Senior InfoSec GRC & Continuous Controls Lead

IDEXX; Boston (MA); Hybrid; USD 108,000 - 132,000; Full time

Benefits offered by this job

Health, dental, vision

401k with 5% match

Employee stock program

Volunteer paid days off

Foundation donation matching

Pet insurance

Hybrid work option

Job summary

IDEXX is seeking a Senior InfoSec Risk & Compliance Specialist in the New England area to elevate the compliance function from retrospective evidence collection to continuous monitoring across SOC 2, SOX, PCI, and evolving EU/state requirements.

You will automate and modernize controls with APIs, GRC platforms, dashboards, AI, and Excel solutions, coaching teammates, and collaborating with auditors and business teams.

Qualifications

• Experience with SOC 2, SOX, and PCI is preferred; core audit skills are transferable.
• Ready for SOC 2 readiness assessments and continuous monitoring work.
• Proven track record of proposing tech-based improvements and ownership through implementation.
• Familiarity with AI tools and automation in compliance workflows.
• Ability to explain complex regulations clearly and coach others.

Responsibilities

• Support SOC 2, SOX, and PCI audits, coordinating with external auditors and internal teams.
• Move the team toward continuous monitoring and real-time control failure detection.
• Identify opportunities to modernize compliance through API integrations, AI, and dashboards.
• Link findings to organizational risk and drive prioritized remediation.
• Build a common foundation of controls and evidence for multiple obligations.
• Provide coaching to a Grade 600 teammate overseeing SOC 2 program.
• Communicate tactical and strategic updates to business teams and leaders.

Skills

SOC 2/SOX/PCI

Certifications (CISA/CISM/CISSP/CRISC/

GRC frameworks

NIST COSO COBIT

AI in compliance

Automation & dashboards

Communication

EU AI Act readiness

Tools

Excel

GRC platforms

Dashboards

Job description

IDEXX is seeking a Senior InfoSec Risk & Compliance Specialist in the New England area to elevate the compliance function from retrospective evidence collection to continuous monitoring across SOC 2, SOX, PCI, and evolving EU/state requirements.

You will automate and modernize controls with APIs, GRC platforms, dashboards, AI, and Excel solutions, coaching teammates, and collaborating with auditors and business teams.