security compliance manager

Micron Technology

<div>Our vision is to transform how the world uses information to enrich life for all.
Micron Technology is a world leader in innovating memory and storage solutions that accelerate the transformation of information into intelligence, inspiring the world to learn, communicate and advance faster than ever.
Responsible for designing, implementing, and leading enterprise-wide security compliance programs tailored to global regulatory environments including ISO 27001, NIST CSF, PCI DSS, SOC2 Type2, FedRAMP, HIPAA, GDPR, and CCPA. Drive strategic risk mitigation initiatives across multiple business units and geographies. Lead cross-functional teams to assess, enhance, and align cybersecurity policies and controls with evolving compliance frameworks. Develop and manage vulnerability management processes, third-party risk governance, and insider threat programs. Present risk insights and compliance metrics to CxO-level stakeholders and boards. Coordinate internal and external audits, assessments, and compliance reviews. Identify areas for improvement, develop action plans, and lead initiatives to improve security compliance posture. 10-20% domestic and international travel is required. May telecommute part-time.
Employer will accept a Master&rsquo;s degree in Information Technology, Information Systems, Information Security, Project Management or related field and 3 years of experience in the job offered or related occupation.
Position requires:
1. NIST Cybersecurity Framework (CSF)
2. FedRAMP continuous monitoring and adaptive risk management
3. PCI DSS, SOC2 Type2, HIPAA, GDPR, CCPA, PIPEDA
4. Cybersecurity program management and remediation strategy
5. Third-party risk management (TPRM) frameworks
6. Insider threat operations and IAM policy development
7. Vulnerability management and operational resilience
8. Cloud security (AWS, Azure, GCP)
9. Risk/value/cost modeling and dashboarding
10. Policy writing, governance, and compliance reporting
As a world leader in the semiconductor industry, Micron is dedicated to your personal wellbeing and professional growth. Micron benefits are designed to help you stay well, provide peace of mind and help you prepare for the future. We offer a choice of medical, dental and vision plans in all locations enabling team members to select the plans that best meet their family healthcare needs and budget. Micron also provides benefit programs that help protect your income if you are unable to work due to illness or injury, and paid family leave. Additionally, Micron benefits include a robust paid time-off program and paid holidays. For additional information regarding the Benefit programs available, please see the Benefits Guide posted on micron.com/careers/benefits.
Micron is proud to be an equal opportunity workplace and is an affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, age, national origin, citizenship status, disability, protected veteran status, gender identity or any other factor protected by applicable federal, state, or local laws. 
To learn more about Micron, please visit micron.com/careers
For US Sites Only: To request assistance with the application process and/or for reasonable accommodations, please contact Micron&rsquo;s People Organization at hrsupport_na@micron.com or 1-800-336-8918 (select option #3)
Micron Prohibits the use of child labor and complies with all applicable laws, rules, regulations, and other international and industry labor standards.
Micron does not charge candidates any recruitment fees or unlawfully collect any other payment from candidates as consideration for their employment with Micron.
AI alert: Candidates are encouraged to use AI tools to enhance their resume and/or application materials. However, all information provided must be accurate and reflect the candidate's true skills and experiences. Misuse of AI to fabricate or misrepresent qualifications will result in immediate disqualification.
Fraud alert: Micron advises job seekers to be cautious of unsolicited job offers and to verify the authenticity of any communication claiming to be from Micron by checking the official Micron careers website in the About Micron Technology, Inc.</div>

Staff Security Compliance Program Manager

Johnson, Mirmiran & Thompson

<div>Johnson, Mirmiran &amp; Thompson is a dynamic, 100% employee-owned consulting firm with more than 2,800 professionals, providing a full range of multidisciplinary engineering, architecture, information technology, and related services to public agencies and private clients throughout the United States. JMT is currently ranked #50 on Engineering News-Record&rsquo;s list of the Top 500 Design Firms.

Position summary: Seeking a skilled and motivated Site Security Manager with strong special access program experience and knowledge to perform in the role of site security manager. This position is located in South Padre Island, Texas. The Site Security Manager (SSM) is the single point of contact regarding the Sensitive Compartmented Information Facility (SCIF) construction security at the project site and responsible for implementing all aspects of a Construction Security Plan (CSP). The SSM will coordinate with the Contracting Officer Representative (COR) and will forward information to the Special Security Officer (SSO) on behalf of the Accreditation Official (AO). All security actions shall be approved by the SSM. The Site Security Manager (SSM) will ensure that the construction site and SCIF (classiﬁed workspaces) are not compromised and will relay any concerns to the AO. The SSM will be available to address any questions posed by the AO and will include the Contracting Officer (KO) or the Contracting Officer Representative (COR) for any contracts related to the construction project to ensure proper dissemination of information and contract compliance. SSM should understand UFC 4-010-05.

Immigration sponsorship or support (e.g. H1B, F-1 CPT/OPT/STEM OPT, TN Visa) is not available for this position.

