Senior Compliance Program Manager, GRC

Responsibilities

• Plan and manage compliance programs across audit cycles, continuous monitoring, POA&M remediation, policy initiatives and supporting documentation
• Establish program scope, milestones, dependencies, ownership and reporting across Security, Engineering, DevOps, IT and GRC
• Maintain integrated program plans, risks, assumptions, issues and dependencies and escalate blockers with clear recommendations
• Coordinate evidence collection, remediation tracking and control-owner activities for compliance and audit initiatives
• Maintain working knowledge of frameworks including NIST 800-53, FedRAMP High, DoD IL5, SOC 2, ISO 27001 and PCI DSS
• Partner with GRC and ISSO stakeholders on audit readiness, control documentation, remediation and continuous monitoring activities
• Monitor evolving regulatory and security requirements and assess potential business and operational impact
• Support compliance responses for customers, contracts, security reviews and RFPs
• Support and help mature Keeper’s third-party risk management program, including risk-tiered assessments of vendors and business partners
• Review vendor security documentation, attestations and supply chain risk factors and provide risk-based recommendations

Languages