Security Compliance Manager

Manage Hive’s current risk management program Manage external and internal audits, including reviewing materials that require attention for accuracy and properly adhering to regulatory expectations Implement ISMS in coordination with executive and mid-level management Develop reports that capture key business trends, highlights, lowlights, and metrics as the compliance programs are conducted. Provide status, recommended updates, and detailed metrics and evidence Work with Engineering and Product teams to identify process improvements and efficiencies in areas of change management, access management and general technology process controls Provide compliance, risk, and controls expertise to support information security and compliance initiatives Protect the business by assisting with cyber security risk assessments Maintain awareness of industry best practices for data maintenance handling as it relates to your role Manage a comprehensive Governance, Risk and Compliance program Adhere to and champion policies, guidelines and procedures pertaining to the protection of information assets Manage external security, privacy, and compliance requirements, including both internal requirements for vendors as well as external requirements placed on Hive Report actual or suspected security and/or policy violations/breaches Define, develop, implement, and maintain our policies and processes that enable consistent, effective privacy practices that minimize risk and ensure the confidentiality of protected information, paper and/or electronic, across all media types and comply with applicable privacy laws and regulations Support Hive’s security review process from beginning to end by identifying all necessary internal stakeholders based on the request (e.g., security survey, audit, review), assembling relevant and appropriate documentation, drafting responses, scheduling and leading calls/meetings, and communicating follow-up activities Serve as a subject matter expert for information security principles and practices (especially as they pertain to vendors and cloud security), and promoting a culture of security throughout the firm Interface with staff throughout the firm to facilitate the efficient and secure use of technology services