Risk & Controls Manager — Privacy, AI & Vendor Risk

FloQast; Austin (TX); Hybrid; USD 115,000 - 155,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life & Disability Insurance

Unlimited Vacation

Employee Stock Program

Job summary

FloQast is seeking a Risk & Controls Manager to guide risk assessment, privacy programs, and policy governance within our InfoSec & Compliance team. You will drive cross-functional collaboration, ensure regulatory alignment, and support AI-enabled risk workflows in a fast-growing SaaS environment.

You will own third-party risk, privacy program execution, and vendor reviews while coordinating with internal stakeholders to manage issues and drive process improvements.

Qualifications

• 6+ years of experience in compliance, risk management, information security, privacy, or related field.
• Experience with privacy, security, and IT general controls.
• Familiarity with SOC and ISO standards.

Responsibilities

• Collaborate and drive cross-functional alignment with internal stakeholders to review, maintain, and align documentation, policies, and procedures with audit and regulatory expectations.
• Conduct and document compliance impact assessments covering risk, privacy, and AI considerations to support organizational decision-making.
• Provide strategic, risk-informed guidance in response to compliance-related inquiries from internal teams.
• Support FloQast's security and compliance programs by ensuring adherence to applicable SOC and ISO standards.
• Own execution of FloQast's established privacy program, including maintaining privacy documentation, supporting data subject requests, and ensuring ongoing compliance with applicable privacy laws.
• Manage FloQast's sub-processor program, including maintaining notification workflows, coordinating updates to the sub-processor list, and responding to client inquiries related to sub-processor changes.
• Support privacy-related product and vendor reviews, escalating regulatory considerations as needed.
• Own third-party risk management processes and associated due diligence activities, including coordinating vendor reviews and supporting procurement needs.
• Own policy management processes across the organization, including facilitating annual reviews, coordinating updates with policy owners, maintaining version history, and routing finalized policies for approval.
• Support the identification, tracking, and remediation of compliance and policy-related issues, partnering with relevant stakeholders to drive resolution.
• Identify opportunities for process improvement, including automation and AI, within the risk management and compliance function, and actively develop and implement AI-driven workflows to enhance program efficiency and scalability.
• Any other tasks that may be assigned to help the company meet its goals.

Skills

Compliance

Risk management

Information security

Privacy

SaaS experience

Communication

Autonomous

Education

Bachelor's degree

Job description

FloQast is seeking a Risk & Controls Manager to guide risk assessment, privacy programs, and policy governance within our InfoSec & Compliance team. You will drive cross-functional collaboration, ensure regulatory alignment, and support AI-enabled risk workflows in a fast-growing SaaS environment.

You will own third-party risk, privacy program execution, and vendor reviews while coordinating with internal stakeholders to manage issues and drive process improvements.