Essential Functions and Responsibilities
<ul>
<li>In coordination with the SSO and AO, implement the Construction Security Plan (CSP).</li>
<li>Ensure construction activities comply with the Technical Speciﬁcations and security measures.</li>
<li>Review all project designs and documents (e.g., the CSP and SOPs) to ensure compliance with ICD-705, provide effective threat/risk mitigation strategies as requested by the SSO or AO, and perform security inspections of the SSM staff and construction project security to identify vulnerabilities and provide solutions to ﬁndings.</li>
<li>Participate in meetings, in-progress reviews, integrated concept, and product teams, working groups, and design meetings. The SSM shall support the Government in meetings, in the capacity of a SSM by providing input to ensure project security from start to ﬁnish but will not speak on behalf of the Government.</li>
<li>The SSM must be dedicated to this project and shall not hold other positions.</li>
<li>Perform design reviews of the project plans throughout each phase of the design process. Design reviews shall be done from a security perspective to conﬁrm designs and plans are inclusive of SCIF accreditation requirements, both in their identiﬁcation and with the details.</li>
<li>Accomplish visitor control management of the construction site.</li>
<li>Document, assess, and report to the applicable AO/SSO security incidents that occur at the construction site.</li>
<li>Verify that materials are received intact, free from tampering, and meet ICD 705 technical speciﬁcations.</li>
<li>Conduct risk assessments as directed by the SSO/AO.</li>
<li>Provide weekly updates to the SSO on site progress, issues, and upcoming milestones.</li>
<li>Ensure the requirements contained within the ICD/ICS 705 (series) are implemented and all variations or deviations are reported to the SSO and AO.</li>
<li>Conduct periodic security inspections to ensure compliance with the CSP.</li>
<li>Serve as the on-site liaison between the SSO, contractors, and command for all security-related matters.</li>
<li>Document security violations or deviations speciﬁc to the CSP and notify the SSO/AO within three business days.</li>
<li>Ensure access control policies and procedures are implemented.</li>
<li>Maintain access rosters of all uncleared personnel accessing the project site and include this list in the ﬁnal SCIF accreditation package.</li>
<li>Limit access to authorized personnel and verify clearance levels before entry.</li>
<li>Establish and maintain a controlled area around the construction site and post required security signage.</li>
<li>Ensure all design or construction changes are coordinated with and approved by the SSO before implementation.</li>
<li>Implement policies and procedures to deter, detect, and prevent unauthorized access to the project site.</li>
<li>Maintain all SSM staff documentation records for the duration of the project.</li>
<li>Coordinate SSM/ASSM staff for on-site in conjunction with the Construction Contractors schedule to ensure compliance with security and project site requirements.</li>
<li>Develop Standard Operating Procedures (SOPs) for the SSM/ASSM staff to perform their duties IAW the CSP, SSO/AO direction and ICD 705 (series).</li>
<li>Creating, developing, and applying inspection methods to be conducted by SSM/ASSM personnel when inspecting materials, ﬁnished and unﬁshed construction work, tools, equipment, personnel, and personal items such as bags, lunch boxes and associated items.</li>
<li>Support CSA and/or SSO inspections and assist with documentation requests.</li>
<li>Shall use knowledge of ICD/ICS 705 (series) and industry standard regulatory guidance, additional administrative policies, regulations, instructions, and procedures to develop and apply new techniques to implement and execute innovative SCIF construction security strategies to achieve the goals and objectives for the construction security and accreditation of this project.</li>
<li>Initiate and complete the Fixed Facility Checklist (FFC) and TEMPEST Checklist, compile required documentation (ﬂoor plans, certiﬁcations, details, etc.) and submit to the SSO/AO.</li>
<li>Monitor installation of electrical, conduit, heating ventilation and air conditioning (HVAC), and penetrations to ensure compliance with security and Transient Electromagnetic Pulse Emanation Standard (TEMPEST) requirements.</li>
<li>Oversee Sound Transmission Class (STC) and IEEE-299 testing.</li></ul> 
 
 
Required Skills 
<ul><li>Capable of reading, interpreting, and understanding technical drawings, blueprints, and related documentation.</li>
<li>Broad knowledge and understanding of Technical Surveillance Countermeasures (TSCM) policies and best practices.</li>
<li>Broad knowledge and understanding of physical security policies and practices.</li></ul> 
 
