Staff Security Program Manager (GRC)

Lensa; Salt Lake City (UT); Remote; USD 100,000 - 150,000; Full time

Job summary

A leading technology company is seeking a Staff Security Program Manager to transform its security program and drive compliance initiatives. The role involves collaborating with various teams to enhance security posture, manage audits, and maintain industry standards. Candidates should have a strong background in information security and project management, with excellent communication skills and a proactive approach to problem-solving.

Benefits

Health and wellness resources

Wellness Fridays

Qualifications

• Proven experience in information security and compliance, including project management.
• Strong understanding of cybersecurity principles, frameworks, and best practices.
• Excellent communication skills to keep internal and external stakeholders aligned.

Responsibilities

• Oversee and drive security and compliance initiatives, including maintaining industry-standard accreditations.
• Lead the transformation of EDB's common controls framework and associated policies.
• Manage audits and work with internal teams and third-party auditors.

Skills

Project Management

Information Security

Compliance

Cybersecurity Principles

Audit Methodology

Education

Bachelor's Degree in Information Technology or related field

Tools

Hyperproof GRC Platform

Jira

Job description

1 day ago Be among the first 25 applicants

Lensa is the leading career site for job seekers at every stage of their career. Our client, EDB, is seeking professionals in Salt Lake City, UT. Apply via Lensa today!

A Little About Us

EDB provides a data and AI platform that enables organizations to harness the full power of Postgres for transactional, analytical, and AI workloads across any cloud, anywhere. EDB empowers enterprises to control risk, manage costs and scale efficiently for a data and AI led world. Serving more than 1,500 customers globally and as the leading contributor to the vibrant and fast-growing PostgreSQL community, EDB supports major government organizations, financial services, media and information technology companies. EDB’s data-driven solutions enable customers to modernize legacy systems and break data silos while leveraging enterprise-grade open source technologies. EDB delivers the confidence of up to 99.999% high availability with mission critical capabilities built in such as security, compliance controls, and observability. For more information, visit www.enterprisedb.com

• Candidates note: This is 100% remote position for candidates based in the US (EST/CST time zones preferred).
  
  

As a Staff Security Program Manager on the Information Security team, you will play a pivotal role in leading the transformation of our security program to drive business growth and mitigate information risks. You will collaborate with multiple teams, acting as a key driver for our security and compliance initiatives, both internally for software development and delivery, and externally as we pursue industry-standard compliance accreditations. This role is responsible for understanding and translating security frameworks, partnering with stakeholders on control design, supporting implementation, and establishing automated auditing. You will be a vital participant in customer diligence activities, reinforcing EDB’s security and compliance posture.

EDB is undergoing a significant security program transformation, and you will be a leading voice of change. This role requires a blend of strategic planning, project management, and security expertise. You will be responsible for developing and maintaining controls, policies, and procedures, while also driving the execution of projects to enhance our security posture.

We are looking for individuals who thrive in a global, distributed environment with flexible work schedules.

What Your Impact Will Be

• Oversee and drive security and compliance initiatives, including maintaining industry-standard accreditations.
• Forge essential working relationships with engineering leadership, product management, and executive management.
• Lead the transformation of EDBs common controls framework and associated policies and procedures to support business growth and reduce information risks.
• Contribute to the annual planning process for Information Security initiatives, ensuring alignment with business objectives.
• Lead, coordinate, and manage audits, working with internal teams and third-party auditors.
• Educate and consult with control owners on effective control environments and audit evidence.
• Manage the Plan of Action and Milestones (POAM) related to security exceptions, ensuring timely completion.
• Participate in customer security diligence efforts, managing questionnaires and requests while continuously improving the efficiency and effectiveness of the response process.
• Identify, develop, and implement metrics that effectively measure the performance and effectiveness of our information security initiatives.
  
  

What You Will Bring

• Technical aptitude to navigate compliance controls and cloud security best practices.
• Drive, a proactive attitude, and thorough attention to detail.
• Ability to contribute to and enhance the team by bringing a strong aptitude for dissecting technical controls and control procedures, demonstrating a detail-oriented approach and a proactive, investigative mindset.
• Proven experience in information security and compliance, including project management.
• Strong understanding of cybersecurity principles, frameworks, and best practices.
• Experience working with external auditors and a strong understanding of audit methodology.
• Strong experience with auditing security objectives of SOC2, PCI, HIPAA, FedRAMP (800-53), ISO 27001.
• Proven project management skills, with the ability to manage multiple projects simultaneously.
• Excellent organizational and time management skills, with the ability to prioritize and multitask.
• Excellent communication skills to keep internal and external stakeholders aligned.
  
  

What Will Give You An Edge

• Certified Information Security Auditor (CISA) or Certified Information Systems Security Professional (CISSP) certifications
• Experience with Hyperproof GRC Platform and Jira
• Project Management certification
  
  

EDB is committed to supporting our employees' overall well being by offering a range of benefits and resources to promote a healthy work-life balance and wellness. We provide access to CuraLinc to aid employees in health and wellness tips and practices, as well as Wellness Fridays extending to December 2025! Check out our career site for more information on perks and benefits and reach out to our Talent Acquisition team for region specific benefits.

We know it takes a unique mix of people and skills to help us in our mission to supercharge Postgres, and we understand that not everyone will check every box. We’d love to hear from you and we want you to apply!

EDB is proud to be an equal opportunity workplace. We celebrate diversity and are committed to creating an inclusive environment for all employees. EDB was built on a commitment to trust and respect each other and to embrace an array of people and ideas. These values remain at the center of our culture and are key to our company’s integrity.

EDB does not seek or accept unsolicited resumes or CVs from recruitment agencies. EDB and its affiliates are not responsible for, and will not pay, any fees, commissions, or any other similar payment related to unsolicited resumes or CVs except as required in a written signed agreement between EDB and the recruitment agency or party requesting payment of a fee.

#BI-Remote

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Project Management and Information Technology

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at Lensa by 2x

Sign in to set job alerts for “Security Program Manager” roles.

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.