Governance, Risk & Compliance Manager, Wrapbook

• Bachelor’s degree in a technical field (ex: IT, Engineering, Accounting, Business Admin) or 5+ years of related field expertise
• At least 5 total years of experience working in Security/GRC and are able to demonstrate knowledge of core Security basics
• Working understanding of compliance in cloud-native technology stacks
• Ability to develop security standards and guidelines based on best practices and industry standards

Desirable

• Wrapbook is looking for a Governance Risk and Compliance (GRC) Manager who will play a hands-on role in driving our mission to build an outstanding technology company
• As a member of the growing Security & IT team in the Trust department, there’s a lot of room to make your mark
• In this role you will leverage your leadership and technical expertise to own and execute on a roadmap for Wrapbook Governance, Risk, and Compliance capabilities
• This includes Policy lifecycle, Third Party Risk, Audits, Customer Assurance, Information Security Risk management, and Security Awareness initiatives
• To fulfill your mission, you'll engage in various activities including: developing a vision and strategy for GRC maturity, planning and driving projects across Security, defining and refining processes and policies, and setting an example for security culture within the company
• We're looking for experienced security-oriented compliance professionals who aim to enhance and mature security programs using framework guidance
• In your first year, you will impact our program by:
• Leading the organization-wide information security compliance capability by designing, developing, and implementing programs to ensure IT activities, processes, and procedures align with necessary requirements, policies, and regulations
• Representing Wrapbook in information security matters through clear communication—both verbal and written—with all levels of company staff (IT, engineering, senior leadership, general counsel) and external parties (auditors, customers, technology vendors, and contractors)
• Establishing requirements and policies for our employees to follow. Own Information Security Policy lifecycle, creating and updating our document library and driving employee policy education efforts
• Coordinating risk collection and review activities, resulting in calibrated risks for presentation. Executing operational security risk management activities, including annual security risk assessments. Identifying and implementing risk process automation opportunities
• Enhancing our current approach to assessing and tracking Third Party Risk
• Developing and maintaining customer assurance packages and other self-service security resources. Streamlining the process for customers to obtain security attestations and answers to their questions
• Maintaining and optimizing continuous compliance tools to effectively track security-oriented work
• Spearheading the Security Awareness program, fostering a robust security culture across Wrapbook through training, presentations, and promotion of best practices. Continuously enhancing the program to address evolving needs and raise overall maturity
• Coordinating and tracking security programs and audits, including project scope, decisions, involved parties, timelines, measurements, and success criteria
• Cultivating productive relationships with partners and stakeholders to ensure security programs integrate with and support cross-functional teams