 
Required Experience 
<ul><li>Active and current USG Top Secret (TS)/ Sensitive Compartmented Information (SCI) TS/SCI security clearance.</li>
<li>Minimum of ﬁve (5) or more years of documented SCIF construction security experience</li>
<li>Minimum of three (3) years of documented SCIF construction security project management experience.</li>
<li>Documented direct experience managing and working on ICD-705 compliant construction projects serving as an SSM, ASSM, or combination of these.</li>
<li>Familiar with the sixteen (16) standard divisions of construction.</li>
<li>Expert level comprehension and knowledge of the ICD/ICS-705(series) as demonstrated by experience of managing at least three (3) separate ICD-705 compliant construction projects of increasing complexity and size.</li>
<li>Must provide proof of successful completion of forty (40) hours or greater of SSM formal training with documented proof of training by course transcripts or completion certiﬁcate.</li>
</ul>
Preferred Experience
<ul>
<li>Preferably holds a Bachelor's degree from an accredited university in security, intelligence, business management, or a related ﬁeld.</li>
<li>Preferably holds a professional industry recognized security certiﬁcation, i.e. Certiﬁed Protection Professional (CPP), Physical Security Professional (PSP), or equivalent. (IT and Cyber Security certiﬁcations do not count towards this)</li>
</ul>
Working Conditions

Work is performed in both an office and field (construction) environment. Office to field time is approximately 25% to 75% respectively. Field work requires climbing, walking and standing at a construction site and may be outside in heat/cold, wet/humid, and dry/arid conditions. Some lifting (up to 25 lbs) may be required.

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or any other characteristic protected by state or federal law.</div>

Site Security Manager

SpaceX

<div><div>SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.</div>
OPERATIONS ENGINEER, SECURITY
The Security Operations Engineer is a seasoned leader specializing in project management, data analysis, dashboard creation, and compliance oversight within fast-paced, high-tech environments. In this role, you will work alongside our security team and lead cross-functional and multi-disciplinary teams to optimize security operations and related risk management functions, supporting overall business operations through strategic planning, process optimization, and resource alignment to tasks. You will drive initiatives to develop and maintain analytical dashboards for real-time monitoring and reporting, refine existing applications and systems, conduct in-depth data analysis to identify trends and risks, and ensure adherence to federal, state, local laws, and company policies across all security functions. This is an opportunity for emerging leaders who can apply principles of operations management and data analytics to solve complex security challenges, conduct rigorous problem analysis, and steer and execute strategic decisions within the business. 
 
RESPONSIBLITIES:
<ul>
<li>Lead and manage security projects from inception to completion, including planning, resource allocation, timeline management, and stakeholder coordination to enhance operational efficiency and risk mitigation</li>
<li>Monitor, analyze, provide strategic insights, execute, and improve against key performance indicators for security operations (especially incident response times, threat detection rates, compliance audit scores, security breach incidents, employee training completion rates, vulnerability resolution rates, risk assessment scores, resource utilization efficiency, and budget adherence for security initiatives)</li>
<li>Design, develop, and maintain interactive dashboards using tools like Power BI, JIRA, or similar platforms to visualize security metrics, incident data, and performance indicators for real-time decision-making</li>
<li>Perform comprehensive data analysis on security logs, incident reports, and operational metrics to identify patterns, vulnerabilities, and emerging threats, providing actionable insights to senior leadership</li>
<li>Collaborate with cross-functional teams (e.g., IT, facilities, and HR) to integrate security best practices into business processes and implement corrective actions based on analytical findings</li>
<li>Monitor and report on key performance indicators (KPIs) related to security operations, such as response times, incident resolution rates, and compliance adherence, while forecasting future needs and trends</li>
<li>Train and mentor security team members on data-driven tools, compliance protocols, and project management methodologies to foster a culture of continuous improvement</li>
<li>Develop and update security policies, procedures, and emergency response plans, incorporating data analysis to proactively address potential risks in a high-tech environment</li>
</ul>
BASIC QUALIFICATIONS:
<ul>
<li>Bachelor's degree in computer science, information technology, cybersecurity, or an engineering field</li>
<li>2+ years of experience in operations/process improvement/consulting (internship experience qualifies)</li>
<li>Experience with Excel, SQL, python</li>
</ul>
PREFFERED SKILLS AND EXPERIENCE:
<ul>
<li>5+ years of professional experience in security engineering, systems administration, or a similar role in fast-paced, high-tech environments</li>
<li>Experience in data analysis, compliance oversight, or leading cross-functional teams for operational efficiency</li>
<li>Experience in configuring Atlassian Cloud products, including Jira and Confluence.</li>
<li>Experience working with the Esri ArcGIS Suite, including ArcGIS Pro, ArcGIS Online, and ArcGIS Enterprise with skills in leveraging GIS for security applications, such as mapping facility layouts, asset tracking, threat analysis, and geospatial data visualization</li>
<li>Experience in automating using scripting languages (Python, Javascript, etc.)</li>
<li>Ability to lead and collaborate effectively with multi-disciplinary teams, including IT, facilities, HR, and executive stakeholders</li>
<li>Proficiency in data visualization and dashboard tools like Power BI, Tableau, or similar platforms for real-time monitoring and reporting</li>
<li>Experience conducting comprehensive data analysis on operational metrics, logs, and incident reports to identify trends, risks, and vulnerabilities</li>
<li>Familiarity with federal, state, and local security regulations, as well as industry standards for compliance and risk management</li>
<li>Digital forensics, threat assessment, or emergency response planning experience in physical</li>
<li>Possession of at least two of the following certifications is a plus: PMP (Project Management Professional), CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), CPP (Certified Protection Professional), or data analytics certifications like Microsoft Certified: Power BI Data Analyst Associate</li>
<li>Advanced understanding of security operations disciplines, such as incident response, vulnerability management, and resource utilization, to analyze and mitigate risks</li>
</ul>
ADDITIONAL REQUIREMENTS:
<ul>
<li>Must be able to work extended hours and/or weekends as needed, including occasional short-notice domestic travel</li>
<li>Active Top Secret or TS/SCI. Note that an active clearance may provide the opportunity for you to work on sensitive SpaceX missions. If so, you will be subject to pre-employment drug and random drug and alcohol testing</li>
</ul>
COMPENSATION AND BENEFITS:

