Match score not available

Cyber Compliance Director

Remote:

Full Remote

Contract:

Full time

Experience:

Senior (5-10 years)

Work from:

United States

Offer summary

Qualifications:

Bachelor's degree in a related field, Accredited compliance management certification, 8+ years compliance experience in technology, Expertise in SOC2, NIST, ITAR standards, Knowledge of global data security regulations.

Key responsabilities:

Manage compliance frameworks like NIST and SOC2
Create and implement security policies and controls
Collaborate with stakeholders for compliance reviews
Oversee vendor risk assessments and audits
Handle vendor onboarding and client inquiries

Conversant Group SME https://www.conversantgroup.com/

51 - 200 Employees

See more Conversant Group offers

Job description

Conversant Group is an amazing, growing IT infrastructure and security consulting company based in Chattanooga, TN – with employees in most states in the U.S. Conversant Group has provided technical, organizational, procedural, and process consulting internationally, based on our insights from fighting threat actors and their damage, since the company was formed in 2009.

Unlike many in IT, Conversant Group has a unique perspective: breach context should inform all defensive strategies and tactics.

About this Position:

We are looking for an experienced leader who has extensive knowledge of security frameworks, controls and audit techniques who can mature and maintain our compliance program. As a Compliance Director, your duties will include working with external consultants and internal stakeholders to advance compliance priorities, write/edit policies, and socialize necessary compliance procedures and policies, and work with internal teams for vendor onboarding. This will be a new role for the company – so tight collaboration with others and driving progress towards compliance goals will get positive attention. This role reports to the Chief Operating Officer.

Key Responsibilities

Proactively manage and maintain critical compliance frameworks including NIST, ITAR and SOC2 Type2

Create, enhance and operationalize enterprise-level security, risk and privacy policies, processes, and controls across the organization to mitigate risk and comply with applicable regulations

Collaborate with key stakeholders and executives to review projects, assess business critical systems and ensure compliance with compliance frameworks and privacy laws

Oversee and work closely with third party technical risk assessments and related audit activity

Manage and improve process to respond to vendor onboarding and client inquiries

Additional responsibilities as assigned

Qualifications, Requirements & Preferred Skills

Industry-related Bachelor's degree and accredited compliance management certification

8+ years previous experience as a compliance analyst in the technology industry

Deep expertise in compliance standards such as SOC2, NIST, ITAR etc

In-depth knowledge of global data security regulatory environment

Exceptional ability to formulate compliance policies, procedures, and related documentation

Ability to accurately complete applications for compliance certification

Ability to convey complex information in a clear, concise manner both verbally and in written form

Demonstrated track record of developing compliance programs