Qureos Mentor

OnePlan Solutions

<div><h3 class="jobSectionHeader"><b>Description</b></h3><div><br>
At OnePlan, we specialize in creating AI-enabled solutions that make strategic portfolio, financial, resource, and work management seamless. We help businesses bridge the gap between strategy and execution by offering solutions that boost business agility, streamline project management, and optimize resources.</div><div>
</div><div><b>
What Makes us Unique?</b></div><div>
What truly makes OnePlan stand out is our commitment to delivering powerful solutions and fostering a culture of collaboration. We combine robust analytics with a platform that integrates seamlessly into the tools businesses already know and trust. Our high-trust, team-focused environment allows us to innovate quickly and deliver solutions that drive meaningful results for our clients. We're passionate about exceeding expectations, working together to empower organizations to succeed in a rapidly changing business landscape.<br>
<br>
OnePlan is looking for a <b>Senior Governance, Risk &amp; Compliance Lead</b> to own and operate our security, privacy, and compliance programs. This role is responsible for maintaining OnePlan&rsquo;s existing certifications including SOC 2 Type II, ISO 27001, and ISO 27701, while leading our FedRAMP Moderate readiness initiative as we expand into public sector markets.<br>
</div><div>This is a senior individual contributor role focused on building and operationalizing a scalable governance, risk, and compliance program within a Microsoft based SaaS ecosystem. You&rsquo;ll work closely with Product, Engineering, and Security leadership to ensure our platform, processes, and documentation meet the requirements of enterprise and government customers.</div><h3 class="jobSectionHeader"><b><br>
What You&rsquo;ll Do at OnePlan</b></h3><br>
<ul>
<li>
Own and manage OnePlan&rsquo;s governance, risk, and compliance program across security and privacy frameworks</li>
<li>Maintain the company&rsquo;s compliance certifications including SOC 2 Type II, ISO 27001, and ISO 27701, ensuring ongoing audit readiness and successful surveillance audits and recertifications</li>
<li>Coordinate with external auditors and manage evidence collection, control validation, and supporting documentation</li>
<li>Maintain and update security policies, procedures, and internal documentation supporting compliance frameworks</li>
<li>Maintain the company risk register and drive risk identification, assessment, and remediation activities across the organization</li>
<li>Partner closely with Engineering and IT teams to implement and document security controls across the platform</li>
<li>Lead OnePlan&rsquo;s FedRAMP Moderate readiness initiative, including NIST 800-53 gap assessments and remediation planning</li>
<li>Develop and maintain the System Security Plan (SSP) and associated FedRAMP documentation</li>
<li>Prepare the organization for 3PAO assessment and establish processes for ongoing continuous monitoring</li>
<li>Manage vendor risk assessments and third party security reviews</li>
<li>Support enterprise and public sector security questionnaires, compliance reviews, and due diligence requests</li>
<li>Ensure privacy and data protection practices align with GDPR and global privacy frameworks</li>
<li>Support the ongoing operation of OnePlan&rsquo;s ISO 27701 privacy program</li></ul><br>
<h3 class="jobSectionHeader"><b>
Our Ideal Fit<br>
</b></h3><br>
<ul><li>6+ years of experience in governance, risk and compliance, information security, or security compliance roles</li>
<li>Direct experience managing SOC 2 Type II and ISO 27001 audits and maintaining ongoing compliance programs</li>
<li>Strong understanding of NIST 800-53 and FedRAMP security requirements</li>
<li>Experience using compliance automation platforms such as Vanta or similar tools</li>
<li>Experience working in a cloud native SaaS environment, ideally within Azure</li>
<li>Strong documentation, audit management, and cross functional coordination skills</li>
<li>Ability to translate security and compliance requirements into practical operational processes</li>
<li>Experience leading or supporting FedRAMP readiness or authorization programs</li>
</ul><div><b>Bonus Points</b></div><ul>
<li>Professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer/Auditor, or CIPP</li>
<li>Experience supporting enterprise security reviews and government compliance requirements</li>
<li>Experience working in high growth SaaS or enterprise software companies</li></ul><br>
<h3 class="jobSectionHeader"><b>
More Reasons Why You Should Apply!</b></h3><br>
<ul>
<li>
We&rsquo;re a remote-first company with team members across the USA, Canada, UK, and India!</li>
<li>OnePlan has been recognized as the Global Microsoft Partner of the Year in Project Portfolio Management in 2019, 2020, 2021, 2022 and 2023.</li>
<li>We&rsquo;ve been named a &quot;Strong Performer&quot; in the latest Forrester Strategic Portfolio Management WAVE report.</li>
<li>We offer comprehensive health, dental, and vision benefits, with additional insurance options.</li>
<li>Employer RRSP and 401K matching programs.</li>
<li>A fun, collaborative, and diverse environment with regular health and team challenges to keep things light and enjoyable!</li>
</ul><div><b>At OnePlan, we are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, or veteran status. We are proud to be an equal-opportunity workplace.</b><br>
</div><div>Upon receipt of an offer letter, candidates will be subject to a standard background check process.<br>
<br>
D<i>isclaimer: We&rsquo;ll only contact candidates who have applied directly through our official channels. Any communication about job offers will always come from an email address linked to OnePlan Solutions, and we&rsquo;ll follow our standard hiring process every time. You&rsquo;ll never be asked for money or personal information during the interview process. If something feels off, don&rsquo;t hesitate to reach out to us to confirm.</i><br>
<br>
<b>Ready to Apply?</b><br>
Check out what it&rsquo;s like to work at OnePlan and learn more about us at https://oneplan.ai/</div><br>
<h3 class="jobSectionHeader"><b>
About OnePlan Solutions</b></h3><div>
OnePlan offers a strategic portfolio, financial and resource management solution that fits the needs of every PMO. Optimize your portfolio, financials and resources enterprise wide. Connect OnePlan with Microsoft Project, Office 365 Planner, Azure DevOps, Jira, and more for a complete view into all work across the enterprise.</div></div>

Senior Governance, Risk & Compliance Lead

Join OnePlan Solutions and explore 1   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

OnePlan Solutions

About Company

Senior Governance, Risk & Compliance Lead