Job Information
Ushur, Inc. GRC Director in Santa Clara, California
- Establish best in class processes, operations, engineering and automation for managing and monitoring compliance at the cloud Application, Platform, and Infrastructure levels.
- Lead strategy and execution of the cloud Common Control Framework (CCF) and Continuous Control Monitoring (CCM) programs to address current domains (i.e. Security, Privacy, Quality, Sustainability and Accessibility) and third party attestations/certification (i.e. ISO 27001, ISO 27017, ISO 27018, ISO 27701, SOC 1, SOC 2, NIST 800-53, MTCS, IRAP, German C5 and more).
- Develop and maintain policy and procedures that drives key activities.
- Drive compliance onboarding and significant change request process along with cloud risk management teams to identify new product applications, features, deployments, and functionality to ensure timely inclusion in compliance programs and certifications.
- Evangelize CCF to drive control owner awareness and education to ensure controls are implemented, maintained and compliant.
- Develop and lead new domain/certification ingestion process for new standards, regulations and/or other requirement sets presented to address regulated markets, risk mitigation and/or company forward thinking.
- Drive efficiency in the compliance process through automation and rationalizing configuration/code-based compliance controls over manual process and controls.
- Work with engineering teams on new cloud and datacenter deployments, addressing compliance requirements as part of initial design and deployment.
[Position reports to company headquarters in Santa Clara, telecommuting permitted ]{calibri",sans-serif"=""}