accountable service delivery teams
• Facilitate annual business continuity plan maintenance and exercises, creating a customer facing executive summary
• Partner with corporate communications to publish regular SRO companywide security awareness campaigns, general department news and security advisories
• Update and maintain Security Program content on internal SRO intranet site
• Support SRO KPI Metrics program for cross functional metric reporting and analysis