Security GRC Leader for Compliance & AI Governance

Frontline Education; USA; Hybrid; USD 150.000 - 170.000; Vollzeit

Benefits dieser Stelle

Bonus opportunities

401(k) with company match

ESPP

Comprehensive health and wellness

Zusammenfassung

Frontline Education is seeking a Security GRC Manager to join our Information Security team in the United States. This role partners with the Director of Information Security Compliance to drive governance, risk, and compliance operations, support audit readiness, and ensure regulatory and customer expectations are met.

You will execute compliance programs, manage SOC 2 activities, oversee data retention, privacy, and security controls, coordinate with cross-functional teams, mentor staff, and

Qualifikationen

• 7 to 10 years of experience in compliance and risk management, preferably in information security.
• Hands-on experience executing SOC 2 (re)certification processes required.
• Strong understanding of information security regulations and standards: GDPR, CCPA, HIPAA, NIST CSF, FERPA.
• Experience conducting risk assessments and implementing controls.
• Proven ability to manage compliance audits and coordinate with external auditors.
• Strong communication and interpersonal skills; able to work effectively across teams.

Aufgaben

• Support and execute a comprehensive information security compliance program aligned with relevant regulations, industry standards, and best practices.
• Support the Director in managing key compliance certifications and audits, including SOC 2 (re)certification, coordinating with internal teams and external auditors.
• Support the development, implementation, and maintenance of data retention, mapping, privacy, and security plans.
• Monitor and maintain compliance with applicable laws, regulations, standards, and certifications such as SOC 2, CCPA, NIST CSF, FERPA, HIPAA and TX RAMP.
• Help develop, monitor, measure, and report on compliance metrics covering security/privacy policies, incidents, privacy violations, and training completion.
• Conduct regular risk assessments to identify potential vulnerabilities and gaps in information security controls.
• Maintain and regularly update the Cyber Risk Register, tracking identified risks, likelihood and impact ratings, mitigation status, and remediation owners, and escalating high-priority items to the Director.
• Help design and implement controls and processes to mitigate risks identified by the Director.
• Execute and continuously improve the third-party risk management program, including vendor security and compliance questionnaires.
• Respond to RFP requests and client audit requests, data processing agreements (DPAs), and other external compliance inquiries.
• Support the Director in partnering with Technology, Legal, HR, and Operations teams to integrate compliance requirements into business processes.
• Support the Director in building and maintaining relationships with internal stakeholders to promote adoption of administrative/technical security controls and standards.
• Assist in managing Roper's Annual Cybersecurity Assessments and support remediation plans in collaboration with other departments.
• Support the development and delivery of security awareness and training programs to educate employees on policies, procedures, and best practices.
• Help foster a culture of information security awareness and accountability throughout the organization.
• Serve as a member of the Security Incident Response Team (SIRT) to respond to and help contain, mitigate, and remediate security and privacy incidents.
• Assist the Director and CISO in executing information security strategy, roadmaps, programs, and plans.
• Support the Director in creating and maintaining policies, procedures, and relevant programs; stay current with security trends, threats, and regulations.
• Mentor junior personnel as needed.
• Support the development and execution of Frontline’s AI security and governance framework, ensuring AI systems and tools are securely configured, assessed, documented, and managed in alignment with security and compliance requirements.
• Conduct AI security risk assessments for internal and vendor-supplied AI tools, evaluating threats such as prompt injection, data poisoning, model extraction, and sensitive-data leakage, alongside training data practices and potential for regulatory non-compliance (FERPA, HIPAA, CCPA).
• Review and assess vendor AI terms, data processing agreements, and acceptable use policies, with focus on model security, data handling, and access controls.
• Monitor the evolving AI threat and regulatory landscape and assess impact on Frontline’s security and compliance posture, escalating material gaps to the Director.
• Support the development of internal AI use policies and employee guidance, defining guardrails for secure use of generative AI and other AI-powered tools.

Kenntnisse

GRC program

SOC 2 audits

Regulatory compliance

Risk assessment

CISA

CISSP

AI governance

Ausbildung

Bachelor's degree in Information Security or CS

Jobbeschreibung

Frontline Education is seeking a Security GRC Manager to join our Information Security team in the United States. This role partners with the Director of Information Security Compliance to drive governance, risk, and compliance operations, support audit readiness, and ensure regulatory and customer expectations are met.

You will execute compliance programs, manage SOC 2 activities, oversee data retention, privacy, and security controls, coordinate with cross-functional teams, mentor staff, and