Director, It Compliance For North And Latin Americas'
CurrentGovernance, Risk and Compliance (GRC) Director managing an international team, responsible for providing comprehensive oversight and Risk Management, while ensuring tolerances are within company's risk appetite. Provides oversight and governance to internal and external parties, ensuring legal, regulatory, policy, standards, and security compliance.• Directs Information Security corporate-wide process for Policies, Standards, Procedures, and other Security governance to be developed, updates, reviewed, approved and communicated to all applicable stakeholders.• Reviews legal customer and corporate contracts for compliance and security, while providing consulting around HIPAA, GPDR and other regulatory requirements, with the understanding of customer requirements/needs as well as industry standards and organization risk requirements.• Manages and facilitates company-wide audits such as SOC2, ISO and penetration testing. Works with departments in creating procedures and processes to align with organization wide GRC framework, facilitating successful audits of SOC2 and ISO audits.• Provides key insights and quantified risk analysis to C-suite executives, facilitating security-related discussion and decision making.• Lowered annual audit costs by $500,000 while maintaining industry standard certifications without compromising security or risk resilience.
