Manager, Security and Compliance

The Judge Group - New York, NY

Full-time - Mid Level

Onsite - New York, NY

Administrative and Support Services

About the position

The Compliance Lead/Manager will oversee Security and Compliance for a SaaS Online Booking Tool (OBT) focused on business travel. This role involves developing a multiyear roadmap, managing execution, and leading security initiatives within the business unit. The ideal candidate will have hands-on experience with PCI/SOC2 compliance, stakeholder engagement, and a strong understanding of business risk management.

Responsibilities

• Oversee Security and Compliance for the SaaS Online Booking Tool.
• Develop a multiyear roadmap and manage execution against it.
• Lead security for the business unit as part of a larger enterprise.
• Engage stakeholders to gain support for initiatives.
• Develop and maintain strategy for SOC 2 Type 2 and PCI-DSS attestations.
• Work with audit support contractors to plan and execute audits.
• Lead product security efforts and develop product security/SDLC strategy.
• Lead vulnerability management program and develop metrics for tracking remediation.
• Lead Incident Response process in collaboration with the NOC team.
• Lead Third-Party Risk Management program and vendor assessments.

Requirements

• Hands-on experience with PCI/SOC2 compliance.
• Experience with customer engagements, RFPs, or security questionnaires.
• Technical experience with tools in the security ecosystem.
• Experience managing and working with teammates across multiple time zones.
• Understanding of business risk appetite and tolerance.
• Experience with GDPR, CCPA/CPRA compliance.

Nice-to-haves

• Experience with larger organizations and banks leading PCI/SOC2.
• Travel industry experience.
• SaaS experience.
• Experience with Fortify On-Demand and Nexus IQ.
• Experience with container security management.
• Experience with industry-standard vulnerability tools.

Benefits

• Remote work flexibility
• Professional development opportunities
• Health insurance coverage
• 401k retirement plan