About the Role
You will assess vendor risk, analyze assurance documentation, and prepare risk memos. You will manage SOC 2 audit evidence, process DSARs, conduct privacy impact assessments, maintain policies and remediation tracking, and implement privacy compliance processes, data inventories, and data-flow maps.
Requirements
•SOC 2 Type II
•Third-party risk assessment
•SOC 2 report
•PCI AOC
•Penetration testing
•GDPR
•CCPA
•CPRA
•BIPA
•CUBI
•Privacy compliance
•Privacy impact assessment
•Vendor risk
•PCI DSS
•KYC
•Identity verification
Responsibilities
•Triage vendor intake requests and assess inherent risk
•Analyze vendor assurance documentation and write risk memos
•Manage SOC 2 Type II audit evidence and auditor submissions
•Process DSAR requests and track statutory deadlines
•Run privacy impact assessments for product features and vendors
•Maintain policies and track remediation for vendor and audit findings
•Implement privacy compliance processes, data inventories, and data-flow maps
Benefits
•Equity
•Unlimited PTO
•Health coverage
•Vision coverage
•Dental coverage
•401k match
•MacBook Pro, display, and accessories
