Description

Lead compliance and risk management functions to ensure alignment with industry standards and regulatory requirements.

This role is on-site.

Responsibilities

• Manage technical and non-technical FCC and PCI compliance security controls and oversee remediation of non-conformity findings.
• Audit security controls related to web applications, APIs, IAM, PAM, PII, CPNI, and access management.
• Develop, implement, and drive the execution of cybersecurity risk management frameworks and procedures.
• Perform security and compliance risk assessments to identify and manage cybersecurity risks.
• Partner with cross-functional teams to develop risk response plans, monitor mitigation effectiveness, and track progress.

Required Skills

• 8+ years of experience in GRC functions related to Compliance and Risk Management.
• 5+ years of experience in FCC Compliance, privacy, PII, and PCI.
• Deep knowledge of SOC 2, NIST 800-171, and NIST 800-53 frameworks.
• Experience auditing Web application, API security, IAM, PAM, PII, CPNI, Authentication, Access Control, and MFA.
• Proven ability in record keeping, documentation, and evidence gathering for audit readiness.
• Experience defining risk metrics and thresholds with risk owners.
• Ability to develop System Security Plans and perform Risk Exposure analysis.

Preferred Skills

• Any Graduate degree.

Key Skills

Education

Any Graduate