Information Security Compliance Manager

Seeking a full-time Information Security Compliance Manager with expertise in ISO, SOC, CMMC, and FedRAMP compliance who will manage automation of security plans, maintain risk assessments, and collaborate with cross-functional teams to ensure security controls are effectively implemented. Key responsibilities Automate generation of System Security Plans (SSP) and develop automated Plans of Action and Milestones (POAMs) Communicate security compliance issues with stakeholders and track mitigation tasks while generating reports and metrics Coordinate vendor security assessments and ensure adherence to security policies and standards across Synack's infrastructure Required qualifications 8+ years of experience in IT Security Strategy, Risk Management, and Compliance with a Cloud Service Provider Proficient in Python, Terraform, and CI/CD pipelines, with experience integrating tools with AI Familiarity with Enterprise Governance, Risk Management, and Compliance (GRC) tools Knowledge of security regulations and frameworks including ISO27000, SOC2, and FedRAMP Experience with event monitoring tools and Cloud Native Application Protection Platforms (CNAPP)