Cybersecurity Compliance Specialist

ConGobal, the go-to expert for multimodal, industrial terminal operations, is seeking to fill a Compliance Specialist role, within its technical team. We have a passion for innovation and continue to lead out in developing products that enhance our operations, unlock new markets, and disrupt the status quo. We are looking for people with a passion and track record for producing complex new technology. 

As a Cybersecurity and Compliance Specialist, you'll work to assess regulatory requirements and accordingly establish governance and risk frameworks. You will monitor, build and enforce security compliance programs to mitigate risk and compliance metrics. You will also build and manage policies and standards as needed to attain and maintain ConGlobal’s SOC2 Type 2 compliance.

• Build, maintain and manage information security compliance programs aligned with business objectives for SOC2
• Enforce policies, standards, and guidelines for ensuring compliance with applicable regulatory requirements as well as alignment with our internal security strategy
• Monitor and update and manage security assessments of vendors, third parties, and applications
• Review all technology and service provider contracts for adherence to our security standards
• Partner with cross functional teams including legal and engineering to review existing and new initiatives that could impact data privacy and other compliance requirements
• Manage risk program activities including risk registers, risk identification, tracking, and prioritization
• Collaborate with engineering and product teams to assess their risk posture, control breakdowns, and influence them to adhere to security and compliance obligations
• Drive strong risk management practices, corporate resiliency, and regulatory compliance activities
• Review contracts with an information security lens
• Partner with system and process owners to build data maps that incorporate data stores and data flows

• At least 3 years of experience in development and execution of governance, risk management, and compliance functions
• A bachelor’s degree in Cybersecurity or equivalent combination of education and experience
• A strong understanding of information security and compliance frameworks including SOC 1/2, ISO, NIST, GDPR, CCPA, FINRA, SOX and SEC cybersecurity requirements
• Excellent judgment and the ability to make quick decisions when working with complex situations
• Solid organizational skills and ability to multitask/prioritize workloads
• Proven understanding of public cloud infrastructure and services in AWS and GCP including knowledge of cloud-native security protection measures, tools, and techniques
• The ability to understand and influence cross-functional teams to accomplish goals as well as communicating business risk from cybersecurity issues