Director, GRC, Engineering
Bellevue, WA · Remote · Full-time
We are looking for an experienced GRC leader with a strong engineering background. Governance, risk and compliance is key to ensuring the cybersecurity program we’ve built is continuously improving. This leader will be responsible for maintaining a high level of trust with our customers through our GRC program. You will also be able to interact with customers and auditors on a regular basis to build and maintain that trust directly. You’ll also ensure our numerous annual audits are completed on time and minimal impact to the rest of the business. You’ll lead our existing GRC team members and support their continued growth to achieve the vision you set for GRC at Smartsheet. You will also collaborate across the entire business and be a customer minded champion for cyber compliance. You’ll also partner closely with our Privacy and Legal team. This role reports directly to our CISO.
Responsibilities:
- Build automation into GRC
- Deploy GRC-as-Code / Policy-as-Code
- Deploy AI into our GRC processes where appropriate
- Own, manage and be accountable for supporting our revenue team by reviewing contracts
- Lead and build a high performing team
- Lead annual external audits such as SOC2, ISO 27001, ISO 27701, FedRAMP and others
- Define and track key performance indicators (KPIs) and key risk indicators (KRIs) from engineering and cloud telemetry data
Skills: AWS, CI/CD, CloudFormation, Container architecture, Contract Redlining, Cybersecurity, FedRAMP, GRC, ISO 27001, ISO 27701, NIST 800-53, Policy-as-Code, SDLC, SOC2, Terraform, Third Party Risk Management, Vulnerability Management