What we're looking for:
Minimum of 7+ years of combined experience in the security and GRC space.Familiarity and experience working with security frameworks, such as SOC 2, NIST 800-53, ISO 27001, CIS, etc.Willingness to wear different hats and work on areas where needed.Experience working with and implementing GRC tools and processes; specifically, a Third Party Risk program.Must excel in communication, and demonstrate the ability to explain technical security concepts to a non-technical audience.Experience in the creation/design of business continuity and disaster recovery programs, risk management, and/or vulnerability management programs.Must have a highly collaborative and teamwork-focused approach, as well as a heart for mentoring and leveling up your teammates.Must be able to assess and mitigate corporate risk within the organization.What you can expect:
Own, design and manage the continued enhancement of a Third Party Risk Management program including but not limited to strategy, roadmap, and controls to address regulatory requirements across multiple jurisdictions.Communicate our compliance framework and Third Party Risk Management Program requirements to all relevant stakeholders (internal and external).Engage cross-functionally (with groups such as Engineering, Finance, Legal, Product, and Sales) to establish a thoughtful strategic and tactical approach to our Third Party Risk Management Program and related processes.You will assist with analysis and preparation for internal and external audits.Accurately and effectively communicate our compliance position and programs to auditors and customers.Partner with other members of the security team to establish security guidelines that enable the organization to move fast in a safe and secure manner.To operate as a technical leader by helping define the GRC roadmap and by leveling up junior employees.Build strong relationships with partner and stakeholder teams in order to build a scalable GRC program.USA-based roles only: The Annual base salary for this role is between $187,000 USD and $253,000 USD, plus immediate participation in 1Password's benefits program (health, dental, 401k and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.Canada-based roles only: The Annual base salary for this role is between $168,000 CAD and $228,000 CAD, plus immediate participation in 1Password’s generous benefits program (health, dental, RRSP and many others), utilization of our generous paid time off, an equity grant and, where applicable, participation in our incentive programs.At 1Password, we approach each individual's compensation with a promise of fair market value and internal equity commensurate with experience and specific skill set.
What we offer:We believe in working hard, and resting hard. We’re always looking for new ways to support our team members, but here’s a glance at what we currently offer:
Health and wellbeing> Maternity and parental leave top up programs> Wellness spending account> Generous PTO policy > Company-wide wellness days off scheduled throughout the year > Wellness Coach membership> Comprehensive health coverage
Growth and future > Employee stock option program for all full time employees > Retirement matching program> Training budget, 1Password University access, and learning sessions > Free 1Password account (and friends and family discount!)
Flexibility and community> Paid volunteer days > Employee-led DEI&B programs and ERGs> Fully remote environment> Peer-to-peer recognition through Bonusly