Address compliance reviews, audits, and customer risk assessments by standards and policies Maintain and monitor a central source of evidentiary information in preparation for regular audits Work with stakeholders companywide to ensure evidence collection is automated to the fullest extent possible Support SOC 2 and ISO 27001 audit activity Work together with other stakeholders to ensure our corporate IT and procurement practices meet GRC objectives Assist the department in responding to inquiries from the business units about ongoing operational compliance Share information with managers to avoid surprises, draw attention to problems, and guarantee on-time preparation of compliance-related deliverables Knowledge, Skills Abilities: A degree in information security, risk management, governance, or a related field, or equivalent combination of education and experience Strong written and verbal communication skills 5+ years of experience in SRE, DevOps, GRC, or InfoSec Direct experience in or interest in developing in a GRC role Experience with one or more enterprise task management suites such as JIRA