InfoSec Risk & Governance Strategist

Stellarus; California; On-site; USD 123,000 - 185,000; Full time

Job summary

Stellarus is seeking an Information Security Risk and Governance Specialist to translate regulatory and policy requirements into sustainable governance and control practices. The role supports IT risk identification, measurement, and remediation within the Compliance organization.

You will collaborate with technology teams, maintain evidence repositories for audits, and help mature the governance program to ensure audit readiness across SOC 2, HIPAA, and related frameworks.

Qualifications

• Requires a bachelor's degree or equivalent experience.
• Contains at least 7 years of relevant experience.
• Understanding of security assurance and trust frameworks (NIST, HIPAA, SOC 2).
• Experience interacting with auditors and explaining technical concepts.
• Ability to communicate effectively with customers and internal teams.
• Strong organizational skills and detail orientation; agile mindset.

Responsibilities

• GRC Program Operations & Reporting: maintain GRC data, dashboards, and assurance trackers.
• Application & Technology Governance: align security governance in technology lifecycle and asset mappings.
• Audit & Assessment Support: coordinate evidence for audits, regulatory reviews, and cert activities.
• Information Security Risk Management: identify, assess, document, monitor and report risks.
• Control Assurance & Monitoring: perform control self-assessments and track remediation.

Skills

GRC knowledge

Risk management

Audit liaison

Communication

Project management

Education

Bachelor's degree or higher

Tools

GRC tools

Job description

Stellarus is seeking an Information Security Risk and Governance Specialist to translate regulatory and policy requirements into sustainable governance and control practices. The role supports IT risk identification, measurement, and remediation within the Compliance organization.

You will collaborate with technology teams, maintain evidence repositories for audits, and help mature the governance program to ensure audit readiness across SOC 2, HIPAA, and related frameworks.