Technology Trust & Compliance Professional

Decrypt Compliance is always hiring client-focused, value-seeking professionals.

Company DescriptionDecrypt Compliance is a Silicon Valley cybersecurity audit firm that specializes in helping cloud-native startups demonstrate their security commitments and achieve regulatory compliance. Our mission is to build trust and unlock growth for our clients by providing independent assessments and expertise in frameworks such as SOC 2 and ISO 27001.

Why join Decrypt Compliance? For your commitment and expertise, we promise a collaborative environment where your opinions are valued and your growth is championed. We are on the lookout for the next leader in our firm, and if you have the vision and drive to fit this role, we'd love to explore this journey with you.

Transparency & Accountability: Dive into a transparent ecosystem where commitments are honored, fostering trust and collaboration. Flexibility & Global Work: Champion a boundary-free work culture, defining your workweek and delivering unmatched results. Cognitive Diversity: Thrive in a space valuing varied perspectives, where open discourse and challenges lead to unparalleled growth.

About the Role: As a Technology Trust & Compliance Professional, you will be a linchpin in our organization, ensuring the highest standards of audit integrity while driving innovation projects focused on customer value. We are in search of an autonomous leader who can align with our vision to design & execute security compliance audits with finesse and meticulous attention to detail. While expertise in current practices is essential, we place a significant emphasis on a forward-thinking approach and a dedication to continuous improvement.

Key Responsibilities: Execute and oversee a comprehensive range of audits, including SOC 2 and ISO 27001, ensuring they adhere to the highest standards of compliance and accuracy. Cultivate a mindset of continuous improvement, identifying areas of enhancement in our audit processes and methodologies. Collaborate cross-functionally, establishing strong relationships with stakeholders and ensuring alignment with the organization's vision. Prioritize tasks effectively, distinguishing between essential risk mitigation activities, value-added client engagements, and administrative responsibilities. Stay informed about the latest trends in cybersecurity and compliance, ensuring our organization remains at the forefront of the industry.

Qualifications: Strong appreciation for the historical context of the audit profession and an understanding of how IT's evolution has influenced the field. In-depth knowledge of the audit landscape within the broader business context. Demonstrated comprehension of various cyber and privacy frameworks and their interrelations, including but not limited to SOC 1, SOC 2, ISO 27001, ISO 27701, ISO 42001, GDPR, HITRUST, and FedRAMP. CISA certification is mandatory. CISSP is a big plus.

Desirable Traits: A keen eye for detail complemented by a strategic mindset that prioritizes customer value and operational efficiency. Strong viewpoints on the state of cybersecurity compliance within the industry, especially around prevalent consumer and business concerns. An aspiration to rise to a partner role, understanding the associated responsibilities and accountabilities.