Senior Security Compliance Strategist

Company: hear.com
Location: Aurora
Posted on: April 8, 2021

Job Description:

hear.com is the fastest-growing hearing care company globally. We are driven by our belief that every person should hear well to live well. With our unique digital business model, we have changed the way hearing care is provided. We are a profitable global health-technology company with origins in Europe. Since starting our journey in 2012, we have helped over 200,000 customers get on the path to better hearing. In just 9 years, we have grown our team from 2 to over 1,500 people. We work hard and play hard in 11 international locations from Miami to Seoul. We promise ourselves to define the future of hearing care, never be corporate, and always live Day One.

We are looking for a Sr. Security Compliance Strategist to join our fast-growing team in Denver.

Join us now as we shape this fascinating consumer healthcare space!

You Will

• In depth understanding in all aspects of risk management, data compliance, InfoSec strategy, technologies and tools
• Advise internal business stakeholders on risk and compliance and work cross-functionally to ensure requirements are met
• Deep expertise in InfoSec, data compliance and risk management
• Develop internal policy and procedure documents to support security compliance initiatives
• Perform external & internal security compliance audit activities
• Articulate our security compliance program to third parties
• Direct experience with successfully implementing and managing an IT GRC tool (e.g., Archer, Modulo, MetricStream, ZenGRC, etc.)
• Experience with developing and producing security and compliance reporting that is meaningful and actionable for both technical and executive audiences
• Proven experience developing and submitting audit and compliance reports to governing bodies, legal entities, and/or external authorities
• Direct experience and knowledge of applicable local and federal information technology laws
• Solid knowledge and understanding of security controls across all security domains such as access management, encryption methods, vulnerability management, network security, etc.
• Structure and kick-off continuous and/or time-bound programs within the Engineering organization
• Lead Engineering initiatives to obtain industry compliance certifications
• Establish security culture across multiple teams to enable focus on execution, continuous improvement and operational excellence
• Anticipate and mitigate risks, whilst keeping in mind the big picture
  
  You Bring
  
  • Led cross-organizational teams to deliver strategic goals, partnering with Product & Tech leadership
  • Experience driving security topics in an agile, cross-functional environment
  • Extensive experience in a risk and technology compliance related role
  • Familiar with industry compliance standards as they relate to SaaS (ISO 27001, HIPAA, SOC 2, PCI, SOX, GLBA)
  • Certifications such as CISSP, CISA, CISM highly desirable
  • Familiarity with Cloud Computing and SaaS
  • Professional services/consulting background strongly preferred
  • Bachelors or Masters in any field and equivalent experience
    
    Why Hear.com
    
    • Change lives--- see the real world impact of what you do!
    • Join an international, hyper growth company... constantly solve new challenges
    • An opportunity to work with happy and grateful customers every single day
    • A chance to shape the future of a health-technology leader
    • A unique content-driven, top-performing and family-type work culture
    • A high degree of autonomy and responsibility from day one
    • An open-minded and international working environment that fosters creativity
    • Excellent salary and benefits package with entrepreneurial incentives

Keywords: hear.com, Aurora , Senior Security Compliance Strategist, Other , Aurora, Colorado