Pay range:

Operations Engineer /Level I: $100,000.00 - $115,000.00/per year

Operations Engineer /Level II: $110,000.00 - $135,000.00/per year

Your actual level and base salary will be determined on a case-by-case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience. Those with an active clearance will receive a 10% differential, up to an additional $15,000 annually, once officially briefed into a classified program.

Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long-term incentives, in the form of company stock, stock options, or long-term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long-term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees accrue paid sick leave pursuant to Company policy which satisfies or exceeds the accrual, carryover, and use requirements of the law.<div>
ITAR REQUIREMENTS:
<ul>
<li>To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. &sect; 1157, or (iv) Asylee under 8 U.S.C. &sect; 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.</li>
</ul>
SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX's Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to EEOCompliance@spacex.com.</div></div>

Operations Engineer, Security

Pacific Health Group

<div><h2 class="jobSectionHeader">Description</h2>
About Pacific Health Group
At Pacific Health Group, we are at the forefront of revolutionizing healthcare. You will play a vital role in this mission. We are dedicated to improving health outcomes by addressing social determinants of health and coordinating comprehensive community-based services, particularly through our programs. If you are passionate about making a difference and thrive in a dynamic, mission-driven environment, we invite you to join our team.
Overview
The Manager of Information Technology &amp; Information Security is responsible for the end-to-end ownership of all technology systems, data security, and regulatory compliance at Pacific Health Group. This role establishes, governs, and enforces the organization&rsquo;s security posture, ensuring that all systems, data, and operations meet or exceed HIPAA, HITECH, and industry best practices.
This position functions as the single point of accountability for IT infrastructure, cybersecurity, data protection, PHI safeguards, and security governance. The role requires both strategic leadership and hands-on execution in a regulated healthcare environment.
Core Areas of Responsibility
1. Information Security Program Ownership<ul><li>
Architect and maintain a formal, organization-wide Information Security Program.</li><li>
Define and enforce security controls across applications, infrastructure, devices, and users.</li><li>
Establish policies for data classification, encryption, access control, logging, monitoring, and retention.</li><li>
Ensure least-privilege access and zero-trust principles are implemented across systems.</li><li>
Continuously monitor evolving threat landscapes and proactively adapt controls.</li></ul>
2. HIPAA, PHI &amp; Regulatory Compliance<ul><li>
Serve as the internal authority for HIPAA Security Rule and Privacy Rule compliance.</li><li>
Ensure proper safeguards for the creation, storage, transmission, and disposal of PHI.</li><li>
Maintain compliance documentation, risk assessments, and audit evidence.</li><li>
Lead HIPAA risk analyses and remediation plans.</li><li>
Oversee Business Associate Agreements (BAAs) from a security and IT standpoint.</li><li>
Coordinate and support internal and external audits, assessments, and investigations.</li></ul>
3. IT Infrastructure &amp; Systems Oversight<ul><li>
Own the design, implementation, and maintenance of all IT systems, including:<ul><li>
Cloud platforms</li><li>
Networks and connectivity</li><li>
End-user devices and endpoints</li><li>
SaaS applications and internal tools</li><li>
Ensure systems are secure, resilient, and scalable.</li><li>
Implement and maintain:</li></ul><ul><li>
Backup and disaster recovery plans</li><li>
Business continuity procedures</li><li>
System redundancy and failover strategies</li><li>
Approve and govern all technology deployments and architectural changes.</li></ul></li></ul>
4. Cybersecurity Operations &amp; Incident Response<ul><li>
Establish formal incident response plans and escalation procedures.</li><li>
Lead response efforts for security incidents, attempted breaches, phishing, impersonation, or data exposure.</li><li>
Conduct root cause analysis and implement corrective actions.</li><li>
Ensure proper breach notification processes are followed when required by law.</li><li>
Maintain logs, alerts, and monitoring systems to detect suspicious activity.</li></ul>
5. Data Protection &amp; Privacy<ul><li>
Define and enforce controls for sensitive data, PHI, and confidential business information.</li><li>
Ensure encryption standards are applied to data at rest and in transit.</li><li>
Govern data access, sharing, and retention policies.</li><li>
Partner with legal and compliance stakeholders on privacy matters.</li><li>
Prevent unauthorized data access, leakage, or misuse.</li></ul>
6. Vendor, Tool &amp; Third-Party Risk Management<ul><li>
Evaluate security posture of third-party vendors and platforms.</li><li>
Approve technology vendors based on security, compliance, and risk criteria.</li><li>
Monitor ongoing vendor compliance and contractual obligations.</li><li>
Ensure third-party access is controlled, monitored, and revoked as needed.</li></ul>
7. Governance, Training &amp; Enforcement<ul><li>
