Customer Trust Lead for Security Governance, Risk, and Compliance (GRC)
BigPanda
Customer Service, Legal
United States · Remote
Posted on Jan 17, 2025
Location requirements:
Remote Based. Open to candidates based in the US.
About the Role:
BigPanda’s Customer Trust Lead is responsible for developing, implementing, maturing, and managing BigPanda’s information security compliance and risk management program. In this role the Customer Trust Lead will engage leaders in security, legal, IT, sales, and other teams to build strong relationships and programs. The Customer Trust Lead’s key areas of focus are on assessing risks of BigPanda systems and infrastructure and providing data-driven reporting to track risk reduction activities. Customer Trust Lead will ensure compliance with existing security frameworks (SOC 2 Type II), maturing, and expanding vendor service provider management programs, and identifying and tracking security risks and remediation. The Customer Trust Lead must have experience in Cloud native applications and must demonstrate broad security risk expertise and experience developing and running a security compliance program.
What you will do:
- Develop and manage a security risk management program to identify, assess, and manage risks, including effective data-driven reporting and tracking of risk reduction activities.
- Manage and update BigPanda’s Third Party Risk management program to ensure technical and procedural controls are effective both within BigPanda and with service providers/vendors.
- Execute annual information Security Risk Assessments (BigPanda and Third Parties), Penetration Tests, and SOC 2 Type II audit. Execute risk assessments of all vendors and new technologies or services used in company projects or products.
- Maintain and update security policies, standards, and Customer Trust documents as needed to stay current to threats and risks to BigPanda.
- Conduct information security risk assessments of company systems, cloud infrastructure, and data repositories. Recommend remediations and track data and progress on risk reduction activities.
- Lead annual reviews, updates, and Tabletop tests for business continuity plans to reflect changes and ensure continuing effectiveness, including BCP/DRP, BIA, CMP, ERP, PP, and Incident Response.
- Develop processes to efficiently collect data to demonstrate control effectiveness for security frameworks.
What skills and experience you’ll bring to BigPanda:
- 5-10 years of relevant Customer Trust work experience with enterprise SaaS software company
- Experience as Customer Trust Manager, Lead, Sr. Analysts, or equivalent security specialist
- Experience leading SOC 2 Type II security audit
- Knowledge and ability to work independently to drive goals of the company and CISO.Experience leading the Customer Trust program for an enterprise SaaS software company.
- Experience leading the plan, design, implementation, and sustainment of information security risk and compliance programs.
- Experience leading and managing Third Party Risk management programs.
- Experience conducting risk assessments for Cloud based systems and architecture.
- Experience taking complex security concepts and presenting the ideas and benefits to non-technical management in an impactful qualitative and quantitative way.
- Experience identifying and applying the security controls of information systems and production environments for a SaaS company on AWS.
- Experience integrating and applying policies that meet company security information risk objectives.
- Experience with SOC 2 Type II for a SaaS company and detailed knowledge and experience in related security and compliance frameworks.
- Experience applying cybersecurity and privacy principles to organizational requirements
- Effective communicating with auditors, customers, and company leadership.
- Experience leading review, updates, and Tabletop tests for business continuity plans to reflect changes and ensure continuing effectiveness, including BCP/DRP, BIA, CMP, ERP, PP, and IRP
- Risk Management experience
- Excellent verbal and written communication skills
About Us:
BigPanda is a fast-growing, values-driven, global company that enables Tech Ops teams to keep the digital economy running. BigPanda’s AI-driven IT operations (aka AIOps) platform transforms IT data into insight and action. By eliminating IT noise, automating incident management, and keeping our customers’ digital services up and running around the clock, we become a mission-critical part of our customers’ IT operations.
With BigPanda, some of the world’s largest enterprises including Hulu, Cisco, United, and many others are able to reduce costs and increase efficiencies, accelerate business velocity, and deliver extraordinary customer experiences.
BigPanda is backed by top-tier investors including Sequoia, Mayfield, Battery, Insight Partners, Advent International, and Greenfield Partners.
We have an awesome team of motivated, knowledgeable, fun-loving, and friendly Pandas. We provide comprehensive health coverage, parental leave, competitive cash and equity compensation, and a supportive, collaborative, and innovative environment to empower you to do the best work of your career.
Our Benefits:
- Competitive equity
- Remote-first environment
- Unlimited PTO
- Twelve (12) paid holidays throughout the year
- Comprehensive health benefits
- #PandaParent support. Financial assistance for fertility, adoption, and surrogacy expenses as well as a combined total of eighteen (18) weeks fully paid leave for all new parents
- Financial planning services
- Employee learning & development budget
- Values-based recognition (quarterly and annually)
- Social community & ERG programs
- Dog friendly office
- Lunches provided in office
- Flexible work environment along with a work-from-home stipend to support remote work arrangements
- Values-based culture
Market competitive salary with an anticipated base compensation range of $144,000 - $198,000. Actual salaries will vary depending on a candidate’s experience, qualifications, skills, and location
BigPanda offers a generous total rewards package that includes base pay, bonus, equity, and a world-class benefits program. We run two (2) compensation review cycles per year to ensure that managers can recognize employees without much lag between achievement and reward. All of this builds toward the best compensation we can give to anyone: the ability to develop your skills each and every day. BigPanda has a significant focus on career development that is at the core of our employee experience.
BigPanda is proud to be an Equal Employment Opportunity workplace employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.
Note: BigPanda is an E-Verify Employer
If you need assistance or an accommodation due to a disability, you may contact us at peoplequestions@bigpanda.io.