Head - GRC

About the role

The role reports to the Chief Product & Technology Officer (CPTO), who leads apexanalytix's global engineering, product and hosted IT organizations. As a member of the CPTO's leadership team, the Head of GRC owns the company's control framework, its ISO 27001, SOC 1 and SOC 2 programs, and its enterprise and third-party risk management, and gives independent assurance that the controls run across the organization work as intended.

What you'll do

• Strategy and governance. Defines and runs a multi-year GRC strategy and roadmap. Chairs the company's risk and compliance forums and reports regularly to the CPTO and…
• Policy framework. Owns security policy and standards, including annual review, exceptions and employee attestation
• Certifications and audits. Leads the ISO/IEC 27001, SOC 1 Type II and SOC 2 Type II programs and any further attestations the market requires. Manages external auditors…
• Control framework. Maintains a single control framework mapped across NIST CSF, ISO 27001, SOC 2 and CIS
• Independent control testing. Sets control requirements and tests how well controls work across Security Operations, Technology Operations, corporate IT

What you need

• 10–18 yrs of experience
• Vulnerability assessment
• ISO 27001
• Compliance
• Data privacy
• SOX
• Risk management
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CISA
• CISSP
• CISM
• Accounts payable
• Due diligence
• Customer success