Develop and enforce IT and security policies applicable to all staff.</li><li>
Deliver security awareness training, including phishing and impersonation prevention.</li><li>
Ensure staff understand approved communication channels and security protocols.</li><li>
Investigate and address violations of IT or security policy.</li><li>
Establish clear escalation paths and disciplinary guidance related to security breaches.</li></ul>
8. Strategy, Reporting &amp; Executive Advisory<ul><li>
Define a long-term IT and security roadmap aligned with business growth.</li><li>
Provide regular reporting to executive leadership on:<ul><li>
Security risks</li><li>
Compliance status</li><li>
Incidents and trends</li><li>
Improvement initiatives</li><li>
Advise leadership on technology risk, investments, and trade-offs.</li><li>
Balance operational efficiency with regulatory and security requirements.</li></ul></li></ul><h2 class="jobSectionHeader">
Requirements</h2>
Required Qualifications<ul><li>
Extensive experience in IT, cybersecurity, or information security leadership.</li><li>
Demonstrated expertise in HIPAA compliance and healthcare data protection.</li><li>
Strong understanding of cloud security, endpoint security, and identity management.</li><li>
Experience creating policies, controls, and compliance frameworks from the ground up.</li><li>
Ability to operate with high autonomy and accountability.</li></ul>
Preferred Qualifications<ul><li>
CISSP, CISM, or equivalent security certifications.</li><li>
Prior experience in healthcare, health tech, or regulated industries.</li><li>
Experience managing audits, risk assessments, and compliance programs.</li><li>
Familiarity with NIST, ISO 27001, or similar security frameworks.</li></ul>
Authority &amp; Accountability<ul><li>
This role has authority to approve or deny technology tools, vendors, and system access.</li><li>
Responsible for enforcing security policy across all departments.</li><li>
Accountable for protecting company data, systems, and regulatory standing.</li></ul>
Compensation<ul><li>
Salary Range: $78,500-82,500 (based on experience and qualifications)</li></ul>
Work Location<ul><li>
In-person with frequent local travel throughout San Diego County.</li><li>
Candidates should be based in or near Rancho Bernardo, Poway, Rancho Pe&ntilde;asquitos, or Scripps Ranch.</li></ul><h2 class="jobSectionHeader">
Benefits</h2>
Time Off &amp; Leave<ul><li>
160 Hours of Paid Time Off (PTO)</li><li>
12 Paid Holidays per year, including your birthday and one floating holiday after 1 year of employment</li><li>
4 Paid Volunteer Hours per Month to support causes you care about</li><li>
Bereavement Leave, including Fur Baby Bereavement</li></ul>
Health &amp; Wellness<ul><li>
90% Employer-paid Employee-Only Medical Benefits</li><li>
Flexible Spending Account (FSA)</li><li>
Short-Term &amp; Long-Term Disability | AD&amp;D</li><li>
Employee Assistance Program (EAP)</li></ul>
Financial &amp; Professional<ul><li>
401(k) with Company Match</li><li>
Monthly Stipend</li><li>
Opportunities for professional development and internal growth</li></ul>
Culture &amp; Perks<ul><li>
Employee Discounts via Great Work Perks and Perks at Work</li><li>
Quarterly In-Person Events</li></ul>
Equal Opportunity Employer 
Pacific Health Group is an Equal Opportunity Employer. We are committed to creating an inclusive and equitable workplace where all individuals are treated with dignity and respect. All qualified applicants will receive consideration for employment without regard to race, color, religion or creed, sex (including pregnancy, childbirth, breastfeeding, and related medical conditions), gender, gender identity or gender expression, sexual orientation, national origin or ancestry, citizenship status, physical or mental disability, medical condition (including cancer and genetic characteristics), age (40 and over), marital status, military or veteran status, genetic information, or status as a victim of domestic violence, assault, or stalking. We value diversity in all forms and encourage individuals from historically underrepresented communities to apply.
Job Application &amp; Offer Disclaimer
Pacific Health Group is committed to maintaining a transparent, lawful, and secure hiring process in compliance with California labor laws and employment standards. No candidate will be offered employment without meeting the required qualifications and skillset for the position and successfully completing all steps of our recruitment process, which include:<div><ul><li> 
Submission of a completed internal application via our HRIS system</li><li>A formal pre-screen with our recruiting team</li><li>Completion of a skills assessment (if applicable to the position)</li><li>Participation in a final interview with hiring leadership</li><li>Receipt of a formal verbal offer from our authorized hiring team</li></ul></div>
<h3 class="jobSectionHeader">AI &amp; Human Interaction (HI) in Recruitment</h3>
Pacific Health Group is committed to fairness, equity, and transparency in our hiring practices. We use AI (Artificial Intelligence) tools to help match candidate resumes against our job descriptions, focusing on qualifications, skillsets, and location.
All resumes that meet these criteria are then reviewed by HI (Human Interaction) &mdash; our recruiting and HR team. Pacific Health Group remains true to our Equal Employment Opportunity (EEO) statement, ensuring that every candidate is given fair and consistent consideration.</div>

