Manager, Security, Governance, Risk and Compliance

This is a fully remote position, open to applicants in California, +1 more state.

📋 Description

• Facilitate and synchronize security operations among security and IT teams that support enterprise platforms and SaaS/PaaS environments.

• Assist in the implementation and ongoing maintenance of SaaS security governance processes that adhere to internal policies, regulatory standards, and industry norms.

• Oversee security initiatives and deliver status updates, issue monitoring, and risk visibility to management.

• Monitor and communicate key risk indicators, metrics, and compliance status.

• Establish, implement, and uphold security baselines, standards, and control frameworks for SaaS and PaaS solutions.

• Aid in control lifecycle management, which includes defining, documenting, and validating controls.

• Align controls with frameworks such as NIST, ISO 27001, and OWASP.

• Support both internal and external audits by ensuring audit readiness and collecting necessary evidence.

• Organize security assessments, testing activities, and risk evaluations.

• Manage security exception processes, which involve risk documentation, stakeholder communication, approval tracking, and remediation follow-up.

• Observe exception trends concerning SaaS and PaaS workloads.

• Oversee security governance for platforms including Workday, Salesforce, Snowflake, ServiceNow, and Microsoft 365.

• Maintain approved security baselines while monitoring for configuration drift or compliance gaps.

• Collaborate with platform owners on configuration, change, and release management.

• Work with business stakeholders to enhance secure adoption and operational security maturity.

• Partner with IAM and data governance teams on access controls, RBAC models, and data protection strategies.

• Act as a liaison between security, compliance, IT, and business teams.

• Coordinate with stakeholders and vendors regarding SGRC Vendor Risk Management assessments.

⛳️ Requirements

• Proven experience in security program management, cloud security, SaaS governance, and SGRC functions.

• In-depth knowledge of security frameworks such as NIST, ISO 27001, and OWASP.

• Proficiency in operationalizing policies into efficient technical and procedural controls.

• Ability to influence cross-functional teams and communicate risk effectively to stakeholders at varying levels.

• Familiarity with enterprise SaaS platforms and cloud security control environments.

• Proven experience in supporting audits, compliance initiatives, and continuous control monitoring.

• Knowledge of identity and access management (IAM), data protection, and SaaS security architectures.

• Experience with metrics-driven security programs, including KPI/KRI development and reporting.

• Capability to work effectively with business partners.

• Strong analytical, organizational, and stakeholder management abilities.

• Minimum of 5 years of experience in information security, cybersecurity governance, risk management, compliance, cloud security, or related fields.

• Bachelor's degree required.

🏝️ Benefits

• Discretionary annual cash bonus or incentive compensation.

• Discretionary equity grants.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• 401k retirement savings plan.

• Flexible paid vacation.