Security Risk, Assurance & Trust Leader

ADP, Inc.; Santa Clara (CA); On-site; USD 155,000 - 221,000; Full time

Benefits offered by this job

401k plan

Health and wellness benefits

Equity grants

Job summary

SiTime in Santa Clara, CA, seeks a Sr. Manager, Security Risk, Assurance and Trust to build and lead the enterprise risk, third‑party risk, and governance program. You will set policy, drive certifications, and partner across IT, Legal, Finance, Design, and Engineering to enforce controls.

This role is hands‑on at first, then scales via hires and contractors to deliver audits, certifications, and ongoing risk management across the company.

Qualifications

• 8+ years in information security, risk, or assurance, including 3+ years building or substantially rebuilding a program.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or related technical field — or equivalent practical experience.
• At least one of the following certifications: CISSP, CISA, CRISC, or CCSK.
• People leadership experience.
• Technical fluency across cloud platforms (Azure, AWS), infrastructure security (network, endpoint, IAM), and third‑party risk frameworks.
• Hands‑on experience managing external audits and certifications end to end.
• Experience building and maintaining an enterprise risk register and producing risk reporting for executive and Audit Committee/Board consumption.
• English proficiency is required, including the ability to effectively communicate, collaborate, and perform job responsibilities in a professional business environment.

Responsibilities

• Own customer security assurance end to end, building the reusable trust package and audit library.
• Drive remediation of gaps identified through customer audits with IT and system owners.
• Own ISO 27001 certification end to end including scoping, gap assessment, control implementation, readiness, external audit, and ongoing surveillance.
• Design and operate third‑party and vendor risk management program covering onboarding, risk tiering, and ongoing monitoring.
• Stand up policy framework and enforceable standards with governance, reviews, and expiration tracking.
• Produce recurring risk reporting for the CISO and Audit Committee/Board.
• Partner with Legal and Procurement to embed security requirements into vendor contracts and procurement.

Skills

Executive leadership

Information security

Vendor risk management

NIST CSF

ISO 27001

SOX ITGC

Audits & certifications

Policy & standards

Education

Bachelor’s degree in Computer Science, Information Security, Engineering, or related field

CISSP

CISA

CRISC

CCSK

Tools

Azure

AWS

NIST CSF

Vendor risk software

Job description

SiTime in Santa Clara, CA, seeks a Sr. Manager, Security Risk, Assurance and Trust to build and lead the enterprise risk, third‑party risk, and governance program. You will set policy, drive certifications, and partner across IT, Legal, Finance, Design, and Engineering to enforce controls.

This role is hands‑on at first, then scales via hires and contractors to deliver audits, certifications, and ongoing risk management across the company.