IT Manager

<div><div>We help the world run better 
At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging &ndash; but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.</div><div></div> 
Job Overview: 
Responsible for ensuring the physical safety and security of SAP employees, buildings, and assets, through the implementation of, and compliance with, Global Physical Security Standards and Procedures, within the respective jurisdiction. Specifically: 
<ul><li>
Guarding Services</li><li>
Electronic Security Systems</li><li>
Physical Security Countermeasures</li><li>
Personnel Security (Travel, Event, Close Protection and Workplace Violence)</li><li>
Awareness and enablement</li><li>
Crisis Management</li><li>
Incident response and management</li><li>
Investigations</li><li>
Security Project Management</li><li>
Security compliance to internal and external standards</li></ul> 
Job Description: 
<ul><li>
Provide overall physical security support and direction to multiple SAP business locations in the MEA North and MEA South Region, noting Saudi Arabia will be the primary focus.</li><li>
Maintain a site-by-site overview of budgeting/spend, existing conditions, contact data, and location specific information.</li><li>
Overall operational responsibility for security operations and operational tasking of sites and resources, both internal and external, within the sub region,</li><li>
Conduct physical building security risk assessments, surveys, and physical penetration testing.</li><li>
Manage contract security services (Guarding/Watchman), to include the development/implementation of Building Security Operations Manual at all sites.</li><li>
Manage electronic security systems and vendors, to include electronic access control, badging, visitor management, security video, intrusion detection systems, and control center operations.</li><li>
Execute the planning, design, bid, construction and commissioning activities for multiple concurrent projects, and oversee all aspects of physical security related to these projects. Projects include new construction and renovation (driven by Global Real Estate &amp; Facilities), or system replacements and/or additions.</li><li>
Assess and implement personnel protection programs, consisting of Travel Safety &amp; Security, Events, Close Protection, and Workplace Violence.</li><li>
Provide training and employee security awareness programs.</li><li>
Conduct internal investigations as needed.</li><li>
Oversee physical security incident reporting and resolution.</li><li>
Conduct presentation of physical security services when necessary.</li><li>
Partner/support SAP Health and Safety programs and ensure emergency responses are established.</li><li>
Report on physical security strategy and metrics (KPIs).</li><li>
Maintain close relationship with law enforcement and emergency responders.</li><li>
Proactively support Security compliance to national legislation and ascribed industry standards and support internal and external audits</li><li>
Proactively contribute to developing the team capabilities across the region, through initiatives, working groups and knowledge sharing.</li><li>
Work as directed by manager.</li></ul> 
Competencies and Skills: 
<ul><li>
Intermediate Business Acumen: Ability to comprehend and manage financial aspects (shopping carts, purchase orders, and invoice review/approvals), develop business cases (cost/benefit), manage indirect and direct reports, and implement risk management fundamentals.</li><li>
Strong Process Evaluation: Provide ongoing evaluation of processes and programs, subject to business requirements, to ensure compliance with best practices and internal Standards and Procedures, while ensuring efficiency, rationalization and practicality.</li><li>
Strong Customer Relations and Leadership Skills: Ability to manage a diverse range of internal stakeholders, including Executives and Senior Management, Lines of Business, SAP Global Security, Travel, Compliance, Audit, Human Resources, Procurement, Legal, Communications, Global Real Estate and Facilities, as well as participating on cross functional project teams.</li><li>
Comprehensive Communication Skills: Strong English writing, speaking, and comprehension skills (in addition to local language proficiency), comprehension of analytical and technical data, and comprehensive understanding of Microsoft Office products.</li><li>
Beginner Information Technology Principals: Ability to comprehend and contribute to IT based electronic security system design and operation.</li><li>
Comprehensive Vendor Management: Ability to manage a variety of external vendors, and understanding/enforcement of Contracts, Service Level Agreements, etc.</li><li>
Intermediate Project/Program Management: Ability to understand, implement, and report on project/program planning, design, bid, construction, and commissioning of materials and services.</li><li>
Strong Physical Security Industry Knowledge: Full understanding of physical security product (manufacturer vs. distributor vs. integrator) and services market.</li><li>
Organizational Skills: Strong organizational skills, to include rapid and succinct decision making, ability to multi-task on a regular basis, working independently, ability to handle sensitive information confidentially, ability to plan strategically while overseeing tactical implementation, while taking a proactive approach with a positive attitude.</li><li>
Compliance &amp; Audit experience: Subject related audit and compliance experience in an operational security setting that is aligned to or relatable to the operating environment of SAP.</li></ul> 
Experience, Education, and Certifications:<ul><li>
5 years&rsquo; experience in physical security industry or equivalent (military, law enforcement, etc.).</li><li>
2 years of direct experience in the majority of&rdquo; Job Description&rdquo; and &ldquo;Competencies and Skills&rdquo; above.</li><li>
Associates degree in related field.</li><li>
Ability to pass background verification.</li><li>
English language skills mandatory</li><li>
CPP Desirable</li></ul><ul><li> 
Due to Saudization local mandates, only Saudi nationals will be considered at this time.</li></ul><div> 
Bring out your best 
SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.
 
