Senior Governance, Risk & Compliance Lead - Remote

Overview

The Senior Governance, Risk & Compliance Lead at OnePlan is responsible for owning and operating security, privacy, and compliance programs, ensuring the company meets necessary compliance certifications while expanding into public sector markets.

In Short

• Own and manage governance, risk, and compliance programs.
• Maintain compliance certifications like SOC 2 Type II, ISO 27001, and ISO 27701.
• Coordinate with external auditors for compliance audits.
• Update security policies and internal documentation.
• Drive risk identification and remediation activities.
• Partner with Engineering and IT to implement security controls.
• Lead FedRAMP Moderate readiness initiative.
• Manage vendor risk assessments.
• Ensure compliance with GDPR and global privacy frameworks.
• Support the operation of the ISO 27701 privacy program.

Requirements

• 6+ years in governance, risk, and compliance roles.
• Experience with SOC 2 Type II and ISO 27001 audits.
• Understanding of NIST 800-53 and FedRAMP requirements.
• Experience with compliance automation platforms.
• Experience in a cloud-native SaaS environment.
• Strong documentation and coordination skills.
• Ability to translate compliance requirements into operational processes.
• Experience with FedRAMP readiness programs.

Benefits

• Remote-first company with a diverse team.
• Recognized as Global Microsoft Partner of the Year.
• Comprehensive health, dental, and vision benefits.
• Employer RRSP and 401K matching programs.
• Collaborative and enjoyable work environment.