Senior InfoSec Risk & Compliance Lead (Hybrid – NE)

IDEXX Laboratories, Inc; Westbrook (ME); Hybride; USD 108 000 - 132 000; Plein temps

Avantages offerts par ce poste

Health/Dental/Vision Day-One

5% matching 401k

Employee stock program

Volunteer days

Résumé du poste

IDEXX Laboratories, Inc. is seeking an experienced IT Audit/GRC professional to advance our SOC 2, SOX, and PCI audit program within the InfoSec Compliance team.

This role emphasizes continuous monitoring, automation, and risk-based remediation across evolving regulatory scopes in the New England region. You will collaborate with external auditors and internal teams, build AI-enabled compliance workflows, and mentor junior staff while advancing the company’s security posture and regulatory

Qualifications

• 5 to 7+ years of experience within IT Audit, GRC, Controls, Risk Assessment, or Internal Audit.
• Experience across SOC 2, SOX, and PCI is helpful but not required.
• One of these certifications: CISA, CISM, CISSP, CRISC, CRMA, or certification-eligible.
• Familiarity with NIST, COSO, and COBIT, and implementing controls through them.
• Hands-on use of AI tools in daily work and automation for compliance workflows.

Responsabilités

• Support SOC 2, SOX, and PCI audits, coordinating with auditors and internal teams as first line of defense.
• Design continuous monitoring to surface control failures in real time, beyond backward-looking reviews.
• Identify opportunities to modernize compliance work via API integrations, dashboards, and AI use.
• Connect findings to organizational risk, prioritizing remediation for significant control gaps.
• Help build a common foundation of controls and evidence across multiple obligations without proportional headcount growth.
• Provide coaching to a Grade 600 teammate and potential pathway to future leadership.
• Communicate updates to business teams and leaders with autonomous, forward-thinking approaches.

Connaissances

IT Audit

GRC

Controls

Risk assessment

Internal Audit

AI tools usage

Certification: CISA/CISM/CISSP/CRISC/-

Communication

Mentoring

Description du poste

IDEXX Laboratories, Inc. is seeking an experienced IT Audit/GRC professional to advance our SOC 2, SOX, and PCI audit program within the InfoSec Compliance team.

This role emphasizes continuous monitoring, automation, and risk-based remediation across evolving regulatory scopes in the New England region. You will collaborate with external auditors and internal teams, build AI-enabled compliance workflows, and mentor junior staff while advancing the company’s security posture and regulatory