Strategic InfoSec Risk & Compliance Leader

IDEXX; Westbrook (ME); Ibrido; USD 108.000 - 132.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health benefits

Dental benefits

Vision benefits

401k match

Volunteer days

Employee stock program

Foundation donation matching

Pet insurance

Mental health resources

Descrizione del lavoro

IDEXX’s cybersecurity and information security teams are building resilient, security-aware programs to navigate today’s threat landscape. As a Senior InfoSec Risk & Compliance Specialist, you will move the compliance function from retrospective evidence collection to continuous monitoring and a shared foundation of evidence supporting multiple audits.

You will support SOC 2, SOX, and PCI audits, design monitoring that surfaces control failures in real time, and advance modernization through

Competenze

• 5–7+ years in IT Audit, GRC, Controls, Risk Assessment, or Internal Audit.
• At least 1 year of SOC 2 readiness assessments.
• Certification: CISA, CISM, CISSP, CRISC or CRMA, or eligible.
• Knowledge of NIST, COSO, and COBIT frameworks.
• Hands-on use of AI tools for compliance research and automation is a plus.
• Proven track record of identifying issues and delivering tech-based improvements.
• Ability to handle evolving requirements and communicate with stakeholders.

Mansioni

• You will support SOC 2, SOX, and PCI audits with auditors and teams.
• You will design continuous monitoring to surface control failures in real time.
• You will pursue modernization through API integrations, GRC platforms, dashboards, and AI.
• You will connect findings to organizational risk and prioritize remediation.
• You will help create a reusable foundation of controls for multiple obligations.
• You will coach a Grade 600 teammate and grow toward future leadership.
• You will communicate updates to business teams with an autonomous, forward-thinking approach.

Conoscenze

IT Audit

GRC

Risk Assessment

Internal Audit

SOC 2

SOX

PCI

AI in Compliance

Automation

Dashboards

Formazione

CISA

CISM

CISSP

CRISC

CRMA

Strumenti

NIST

COSO

COBIT

Excel

APIs

GRC Platforms

Descrizione del lavoro

IDEXX’s cybersecurity and information security teams are building resilient, security-aware programs to navigate today’s threat landscape. As a Senior InfoSec Risk & Compliance Specialist, you will move the compliance function from retrospective evidence collection to continuous monitoring and a shared foundation of evidence supporting multiple audits.

You will support SOC 2, SOX, and PCI audits, design monitoring that surfaces control failures in real time, and advance modernization through