GRC & Privacy Risk Leader

FloQast; Chicago (IL); Hybrid; USD 115.000 - 155.000; Vollzeit

Benefits dieser Stelle

Medical, Dental, Vision

Unlimited vacation

Employee stock program

Zusammenfassung

FloQast is seeking a Risk & Controls Manager to lead risk and compliance across the organization. You will own privacy, third-party risk, policy management, and an evolving risk program while guiding internal teams on regulatory and contractual requirements.

The role reports to the General Counsel within the InfoSec & Compliance department. Expect hybrid work with in‑office three days per week and opportunities to automate and scale processes using AI.

Qualifikationen

• Proven ability to apply frameworks such as SOC and ISO standards across multiple domains.
• Experience evaluating business initiatives from a risk and controls perspective.
• Knowledge of privacy laws and international privacy standards is preferred.

Aufgaben

• Collaborate and align documentation, policies, and procedures with audit and regulatory expectations.
• Conduct compliance impact assessments covering risk, privacy, and AI considerations.
• Provide strategic, risk-informed guidance in response to inquiries from internal teams.
• Support FloQast's security and compliance programs ensuring adherence to SOC and ISO standards.
• Own privacy program activities including privacy documentation and data subject requests.
• Mange sub-processor program, notification workflows, and vendor inquiries.
• Support privacy-related product and vendor reviews and regulatory readiness.
• Own third‑party risk management processes and associated due diligence.
• Own policy management, including annual reviews and version history.
• Identify improvements, including automation and AI-driven workflows.

Kenntnisse

Compliance experience

Risk management

Information security

Privacy

SaaS industry experience

Communication skills

Ausbildung

Bachelor's degree

Jobbeschreibung

FloQast is seeking a Risk & Controls Manager to lead risk and compliance across the organization. You will own privacy, third-party risk, policy management, and an evolving risk program while guiding internal teams on regulatory and contractual requirements.

The role reports to the General Counsel within the InfoSec & Compliance department. Expect hybrid work with in‑office three days per week and opportunities to automate and scale processes using AI.