The Challenge

This role will support IT and InfoSec by performing various governance, risk, and compliance activities as part of the OneTrust InfoSec GRC team. In addition, this role will collaborate with our sales team to address customer audits, assist with RFPs/RFQs and internal audits, manage the issues and risk acceptance process, and execute risk management processes to support ongoing compliance efforts.

Your Mission

• Supports ongoing compliance and audit processes
• Works with IT and business owners to collect evidence of effective controls
• Updates or defines policy, standard, and process documentation to align with compliance requirements
• Responds to customer inquiries, security questionnaires, and RFP/RFQs to provide appropriate answers
• Supports customer audits as needed
• Collaborate with IT, InfoSec, and within the GRC team to mature the compliance process
• Follow our ongoing risk and control self-assessment, audit management, and security risk assessment processes
• Provide front line support to customer meetings and audit requests to ensure that OneTrust’s customers understand the security program and controls and how it meets the requirements of the customer
• Support multiple audits simultaneously
• Become a trusted advisor to IT, InfoSec, and the business

You Are

Your Experience Includes:

• 2-5 yrs of related experience/similar roles
• Understanding of applicable laws and regulations, including but not limited to, GDPR, CCPA, PCI-DSS, SOC 2, ISO, and FedRAMP
• Understanding of technology domains including governance, risk management, security, privacy, and information technology and business continuity
• Planning, supporting, and or executing audits (customer-driven, internal, external)
• A relationship builder: Ability to listen, build rapport, and credibility as a strategic partner vertically and horizontally
• An Innovator: Possess the ability to seek alternatives and recommend best solutions that gain all parties support and lead to win-win results
• Value Driven: You are detail oriented with an eye for quality
• Ability to work with minimal oversight
• Ability to execute given high level direction

Extra Awesome

• Consulting and/or international experience
• Certifications: Security+, CISSP, CISM, CCSP, CISA, Azure

Benefits

As an employee at OneTrust, you will be part of the OneTeam. That means you’ll receive support physically, mentally, and emotionally so that you can do your best work both in and out of the office. This includes comprehensive healthcare coverage, hybrid workplace flexibility, flexible PTO, equity stock options, annual performance bonus opportunities, retirement account support, 14+ weeks of paid parental leave, career development opportunities, company-paid privacy certification exam fees, and much more. Specific benefits differ by country. For more information, talk to your recruiter or visit onetrust.com/careers.