 
We win with inclusion 
SAP&rsquo;s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone &ndash; regardless of background &ndash; feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world. 
 
SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com. 
 
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training. 
 
Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability, in compliance with applicable federal, state, and local legal requirements. 
 
Successful candidates might be required to undergo a background verification with an external vendor.</div><div></div><div> 
AI Usage in the Recruitment Process</div><div>
For information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process.
</div>Please note that any violation of these guidelines may result in disqualification from the hiring process. 
 
Requisition ID: 442369 | Work Area: Administration | Expected Travel: 0 - 10% | Career Status: Professional | Employment Type: Regular Full Time | Additional Locations: #LI-Hybrid</div>

Security Specialist - Saudi National

Doppel Farmaceutici

<div><h2 class="jobSectionHeader">The Role</h2>

At Doppel, we focus on building a culture where people feel respected, supported, and trusted to do meaningful work. We value clarity, collaboration, and solving real problems for our customers and teammates.

We are looking for a Governance, Risk &amp; Compliance (GRC) Analyst to lead our certification and assurance programs&mdash;owning SOC 2 end‑to‑end and driving ISO 27001, ISO 27701, and ISO 42001 audit preparation and ongoing maintenance. You'll be the program lead partnering with Security, Engineering, IT, Legal, and Sales to keep controls effective, risks managed, and customer trust high.

<h2 class="jobSectionHeader">What You'll Do</h2>
<ul><li>Lead audits &amp; certifications: Own preparation, execution, and ongoing maintenance for ISO 27001, ISO 27701, ISO 42001, and SOC 2, including gap analyses, remediation, evidence collection, auditor coordination, and management system documentation.</li>
<li>Manage enterprise risk: Operate the security and enterprise risk program, maintain the risk register, perform system/vendor/AI risk assessments, and drive remediation and risk acceptance processes.</li>
<li>Ensure control effectiveness: Design and execute control testing, track exceptions and corrective actions, and streamline compliance across frameworks (ISO, SOC 2, NIST, GDPR/CPRA, PCI, HIPAA/HITRUST).</li>
<li>Oversee access governance: Lead periodic access reviews, enforce least-privilege and joiner/mover/leaver controls, and monitor privileged account usage.</li>
<li>Drive vendor &amp; third-party risk management: Conduct due diligence, risk tiering, contract security/privacy requirements, and ongoing monitoring of critical suppliers and partners.</li>
<li>Support customer trust: Own security and privacy questionnaires, RFP responses, and Trust Center content; engage with customers and sales teams to communicate our security posture.</li>
<li>Advance governance &amp; privacy: Maintain the policy lifecycle, role-based training, and privacy processes.</li>
</ul><h2 class="jobSectionHeader">What We're Looking For</h2>
<ul><li>5&ndash;7+ years in GRC, audit, or risk&mdash;at least 3+ years leading ISO 27001 certification/surveillance cycles and SOC 2 Type II audits; hands-on experience with ISO 27701 and ISO 42001 or equivalent AI governance programs.</li>
<li>Proven ownership of SOC 2 programs (scope, controls, evidence, auditor management) and continuous compliance in cloud‑first environments (AWS/Azure/GCP, SaaS).</li>
<li>Strong ability to communicate compliance jargon effectively across the business, tailoring complex requirements for technical, operational, and executive audiences.</li>
<li>Strong command of management systems (ISMS/PIMS/AIMS), Trust Services Criteria, control testing, sampling, and evidence sufficiency.</li>
<li>Practical experience running access certifications, vendor risk reviews, and customer security questionnaires/RFPs at scale.</li>
</ul><h2 class="jobSectionHeader">Why Join Doppel</h2>
<ul><li>$120,000 - $140,000 USD</li>
<li>Meaningful equity so you share in Doppel's success</li>
<li>Remote first culture with flexibility built in</li>
<li>Flexible PTO, comprehensive health benefits, parental leave, and more</li>
<li>A high growth environment where your work has immediate impact and visibility</li></ul></div>

