Summary from listing
The role leads the company's information security risk management and internal control framework, develops and enforces security policies, manages audits and testing programs, coordinates with legal and external consultants, and educates employees on compliance practices. It requires a bachelor's degree in a relevant field, experience with auditing, takedown processes, law enforcement, privacy legislation, policies, risk-based decision-making, and collaboration with legal, audit, and compliance teams. Valuable experience includes open-source software compliance, ISO 2700x, PCI-DSS, NIST, and technical or engineering backgrounds.
