Security & Compliance Governance Lead

NextGenEnergyJobs; Overland Park (KS); On-site; USD 90,000 - 130,000; Full time

Job summary

NextGenEnergyJobs is seeking a governance, risk and compliance professional to drive alignment of regulatory requirements, risks and controls within our GRC platform. You will produce clear dashboards and reports that reveal program maturity and risk posture to senior stakeholders across the organization.

Responsibilities include helping with internal audits and coordinating external audits (SOC 1/2, ISO 27001, PCI DSS, FISMA/NIST, CMMC). Certifications such as CISSP or GSEC are highly valued.

Qualifications

• Experience with multiple security frameworks; ability to map controls to regulatory requirements.
• CISSP/GSEC or equivalent certifications preferred.
• Experience with SOC1/SOC2, ISO 27001, PCI DSS, NIST 800-53 and related standards is beneficial.
• Ability to coordinate audits and evidence collection and remediation.

Responsibilities

• Leverage the GRC platform to align frameworks, regulatory requirements, risks, controls and documentation into a cohesive governance structure that supports operational execution, continuous monitoring, and data driven reporting on the effectiveness of QTS security and compliance programs.
• Provide visibility into the program maturity, risk posture, and control effectiveness through reporting and dashboards.
• Provide internal support for internal audits of the program as well as the external audits of the SOC1 & SOC2, ISO 27001 & ISO 22301, PCI DSS, FISMA / NIST 800-53, DOD CMMC, and HITRUST audit cycles, by facilitating evidence collection, stakeholder engagement, and issue remediation

Skills

GRC frameworks

Regulatory compliance

Risk & controls

Reporting dashboards

Education

CISSP

GSEC

CISA

CRISC

GCCC

Job description

NextGenEnergyJobs is seeking a governance, risk and compliance professional to drive alignment of regulatory requirements, risks and controls within our GRC platform. You will produce clear dashboards and reports that reveal program maturity and risk posture to senior stakeholders across the organization.

Responsibilities include helping with internal audits and coordinating external audits (SOC 1/2, ISO 27001, PCI DSS, FISMA/NIST, CMMC). Certifications such as CISSP or GSEC are highly valued.