Security Lead

About the role

We are seeking an experienced GRC lead candidate with a strong background in compliance, security audits, privacy and risk management. The ideal candidate should have minimum 6+ years of relevant experience in compliance, security audits, privacy, business continuity and risk management. The ideal candidate should have strong hands-on experience in SOC 2 Type II and HITRUST r2 programs and should be comfortable working in a product development environment.

What you'll do

• Own and drive end-to-end SOC 2 Type II & HITRUST R2 compliance and certification programs, including readiness, control implementation, evidence management, remediation
• Establish and maintain the organization's security compliance framework aligned with applicable regulatory and customer requirements
• Coordinate with external auditors, assessors, and certification bodies
• Develop, maintain, and continuously improve security policies, standards, procedures, and control frameworks
• Perform security risk assessments and support enterprise and product-level risk management. Maintain risk registers, control matrices, compliance dashboards

What you need

• 7–10 years in cybersecurity
• Risk management
• Compliance
• Internal audit
• Any graduate

Good to have

• ISO 27001
• CISA
• CISM