GRC Program Specialist

Joining Collibra’s GRC team

Collibra’s Governance, Risk, and Compliance (“GRC”) Team is looking for a GRC Specialist who will be a great team player with not only a technical background, but also some audit experience.

In your day-to-day, you will be helping our team to:

• develop and roll out policies, procedures, and processes, 
• manage vendor relationships, 
• remediate audit findings, 
• support external audits, and 
• help continue to improve our control environment by performing and monitoring global controls. 

Our GRC Specialist will enhance customer trust by supporting the GRC team in strengthening and maintaining Collibra’s control environment and risk posture. This is a hybrid role based in our New York office, Raleigh office, depending on the candidate’s location. Where applicable, our hybrid model means you’ll work from the office at least two days each week. This setup helps us stay connected, work more closely together, and keep making progress as a team.

Governance, Risk, and Compliance Specialist at Collibra is responsible for

• Executing periodic and continuous control monitoring activities, including user access reviews and third-party assessments, in order to help assure that Collibra’s controls are working as intended to protect our data.
• Supporting the risk and issue management lifecycle by collaborating with process and system owners in order to ensure security gaps are promptly identified, tracked, and remediated.
• Coordinating evidence collection for external audits (e.g., SOC 2, ISO 27001) by partnering with stakeholders across the company to provide a smooth audit process and successfully maintain our compliance certifications.
• Contributing to key governance functions, such as security awareness training and policy management, in order to strengthen our control environment.
• Administering the day-to-day functions of our GRC platforms to maintain a reliable source of truth for all GRC activities.

You have

• 3 years of experience in a public IT audit, internal audit, and/or compliance role, ideally in a SaaS software environment.
• One or more current qualifications is nice-to-have: CISA, CRISC, CISSP, CIA, CPA, etc.
• (Required for ALL postings)  A bachelor’s degree or equivalent related working experience is required.
• (Required for US non-federal postings) This position is not eligible for visa sponsorship.

You are

• Eager to learn and contribute, with a growing interest in governance, risk, and compliance.
• Knowledgeable about information security fundamentals and the core principles of risk management.
• Familiar with performing control testing or supporting technology audits, with some exposure to cloud environments (like AWS/GCP) or enterprise SaaS applications (like Salesforce, Workday).
• Familiar with at least one common control framework (e.g., SOC 2, ISO 27001, NIST CSF), gained through direct support of an audit or compliance program.
• Solution-oriented and pragmatic in your application of your compliance standards, with an understanding of how to balance business needs with the implementation of necessary controls.
• Ability to discuss technical topics with different teams and stakeholders through clear written and verbal communication skills.
• Strong interpersonal relationship skills to effectively interact with internal and external stakeholders.

Measures of success are

• Within your first month, you will…begin building relationships within the GRC team and across Collibra. You will begin to perform third party assessments as part of Collibra’s vendor onboarding process as well as begin to support the execution of Collibra’s training process. 
• Within your third month, you will… be performing continuous control monitoring and supporting the GRC team with recertification reviews and issue remediation activities.
• Within your sixth month, you will…help the team execute Collibra’s annual external audit program, helping maintain Collibra’s certifications.

Compensation for this role

The standard base salary range for this position is $72,000.00 - $90,000.00 per year. This position is not eligible for additional commission-based compensation. Salary offers are based on a combination of factors, including, but not limited to, experience, skills, and location.

In addition to base salary, we offer equity ownership at every level, bonus potential, a Flex Fund monthly stipend, pension/401k plans, and more.