Senior Advisor, Information Security Governance, Risk & Compliance (GRC) 

Overview

Senior Advisor, Information Security Governance, Risk & Compliance (GRC) 

One Identity is an award-winning security software provider offering a broad selection of solutions that solve some of the most common and most challenging IT security problems. Part of the One Identity Software group, One Identity solutions eliminate the complexities and time-consuming processes often required to govern identities, manage privileged accounts, and control access. Our solutions enhance business agility while addressing IAM challenges within on-premises, cloud, and hybrid environments. The combined entity delivers a complete portfolio of market-leading Identity Access Management, Privileged Access Management, and Identity Governance solutions. Now, customers can achieve identity-centric security with trusted, proven technology in each major category.

We are seeking a strategic GRC leader who can translate complex regulatory frameworks into actionable, scalable practices. This role drives continuous compliance, leads ISO 27001 and SOC 2 audits, and partners across the organization to embed security and privacy into business processes. The ideal candidate is a thought leader in compliance maturity, adept at leveraging automation and analytics to reduce risk and improve resilience. 

Responsibilities

Governance 

-Develop and maintain IT security and privacy policies aligned with global standards. 

-Deliver engaging compliance training (New Hire Orientation, Privileged Access, Annual Security Awareness). 

-Champion a culture of security and compliance across all business units. 

Risk Management 

-Conduct enterprise-wide IT risk assessments and recommend mitigation strategies. 

-Mature insider threat and third-party risk programs. 

-Collaborate on investigations (legal hold, eDiscovery) and ensure secure data handling. 

-Maintain and enhance risk registers, ensuring timely reviews and updates. 

Compliance 

-Lead audits and assessments for ISO 27001, SOC 2, and NIST CSF. 

-Implement and monitor controls across multiple frameworks (ISO, NIST, GDPR, SOC 2). 

-Stay ahead of emerging regulations (AI governance, global privacy laws). 

-Drive adoption and optimization of GRC platforms for automation and reporting. 

-Partner with IT and business teams to ensure compliance in cloud and SaaS environments. 

Strategic Initiatives 

-Contribute to the GRC roadmap, aligning with business objectives and regulatory trends. 

-Leverage analytics and automation to streamline compliance processes. 

-Monitor emerging risks (AI, supply chain, privacy) and advise leadership on proactive measures. 

Qualifications

-4+ years in IT GRC, security, privacy, or audit roles. 

-Hands-on experience with GRC tools and frameworks (ISO, NIST CSF, GDPR, SOC 2). 

-Strong understanding of cloud security and SaaS compliance. 

-Excellent communication and stakeholder engagement skills. 

Preferences

-Bachelor’s degree in Information Security, Risk Management, or related field. 

-Certifications: CISA, CRISC, CISSP, CISM, CIPP/US/EU (or ability to obtain within 12 months of hire). 

-Experience in control mapping and automation across frameworks. 

-Familiarity with AI governance and emerging regulatory requirements. 

Company Description  

One Identity enables organizations of all sizes to better secure, manage, monitor, protect, and analyze information and infrastructure to help fuel innovation and drive their businesses forward. With team members around the globe, we intend to continue to grow revenues and add value to customers.  

When you join our team, you will have the opportunity to build and develop products at a scale few others can provide. Our product portfolio serves a large base of customers, and we are addressing the strategic imperatives for enterprise businesses. Working with some of the most talented employees the industry has to offer, we provide enhanced career opportunities for team members to learn and grow in a rapidly changing environment.  

Why work with us?  

-Life at One Identity means collaborating with dedicated professionals with a passion for technology.  

-When we see something that could be improved, we get to work inventing the solution.  

-Our people demonstrate our winning culture through positive and meaningful relationships.  

-We invest in our people and offer a series of programs that enable them to pursue a career that fulfills their potential.  

-Our team members’ health and wellness are our priority, as well as rewarding them for their hard work.  

One Identity is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind: One Identity is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at One Identity are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. One Identity will not tolerate discrimination or harassment based on any of these characteristics. One Identity encourages applicants of all ages.  

Come join us. For more information, visit us on the web at One Identity Careers | Explore Opportunities with the OI Team 

Job seekers should be aware of fraudulent job offers from online scammers and only apply to roles listed on quest.com/careers using our applicant system. Note: We do not use text messaging or third-party messaging apps like Telegram to communicate with applicants, so please exercise caution if you are approached in this way and only interact with people claiming to be Quest employees if they have an email address ending in @quest.com or @oneidentity.com 

#LI-CT1