Senior InfoSec Risk & Compliance Specialist

IDEXX Laboratories, Inc; Westbrook (ME); Ibrido; USD 108.000 - 132.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health/Dental/Vision Day-One

5% matching 401k

Employee stock program

Volunteer days

Descrizione del lavoro

IDEXX Laboratories, Inc. is seeking an experienced IT Audit/GRC professional to advance our SOC 2, SOX, and PCI audit program within the InfoSec Compliance team.

This role emphasizes continuous monitoring, automation, and risk-based remediation across evolving regulatory scopes in the New England region. You will collaborate with external auditors and internal teams, build AI-enabled compliance workflows, and mentor junior staff while advancing the company’s security posture and regulatory

Competenze

• 5 to 7+ years of experience within IT Audit, GRC, Controls, Risk Assessment, or Internal Audit.
• Experience across SOC 2, SOX, and PCI is helpful but not required.
• One of these certifications: CISA, CISM, CISSP, CRISC, CRMA, or certification-eligible.
• Familiarity with NIST, COSO, and COBIT, and implementing controls through them.
• Hands-on use of AI tools in daily work and automation for compliance workflows.

Mansioni

• Support SOC 2, SOX, and PCI audits, coordinating with auditors and internal teams as first line of defense.
• Design continuous monitoring to surface control failures in real time, beyond backward-looking reviews.
• Identify opportunities to modernize compliance work via API integrations, dashboards, and AI use.
• Connect findings to organizational risk, prioritizing remediation for significant control gaps.
• Help build a common foundation of controls and evidence across multiple obligations without proportional headcount growth.
• Provide coaching to a Grade 600 teammate and potential pathway to future leadership.
• Communicate updates to business teams and leaders with autonomous, forward-thinking approaches.

Conoscenze

IT Audit

GRC

Controls

Risk assessment

Internal Audit

AI tools usage

Certification: CISA/CISM/CISSP/CRISC/-

Communication

Mentoring

Descrizione del lavoro

Our cybersecurity and information security teams at IDEXX contribute to a more resilient, adaptable, and security-aware enterprise prepared to navigate today's evolving threat landscape. We have complex, multi-dimensional programs across the organization that support all the technology needed to deliver products and solutions to customers - enabling them to focus on delivering high quality patient care.

IDEXX's Information Security team safeguards the organization against cyber risk and ensures compliance with industry standards and regulations. The Governance, Risk & Compliance (GRC) group leads governance policy, cyber risk management, third-party risk, SOX compliance, SOC 2 compliance, global privacy compliance, and cyber risk training and assessments.

The InfoSec Compliance team supports SOC 2, SOX, and PCI audits, and its coverage is expanding quickly: new European requirements could bring approximately 33 additional products into scope, including products without existing SOC 2 reports, and emerging state-level cybersecurity requirements (including Colorado and California) are adding further obligations. Because headcount will not scale at the same pace as this expanding scope, technology and automation are central to how the team succeeds.

In This Role...

• You will support SOC 2, SOX, and PCI audits, coordinating with external auditors and internal teams, and act as the first line of defense before internal or external review.
• You will move the team beyond screenshot collection and backward-looking reviews of whether a control operated over the prior period, designing continuous monitoring that surfaces control failures as they happen.
• You will identify opportunities to modernize compliance work - through API integrations, configurable GRC/compliance platforms, dashboards and visualizations, practical AI use, or well-built Excel solutions - and take ownership of implementing them.
• You will connect compliance findings to organizational risk, distinguishing significant control failures (for example, missing encryption) from lower-risk documentation gaps, and drive appropriately prioritized remediation.
• You will help build a common foundation of controls and evidence that can flex to support multiple regulatory obligations - SOC 2, SOX, PCI, and emerging EU and state requirements - without a one-to-one increase in headcount.
• You will support and provide some coaching and feedback to a Grade 600 teammate who owns aspects of the SOC 2 program; this role can appeal to someone building toward future people leadership, though no management progression is guaranteed.
• You will communicate tactical and strategic updates to business teams and leaders, and bring an autonomous, curious, and forward-thinking approach rather than repeating the same audit the same way each year.

What You Will Need to Succeed...

• 5 to 7+ years of experience within IT Audit, GRC, Controls, Risk Assessment, or Internal Audit. Experience across all of SOC 2, SOX, and PCI is not required - core audit skills transfer well.
• At least one year of experience performing readiness assessments for SOC 2 (or comparable) compliance.
• One of these certifications: CISA, CISM, CISSP, CRISC, CRMA, or certification-eligible.
• Working knowledge of control and risk frameworks such as NIST, COSO, and COBIT, and how to develop and implement controls through them.
• Practical, hands-on use of AI tools in your day-to-day work - for example, using AI to digest and research complex or unfamiliar regulations. Experience building AI agents or automated compliance workflows is a strong plus, not a requirement.
• A track record of proactively identifying problems, proposing technology-based improvements (automation, integrations, dashboards, or similar), and owning them through implementation - autonomy, accountability, curiosity, and adaptability are central to this role.
• Comfort approaching unfamiliar or emerging requirements (for example, the EU AI Act or the NIST AI Risk Management Framework) by structuring the work yourself - scoping what exists, identifying gaps, and building a plan - rather than following an established playbook.
• Strong written and verbal communication, with the ability to build relationships at all levels of the organization and to coach or mentor less experienced teammates.
• The ability to handle difficult issues in a professional, assertive, and proactive manner.
• Location: We are only considering those within the New England area of Maine, New Hampshire or Massachusetts. If local, we offer a flexible, hybrid of 8 days per month on site and we will consider less if you are further away.

What You Can Expect From Us:

• Base annual salary starting at $120,000, with flexibility based on experience
• Opportunity for annual cash bonus
• Health / Dental / Vision Benefits Day-One
• 5% matching 401k
• Additional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching, and much more!

Why IDEXX?

We're proud of the work we do, because our work matters. An innovation leader in every industry we serve, we follow our Purpose and Guiding Principles to help pet owners worldwide keep their companion animals healthy and happy, to ensure safe drinking water for billions, and to help farmers protect livestock and poultry from diseases. We have customers in over 175 countries and a global workforce of over 10,000 talented people.
So, what does that mean for you? We enrich the livelihoods of our employees with a positive and respectful work culture that embraces challenges and encourages learning and discovery. At IDEXX, you will be supported by competitive compensation, incentives, and benefits while enjoying purposeful work that drives improvement.
Let's pursue what matters together.

IDEXX values a diverse workforce and workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply.
IDEXX is an equal opportunity employer. Applicants will not be discriminated against because of race, color, creed, sex, sexual orientation, gender identity or expression, age, religion, national origin, citizenship status, disability, ancestry, marital status, veteran status, medical condition, or any protected category prohibited by local, state, or federal laws.