> Markdown version of [/jobs/ext/739578-senior-grc](https://www.wearedevelopers.com/jobs/ext/739578-senior-grc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior GRC - **Company:** LogRhythm, Inc. - **Location:** United States - **Experience:** Expert - **Salary:** $140,000.0 - $150,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Cyber Security, Databases, Phishing, Google Cloud, Cloud Platform System - **Published:** June 29, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=187b5da393a866bc ## About the Role Do you have experience in SaaS?, * 5+ years of experience in governance, risk management, and compliance roles in SaaS environment using Cloud Technologies * Must have successful completion of a SOC2 Type 2 audit for a company providing SaaS on AWS, GCP, Mobile &/or IoT solutions * Must have strong knowledge of regulatory requirements and industry standards (e.g., SOC2, ISO 27001, PCI, GDPR,IRAP). * Experience auditing and applying control processes to networks and applications * Knowledge of compliance regulations (GDPR, CCPA, etc.) and security frameworks (ISO27001, NIST, SOC2) * Experience developing corporate security policies, standards, and procedures * Experience with security and risk management * Ability to apply knowledge by reading and interpreting regulations to formulate real world controls * Understanding of cloud environments (GCP, AWS, Azure) * Strong teamwork and collaboration skills with the ability to work across multiple business units (Engineering, HR, Legal, etc.) with multiple stakeholders to drive remediation of security gaps * Strong facilitation and presentation skills and experience influencing and presenting at all levels including Senior business executives. * Excellent written and verbal communication skills * Strong critical thinking/problem solving skills * Previous consulting, legal, and audit experience is a plus * Experience in vendor management is a plus * Understanding of solution delivery lifecycle and architecture is a plus * Industry recognized certifications in security is a plus (CRISC, GRCP, CGEIT, ITIL, CISSP, CISM, CISA) ## Description The Senior Governance, Risk and Compliance (GRC) will have overall responsibility for Exabeam's GRC and security awareness programs. You will be responsible for ensuring compliance with regulations and certifications such as the Global Data Protection Regulation (GDPR), TRUSTe, Privacy Shield, SOC2, ISO27001, HIPAA, PCI, CCPA, and FedRamp. You will develop, maintain, and ensure compliance with corporate policies, standards, and procedures in alignment with ISO27001 and NIST security frameworks. You will be responsible for reviewing contracts and agreements in a security context to ensure we can meet the security needs of our customers. You will manage the risk inventory. You will work closely with other security team members in completing cross functional projects. This is an opportunity to own and lead the governance, risk, compliance, and security awareness programs for a fast-paced, innovative, security product companyResponsibilities * Establish and maintain Exabeam's governance, risk, compliance, and security awareness programs * Work with key stakeholders to ensure compliance with various regulations, such as the Global Data Protection Regulation (GDPR) * Maintain or develop Exabeam's various compliance certifications, such as TRUSTe, Privacy Shield, SOC2, ISO27001, FedRamp, HIPAA, PCI, and CCPA * Develop and maintain corporate policies, standards, and procedures in alignment with ISO27001, NIST, and SOC2 frameworks and controls * Ensure business units are in compliance with all policies, standards, and procedures * Prioritize and drive remediation of security gaps; across all departments * Monitor and report on the compliance and risk landscape of the company * Liaison for completion of third-party risk questionnaires, contracts, and management of our response database * Work closely with other team members in completing cross functional projects and ensuring that other teams are accountable to governance, risk, and compliance regulations * Define security strategies, metrics, reporting mechanisms and program services; and create maturity models and a roadmap for continual program improvements * Create and manage the education and awareness programs; content, delivery, compliance, phishing and other testing, etc. * Provide leadership, direction and guidance in assessing and evaluating information security risks and monitor compliance with security standards and appropriate policies * Participate in risk remediation efforts across business units * Manage vendors and third party risk * Establish processes to review implementation of new technologies to ensure security compliance ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [Top HR Tech Conferences in 2024](https://www.wearedevelopers.com/magazine/303-top-hr-tech-conferences-in-2024)