GRC Lead - Remote

Overview

The GRC Lead at Contentful will enhance the Governance, Risk, and Compliance (GRC) program through structured processes and continuous improvement, ensuring compliance with high standards and managing risk effectively.

In Short

• Support compliance frameworks and maintain GRC software.
• Conduct internal audits and gap assessments.
• Manage the risk register and collaborate with stakeholders.
• Assist in audit preparation and execution.
• Support GRC committees and track action items.
• Provide training on security compliance requirements.
• Identify and recommend improvements for compliance gaps.
• Engage with customers regarding security and compliance.
• Contribute to the growth of GRC practices.
• Work in a fast-paced environment with multiple tasks.

Requirements

• 4+ years of Governance, Risk, and Compliance experience.
• 3+ years with ISO 27001 and SOC 2 frameworks.
• Experience in conducting audits and risk assessments.
• Strong communication skills and stakeholder management.
• Detail-oriented with a commitment to quality.
• Ability to work independently and in a team.
• Familiarity with compliance frameworks like PCI DSS and GDPR.
• ISO 27001 Lead Implementer or similar certifications preferred.
• Experience in a technical or development-focused environment.
• Proven track record of building relationships.

Benefits

• Stock options for full-time employees.
• Comprehensive fertility and family building benefits.
• Generous paid time off including vacation and education days.
• Annual education budget for skill improvement.
• Wellbeing stipend for health support.
• Monthly communication stipend and equipment reimbursement.
• Support for hybrid or distributed work environments.
• Events for learning and networking opportunities.
• Inclusive work environment with a focus on diversity.
• Commitment to employee wellbeing and work-life balance.