About the job
The InfoSec Governance Risk and Compliance Lead at UpGuard is a pivotal job that drives the company's cybersecurity compliance initiatives. This position is essential for ensuring that systems and processes align with world-class security standards while supporting procurement and vendor management. The team thrives on collaboration and innovation, working together to tackle exciting challenges that propel UpGuard's sustainable growth.
You'll be responsible for
🚀
Leading GRC Strategy
Drive the development, maturity, and execution of UpGuard’s InfoSec Governance, Risk, and Compliance function, with primary ownership over technology and cybersecurity risk.🔗
Optimizing Procurement & Vendor Security
Partner closely with procurement, legal, and business stakeholders to embed security reviews into the purchasing lifecycle. Lead Third-Party Risk Management (TPRM) evaluations for new and existing vendors.✅
Championing SOC 2 & Security Compliance
Formally own the technology and security control components of UpGuard’s annual SOC 2 Type II audit cycle. Design, manage, and coordinate remediations and improvements stemming from prior cycles, incident post-mortems, and internal assessments.Key criteria
🔒
Information security experience
4+ years in Information Security, IT Audit, or GRC.View
🛠️
GRC tooling expertise
Hands-on experience with modern GRC platforms and TPRM tools.View
📜
Procurement and legal experience
Experience reviewing vendor contracts and security exhibits across regions.View
View more
