Manager - Audit and Compliance

This is a remote position.

• Develop a strategy on security & and privacy for SaaS offerings and based on that create/modify security policies procedures and any other required artifacts
  
• Identify gaps in SaaS offerings security architecture and create a plan to close the gaps utilizing updated processes procedures industry certifications etc.
  
• Lead the response to security & privacy related clients questionnaires on SaaS offerings
  
• Monitor access to all systems and maintain access control profiles on computer networks and systems.
  
• Track documentation of access authorizations to all resources.
  
• Prepare for security and compliancerelated audits including but not limited to GDPR SOC1 SOC2 Microsoft SSPA CCPA and other related compliance and security audits.
  
• Conduct Internal audits and keep evidence
  
• Responsible for representing and driving all external audits.
  
• Responsible for staying abreast of the latest industry security practices and technologies
  
• Meet with clients and Business Owners to analyze document and define requirements associated with new development or maintenance and enhancements to existing security roles and permissions.
  
• Review completed roles/permissions with users to ensure requirements are fully met.
  
• Deliver services that meet regulatory specifications.
  
• Work with internal and external auditors to document and confirm that all security administrative duties are properly performed as well as demonstrate overall compliance.
  
• Work with internal stakeholders and keep the audit compliance documents updated from time to time
  
• Work with internal auditors & and ensure the internal audit happens as per the schedule
  
• Monitor the risk register and drive the open items to closure
  
• Ensure project and client alignment with company security standards where applicable.
  
• This is an individual contributor role where you will be responsible for defining the security and privacy policies and keep required artifacts to ensure we are always compliant and ready for audits.
  

Requirements

• 3 to 5 years of experience in information security and privacyrelated roles for SaaS or related technology segments.
  
• Must have experience in handling SOC 2 or GDPR or CCPA or ISO or other similar levels for audits.