Senior Associate, Security Governance, Risk & Compliance - Remote

Overview

Gemini has an exciting opportunity for a Security GRC Senior Associate in the Compliance domain. This role will have a mix of strategic and operational responsibilities working with cross functional stakeholders to manage compliance audits, mature processes and procedures, provide guidance on regulatory and compliance topics, and maintain the organization’s information security compliance.

In Short

• Plan, coordinate and manage information security compliance audits such as ISO 27001, SOC 2 and PCI DSS.
• Manage the security aspect of regulatory exams.
• Support automation of evidence collection for audits.
• Mature security compliance testing program.
• Design compliance controls for emerging requirements.
• Advise teams on compliance with information security requirements.
• Support customer due diligence projects.
• Identify and assess security risks.
• Develop remediation plans for control gaps.

Requirements

• BA/BS degree in a technical field or equivalent experience.
• 5+ years in Information Security Governance, Risk and Compliance.
• Expertise in managing Information Security compliance audits.
• Experience with key information security frameworks.
• Knowledge of relevant regulations.
• Skilled in advising on compliance standards.
• Experience in security compliance testing.
• Strong analytical and problem-solving abilities.
• Excellent interpersonal skills.
• Strong organization skills.

Benefits

• Competitive starting salary.
• A discretionary annual bonus.
• Long-term incentive in the form of a new hire equity grant.
• Comprehensive health plans.
• 401K with company matching.
• Paid Parental Leave.
• Flexible time off.