Security GRC Lead - Risk, Compliance & Audit

Decisive Point; Sunnyvale (CA); On-site; USD 160,000 - 190,000; Full time

Benefits offered by this job

Comprehensive health insurance

401k retirement benefits with employer match

Learning and wellness stipends

Job summary

Decisive Point in Sunnyvale, California is seeking a Risk and Compliance Lead to enhance security compliance across the organization. The candidate will oversee security GRC programs, manage compliance efforts, and conduct risk assessments to mitigate risks effectively.

The position requires over six years of experience in security compliance and risk management, strong communication skills, and hands-on experience with tools and audits. Competitive compensation package includes base salary and benefits.

Qualifications

• 6+ years of experience in security GRC, risk management, or compliance program ownership.
• Hands-on experience in running Enterprise Risk Assessments.
• Experience managing SOC 2, ISO 27001, and TISAX audits.

Responsibilities

• Own and mature the security GRC program.
• Conduct enterprise and product-level risk assessments.
• Lead compliance efforts such as SOC2 and ISO audits.

Skills

Security GRC program ownership

Risk management

Compliance program management

Strong communication skills

Third Party Risk Management

Enterprise Risk Assessments

Education

Bachelor's degree in relevant field

Tools

GRC tooling (Vanta, Drata, OneTrust)

Job description

Decisive Point in Sunnyvale, California is seeking a Risk and Compliance Lead to enhance security compliance across the organization. The candidate will oversee security GRC programs, manage compliance efforts, and conduct risk assessments to mitigate risks effectively.

The position requires over six years of experience in security compliance and risk management, strong communication skills, and hands-on experience with tools and audits. Competitive compensation package includes base salary and benefits.