Loading...
SeniorFull-timeRustCI/CDAI
Salary Range
$26,520 - $35,880 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
Own and mature OpenGov’s core GRC programs across audit/compliance, risk, vendor security, and security awareness. Lead end-to-end SOC 2 audit cycles and drive multi-framework control mapping to reduce risk and maintain certifications.
Key Responsibilities
- →Lead planning, scoping, walkthroughs, sampling, and issue closure for SOC 2
- →Design/upgrade controls for SaaS/cloud environments and implement continuous control monitoring
- →Maintain crosswalks between SOC 2, NIST 800-53/CSF, and ISO 27001
- →Run risk assessments and drive mitigation plans with measurable impact
- →Own third-party risk including vendor tiering, questionnaires, and contractual security addenda
- →Author security responses and support customer calls and security reviews
- →Shape security awareness plans and measure behavior change
- →Own GRC platform tooling and evidence workflows
- →Ensure incidents translate into tracked corrective actions
- →Publish clear metrics and reporting for leadership
- →Coach junior analysts and improve program documentation
Requirements
- ✓5–8+ years in GRC, IT audit, or security compliance with hands-on SOC 2 Type II ownership
- ✓Strong grasp of identity/SSO/MFA, endpoint/EDR, logging/SIEM, vulnerability mgmt, CI/CD & SDLC controls
- ✓Proven ability to run multi-team programs to deadlines
- ✓Demonstrated ownership of end-to-end third-party risk workflows
- ✓Comfortable representing Security with customers and auditors
- ✓Proficiency with GRC/evidence platforms and ticketing/documentation systems
- ✓Bachelor’s in Information Systems, Information Security, IT, CS, or related
- ✓Able to collaborate across time zones
Benefits
- ★Mission-driven work in public sector technology
- ★Opportunity to innovate with AI solutions
- ★Fast-paced, results-driven environment
- ★Performance-based culture with recognition and rewards
- ★Global team with offices across multiple cities
