Security Compliance Manager

Deploy•San Francisco, CA

12d

About The Position

Deploy is seeking a highly motivated Security Compliance Manager with a strong security and compliance background to lead system development and process improvement. As part of the Security Team, this role collaborates with engineers and auditors to meet security compliance controls and improve the organization’s security compliance capabilities. The manager oversees execution of Deploy’s Information Security program to evaluate compliance with industry standards such as ISO and SOC, federal regulations, and customer contractual requirements. The role owns programs from start to finish, including initiatives to improve personnel screening compliance and risk monitoring. The ideal candidate can work with technology and business leaders at all levels, build stakeholder consensus, and verify that controls are effective or remediated.

Requirements

Bachelor’s degree or related experience.
At least 4 years of experience conducting risk-based assessments for information systems and/or operations.
At least 1 year of experience running a comprehensive Governance, Risk and Compliance program.
At least 2 years of experience leading ISO 27001 or SOC 1/2 audits from either side.
Strong knowledge of applicable privacy laws, including CCPA/CPRA and GDPR.
Thorough understanding of vulnerability management, penetration testing, and attack simulations.
Experience supporting enterprise-wide Security Compliance programs designed to anticipate, assess, and minimize control gaps and audit findings.
Ability to communicate effectively in writing and verbally with technical and non-technical audiences in a business-friendly manner.
Demonstrated success in a competitive environment.
Highly self-motivated and ambitious in achieving goals.
Strong team player who can also work and execute independently.
Driven and self-directed, with a strong desire to excel.
Eagerness to learn and actively seek opportunities to contribute.
Highly organized and detail-oriented, able to handle multiple projects and changing priorities.

Responsibilities

Manage Deploy’s current risk management program.
Manage external and internal audits, reviewing materials for accuracy and adherence to regulatory expectations.
Implement the Information Security Management System (ISMS) in coordination with executive and mid-level management.
Develop reports capturing business trends, highlights, lowlights, and compliance program metrics; provide status updates, recommendations, detailed metrics, and evidence.
Work with Engineering and Product teams to identify process improvements and efficiencies in change management, access management, and general technology process controls.
Provide compliance, risk, and controls expertise to support information security and compliance initiatives.
Assist with cybersecurity risk assessments to protect the business.
Maintain awareness of industry best practices for data maintenance and handling relevant to the role.
Manage a comprehensive Governance, Risk and Compliance program.
Adhere to and champion policies, guidelines, and procedures for protecting information assets.
Manage external security, privacy, and compliance requirements, including vendor requirements and requirements placed on Deploy.
Report actual or suspected security or policy violations and breaches.
Define, develop, implement, and maintain policies and processes that enable consistent privacy practices, minimize risk, protect confidential information across media types, and comply with applicable privacy laws and regulations.
Support security reviews from start to finish by identifying stakeholders, assembling documentation, drafting responses, scheduling and leading calls or meetings, and communicating follow-up activities.
Serve as a subject matter expert on information security principles and practices, especially vendor and cloud security, and promote a culture of security.
Work with staff throughout the firm to facilitate efficient and secure use of technology services.