Senior Security GRC Manager, SOX ITGC
Spotify
London, UK · Stockholm, Sweden · London, UK · Stockholm, Sweden
Posted on Tuesday, July 23, 2024
Senior Security GRC Manager
SOX ITGC
Link copied to clipboard.
Product
Security
The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the frameworks, capabilities and tools needed to welcome a billion customers. Join us and help to amplify productivity, quality and innovation across Spotify.
Locations
- Stockholm
- London
Job type
Permanent
Spotify is seeking a Senior Security Governance, Risk, and Compliance (GRC) Manager to join the Security Studio who will work closely with our engineering teams and audit functions. You’ll be focused on managing the execution of tasks for the Security GRC Program within Spotify, primarily in relation to ITGC and SOX, but also to other compliance and information security frameworks. You will work on ensuring tasks provide high-quality value and are completed in a timely fashion. Additionally, you will play an integral part in recommending process improvements and in helping to implement these updates. This role will require a deep understanding of SOX, ITGCs, and information security practices, as well as experience in working with technology teams.
What You'll Do
- Design, implement, monitor, and maintain SOX ITGC controls, with engineering and business partners
- Coordinate large-scale SOX ITGC projects (i.e. scope expansion), define success, dependencies and ensure timely delivery
- Identify, assess, and advise on information security risks, processes and controls to a variety of partners
- Build relationships with internal and external stakeholders
Who You Are
- You have 7+ years of experience with ITGC and SOX, including controls design and implementation. Experience in the technology industry is preferred.
- You have 5+ years of experience with security frameworks (e.g. SOC 2 Type II, ISO27001, NIST CSF, etc.), security controls design and implementation, and best practices
- CISA, CISM, CISSP, CPA or other related certifications a plus
- You have experience with PII and GDPR (preferred but not required)
- You are a strong collaborator, with experience working on teams composed of both technical and non-technical members
- You have the ability to problem-solve, multitask, and have excellent organizational skills
- You have excellent written and verbal communication skills, with experience presenting to key stakeholders and partnering with internal and external auditors and third parties
- You thrive in a data-driven, fast-paced and innovative environment
Where You'll Be
- For this role you will be based in Stockholm, Sweden, or London, UK
Link copied to clipboard.
Our global benefits
Extensive learning opportunities, through our dedicated team, GreenHouse.
Flexible share incentives letting you choose how you share in our success.
Global parental leave, six months off - fully paid - for all new parents.
All The Feels, our employee assistance program and self-care hub.
Flexible public holidays, swap days off according to your values and beliefs.
Learn about life at Spotify
Spotify is an equal opportunity employer. You are welcome at Spotify for who you are, no matter where you come from, what you look like, or what’s playing in your headphones. Our platform is for everyone, and so is our workplace. The more voices we have represented and amplified in our business, the more we will all thrive, contribute, and be forward-thinking! So bring us your personal experience, your perspectives, and your background. It’s in our differences that we will find the power to keep revolutionizing the way the world listens.
Spotify transformed music listening forever when we launched in 2008. Our mission is to unlock the potential of human creativity by giving a million creative artists the opportunity to live off their art and billions of fans the chance to enjoy and be passionate about these creators. Everything we do is driven by our love for music and podcasting. Today, we are the world’s most popular audio streaming subscription service.