Senior Security Compliance Specialist

About AppDirectBecome a digital, global citizen and enable the new generation of digital entrepreneurs around the world. AppDirect offers a subscription commerce platform to sell any product, through any channel, on any device - as a service. We power millions of subscriptions worldwide for organizations. We do this by our values-driven culture - one that enables you to Be Seen, Be Yourself, and Do Your Best Work. About YouWe’re looking for talented yet humble individuals who are smart, passionate, and want to drive disruption in the Information security industry. If you thrive in a fast-paced, collaborative workplace, AppDirect provides an environment where you will be challenged and inspired every day. If you relish the freedom to bring creative, thoughtful solutions to the table that reflect your experience and personality, there's no limit to what you can accomplish here. What you'll do and how you'll have an impactYou will be a member of the Compliance team (part of the Infosec team) as a Tech Risk Management Analyst. You will join the team primarily responsible for continuous compliance monitoring, risk management, vendor management, and maintaining our various certifications, such as ISO 27001, PCI-DSS, SOC 2, and SOC 1. You have both soft skills and technical potential and you think that the security team must be an ally and a facilitator for the company and all its members. Below is what we expect from you:

• Provide overall oversight for continued compliance and ongoing certifications (e.g. SOC 1 and 2, PCI DSS, ISO 27001, NIST CSF, GDPR, HIPAA, ISO 42001, NIST AI RMF, etc.). - Collaborate with internal staff to ensure that appropriate controls are implemented, operating properly, in accordance with the corporate policies. - Conduct audit readiness assessments and coordinate with internal and external functions and audit resources. - Serve as the primary point of contact during external audits, including coordinating evidence requests, facilitating auditor walkthroughs, and managing audit timelines to closure. - Improve and maintain the Privacy practice at AppDirect. - Develop and implement in collaboration with Engineering and architects mechanisms to automate the generation of evidence. - Support security and compliance due diligence and integration activities for M&A transactions. - Oversee customers questionnaires by liaising with internal staff and delivering expected results