Lead Governance, Risk, & Compliance Analyst, Arctic Wolf

• Strong project management skills to ensure accountability and results
• Ability to put into practice security & privacy frameworks & standards such as ISO 27001, SOC2, GDPR, IRAP, FedRAMP, StateRAMP, CMMC, PCI DSS and HIPAA
• Excellent written and verbal communication skills, especially translating between business and GRC/technical terminology
• Ability to work under pressure with multiple stakeholders
• 5+ years of experience in a GRC lead/program management capacity within a technology/SaaS company
• Please note that, if applicable, an offer for employment will be conditioned on authorization to receive software or technology controlled under these U.S. export control laws and regulations

Desirable

• The Lead Governance, Risk, & Compliance Analyst works with cross-functional stakeholders to understand the business and the risks and compliance needs of the organization to establish and maintain governance, risk and compliance processes
• This role excels in organizing, planning and delivering results and relishes working with others to achieve critical security outcomes
• This role champions the customer’s right to privacy and security and build in those requirements into product offerings & services as well as day-to-day business processes
• Collaborate with multiple organizational stakeholders to drive development, maintenance and implementation of internal security & privacy policies, standards, procedures/guidance and governance program documents that allow Arctic Wolf to comply with several security/privacy frameworks, contractual obligations and regulatory requirements
• Facilitate security and privacy policy & standards lifecycle management
• Ensure approved security & privacy policies and standards are communicated to appropriate audiences and accounted for in various Standard Operating Procedures
• Lead and support Arctic Wolf’s internal and external audit/assessment activities
• Lead and support Arctic Wolf’s internal Risk and Compliance program execution
• Mature and support Arctic Wolf’s Vendor Due Diligence Program execution
• Mature and support Arctic Wolf’s Customer Due Diligence Program execution
• On an as-needed basis, provide advisory services to other teams on applicability and implementing/maintaining compliance with the Privacy and Security policies and standards through the course of their business operations
• Administer and operate GRC toolset to automate processes and programs to gain efficiencies
• Provide Program level metrics & reporting for consumption by Senior & Executive management
• Conducts duties and responsibilities in accordance with AWN’s Information Security policies, standards, processes and controls to protect the confidentiality, integrity and availability of AWN business information (in accordance with our employee handbook and corporate policies)
• This position may require access to information protected under U.S. export control laws and regulations, including the Export Administration Regulations (“EAR”).