GRC Analyst

Grant Thornton

<div><div>Grant Thornton is seeking a Director of Information Security Audit &amp; Compliance to join the team. Approved office locations can be found below. 
</div><div></div>We are seeking a Director of Information Security Audit &amp; Compliance to lead and scale a global audit and compliance practice. This role will be responsible for establishing global delivery centers, managing internal and external audits, and ensuring the information security program is governed through a consistent, defensible framework aligned to NIST CSF and NIST 800-53.
The ideal candidate combines deep audit and regulatory expertise with strong operational leadership, enabling the organization to meet regulatory, client, and certification requirements while supporting business growth and innovation.
Key Responsibilities
Audit &amp; Compliance Strategy
<ul><li>Define and lead the global information security audit and compliance strategy across the enterprise.
</li><li>Establish and scale global delivery centers to support audits, evidence management, and continuous compliance operations.
</li><li>Own the audit calendar and roadmap for ISO, NIST-based, HIPAA, and client-driven audits.
</li></ul>Audit Management &amp; Execution
<ul><li>Lead enterprise-wide audits and assessments including ISO 27001 , NIST , HIPAA , and client-specific security audits.
</li><li>Act as the primary point of contact for external auditors, regulators, and client assessors.
</li><li>Ensure timely, high-quality audit deliverables, responses, and remediation plans.
</li></ul>Governance, Risk &amp; Control Framework
<ul><li>Align the information security governance program to NIST Cybersecurity Framework (CSF) and NIST 800-53 .
</li><li>Develop, maintain, and mature security policies, standards, and control frameworks.
</li><li>Ensure controls are consistently implemented, tested, and evidenced across global teams.
</li></ul>Continuous Compliance &amp; Control Assurance
<ul><li>Establish processes for continuous control monitoring, internal testing, and readiness assessments.
</li><li>Track audit findings, remediation efforts, and risk acceptances through closure.
</li><li>Partner with technology, security, and business teams to remediate gaps and strengthen control effectiveness.
</li></ul>Client &amp; Regulatory Engagement
<ul><li>Support client due diligence, RFP security responses, and client-led audits.
</li><li>Translate technical and control-based requirements into clear, business-aligned commitments.
</li><li>Build trust with clients by demonstrating a mature, transparent compliance posture.
</li></ul>Leadership &amp; Global Team Development
<ul><li>Build, lead, and mentor a globally distributed team of audit and compliance professionals.
</li><li>Define roles, responsibilities, career paths, and training for audit and compliance staff.
</li><li>Foster strong collaboration with security engineering, IT, legal, privacy, and risk teams.
</li></ul>Required Qualifications
<ul><li>12+ years of experience in information security, audit, or compliance, with 5+ years in senior leadership roles.
</li><li>Deep hands-on experience leading ISO 27001, 27701, 27017, NIST , HIPAA , and client-driven security audits.
</li><li>Strong expertise in NIST CSF and NIST 800-53 governance, control design, and assessment.
</li><li>Proven experience building or scaling global audit and compliance delivery models.
</li><li>Strong understanding of information security controls, risk management, and regulatory expectations.
</li><li>Excellent communication skills with the ability to engage executives, auditors, and clients.
</li></ul>Preferred Qualifications
<ul><li>Experience operating in global, highly regulated environments.
</li><li>Familiarity with SOC 1 / SOC 2, cloud compliance, and third-party risk assessments.
</li><li>Experience implementing GRC tooling to support audit and compliance workflows.
</li><li>Professional certifications such as CISSP, CISA, CRISC, CISM, ISO 27001 Lead Auditor , or equivalent. 
</li></ul><div>The base salary range for this position in the firm&rsquo;s Chicago, IL, Downers Grove, IL, Cleveland, OH, Minneapolis, MN, Reno, NV, Denver, CO and Baltimore, MD offices only is between $172,000 and $258,000 per year. 
</div><div></div><div>The base salary range for this position in the firm&rsquo;s Washington, DC, Boston, MA, Bellevue, WA, Los Angeles, CA, Newport Beach, CA San Diego, CA, Edison, NJ, and New York, NY, and Melville, NY offices only is between $185,760 and $278,640 per year. 
</div><div></div><div>The base salary range for this position in the firm&rsquo;s San Francisco, CA and San Jose, CA offices only is between $197,800 and $296,700 per year.</div></div>

Director, Information Security Audit & Compliance (Global)

Search 10000+ Security compliance manager jobs near you this March. New roles added regularly across leading industries. Apply today.