Security Risk Management Specialist, Leo Security

Project Leo is hiring a Security Risk Management Specialist to drive regulatory and certification compliance for cyber and information security across Leo’s technology and infrastructure. The role includes assessing security process maturity, designing and executing compliance programs, and coordinating with external auditors for successful audit execution.

• Assess compliance needs and maturity of processes and controls
• Design, build, and execute security or compliance programs
• Lead internal security and data usage assessments, investigations and security audits
• Develop risk management strategic control requirements and roadmaps
• Liaise with external auditors for successful audit executions

Security GRC role focused on regulatory compliance, certification compliance, and audit readiness. Core work includes implementing NIST control frameworks, reviewing control activities, collecting evidence, performing security and data usage assessments/investigations, and managing identity and access management, insider threat, data protection, and third party risk topics.

The ideal candidate is a mid-level security risk and compliance professional who has implemented NIST control frameworks and supported audits through evidence collection and control activity reviews. They can design and execute high-impact security compliance programs, collaborate across security and business teams, and effectively liaise with both external and internal stakeholders to meet regulatory and certification needs.