Senior Compliance Consultant

Parachute Technology•San Ramon, CA

About The Position

The Senior Compliance Consultant leads client compliance consulting projects, helping clients achieve compliance targets such as NIST 800-171 and SOC 2. The role also manages Parachute’s internal information security compliance program to ensure IT activities, processes, and procedures meet defined requirements, policies, and regulations. The consultant performs risk assessments, identifies IT controls for significant processes, evaluates security-control implementations, and supports corrective action planning. The role includes researching compliance requirements, developing and managing policies, maintaining SOC 2 Type 2 documentation, supporting SOC ticket escalation, and coordinating vulnerability scans and remediation tickets. The consultant works with Parachute colleagues, clients, stakeholders, vendors, and business partners to align security programs and controls with compliance requirements and information security risks.

Requirements

At least 5 years of IT skills and a high level of information security experience and expertise.
Knowledge of information security risk management frameworks and compliance practices.
Knowledge of securing network technologies, client operating systems, and server operating systems.
Ability to develop security standards and guidelines based on best practices and industry standards.
Ability to explain technical details to nontechnical staff.
Excellent written and verbal communication, interpersonal, collaborative, and presentation skills, including formal report-writing experience.
Ability to communicate information security and risk-related concepts to technical and nontechnical internal and external stakeholders.
Sound knowledge of business management and working knowledge of information security risk management and cybersecurity technologies.
Knowledge of data privacy, compliance, security, and project management.
Understanding of risks and internal controls, and ability to evaluate control adequacy and efficiency.
Basic knowledge and understanding of relevant legal and regulatory requirements, including SOX, PCI DSS, HIPAA, NIST, CMMC, GDPR, CCPA, and CIS Controls.
Strong interest in technology.
Strong desire to contribute to a high-performing team.
Willingness to learn and teach.
Strong sense of ethics.

Nice To Haves

GRC certification, such as GRCP, CRISC, or CGRC-IT.

Responsibilities

Lead client compliance consulting projects, guiding clients toward compliance targets such as NIST 800-171 and SOC 2.
Perform risk assessments, identify IT controls for significant processes, analyze risk, and support risk assessment activities.
Understand technical implementation details needed to assess security controls.
Participate in developing and overseeing corrective action plans for security compliance issues.
Identify, research, and evaluate new compliance requirements and present them to relevant stakeholders.
Partner with Parachute team members and clients to align security programs with compliance requirements.
Assist with aligning and codifying controls to demonstrate how they mitigate information security risk.
Address information security needs of internal and external stakeholders relating to external business partners.
Support daily security activities, including assessing vendors for security risk and provisioning application access.
Manage the information security compliance program to ensure Parachute IT activities, processes, and procedures meet defined requirements, policies, and regulations.
Create and manage internal and external policies.
Manage Parachute’s SOC 2 Type 2 compliance documentation.
Assist with managing the SOC ticket escalation process.
Manage vulnerability scan schedules and create remediation tickets when needed.