Senior InfoSec Risk & Compliance Strategist

IDEXX; Concord (NH); Hybride; USD 108 000 - 132 000; Plein temps

Avantages offerts par ce poste

Health / Dental / Vision Benefits Day‑

5% matching 401k

Annual cash bonus

Volunteer paid days off

Employee stock program

Résumé du poste

IDEXX seeks a Senior InfoSec Risk & Compliance Specialist to modernize the compliance function, shifting from retrospective evidence collection to continuous control monitoring. You will own audit readiness, automation, and cross-team collaboration to support SOC 2, SOX, PCI, and evolving EU/state requirements.

The role emphasizes autonomy, accountability, and strategic communication with leaders, blending hands-on technical work with advisory responsibilities.

Qualifications

• 5 to 7+ years of experience within IT Audit, GRC, Controls, Risk Assessment, or Internal Audit.
• Experience with SOC 2, SOX, and PCI readiness assessments is common but not required for all.
• Strong communication and ability to coach teammates.

Responsabilités

• Support SOC 2, SOX, and PCI audits coordinating with external auditors and internal teams.
• Design continuous monitoring to surface control failures as they happen.
• Identify opportunities to modernize compliance work through automation, dashboards, or AI.
• Connect findings to organizational risk and drive remediation priorities.
• Help build a scalable foundation of controls and evidence for multiple regulatory obligations.
• Provide coaching to teammates and communicate updates to business leaders.

Connaissances

SOC 2

SOX

PCI

Auditing

GRC

Risk assessment

AI in compliance

Automation

Formation

CISA

CISM

CISSP

CRISC

CRMA

Outils

COSO

NIST

COBIT

Description du poste

IDEXX seeks a Senior InfoSec Risk & Compliance Specialist to modernize the compliance function, shifting from retrospective evidence collection to continuous control monitoring. You will own audit readiness, automation, and cross-team collaboration to support SOC 2, SOX, PCI, and evolving EU/state requirements.

The role emphasizes autonomy, accountability, and strategic communication with leaders, blending hands-on technical work with advisory responsibilities.