Responsibilities
- Own and manage the day-to-day execution of Madison Logic's security and compliance program, ensuring all objectives are met on schedule
- Develop, maintain, and enforce information security and data privacy policies, standards, and procedures, ensuring they reflect current regulatory requirements, industry best practices, and organizational needs
- Conduct regular policy reviews and updates in response to changes in legislation, business operations, or the threat landscape
- Lead customer and sales-facing security and privacy engagements, including responding to security questionnaires, reviewing contract terms, and negotiating Data Processing Agreements to ensure alignment between commitments, capabilities, and compliance obligations
- Partner with Legal to draft, review, and negotiate DPAs, MSAs, and other contractual agreements to ensure security and privacy obligations are accurate, enforceable, and operationally achievable
- Serve as the primary point of contact for all information security and data privacy requests, ensuring timely and thorough resolution
- Drive and manage global compliance efforts across SOC 2, GDPR, CCPA, and other applicable privacy regulations, including control monitoring, evidence collection, and audit readiness
- Own the vendor risk management program, conducting security and privacy assessments of new and existing vendors and tracking remediation of identified risks
- Plan, coordinate, and manage internal and external security audits from preparation through remediation
- Maintain and govern all documentation related to security compliance, systems accreditation, and management controls, ensuring accuracy and availability for stakeholders
- Evaluate and improve IT security and privacy training and certification programs to address current threats and maintain compliance with applicable policies, laws, and regulations
- Lead information security analysis and planning efforts, driving process improvements and configuration recommendations across the organization
Requirements
- B.S. Degree in Computer Science, Computer Information Systems, or related field desired
- 8+ years of experience building, implementing, and managing an IT Security and Data Privacy program
- Demonstrated experience developing, maintaining, and enforcing IT Security and Data Governance policies, standards, and procedures
- Experience partnering with Legal counsel to draft and negotiate DPAs, MSAs, and privacy-related contractual terms
- 4+ years of hands-on audit management experience across one or more of the following: GDPR, CCPA, SOC 2, ISO 27001, PCI, COBIT, NIST, CIS, HIPAA
- Working knowledge of penetration testing tools, AWS network security and IAM, perimeter security, application firewalls, single sign-on, Active Directory policy, SIEM, anti-malware, VPN, email security, key management, incident management, risk assessment, log management, change management, backup and disaster recovery, and highly available and distributed infrastructures
- Working knowledge of data subject privacy rights, PII data handling, data protection and cookie laws, data transmission and encryption requirements, data access controls, data retention and destruction, vendor assessment questionnaires, data privacy impact assessments, data breach response, and other cyber incident response procedures
Benefits
- Access to competitive compensation & benefits that reward your contributions.
- Participation in employee recognition programs to celebrate achievements big and small.
- Exposure to professional development & learning initiatives to help you build your own path.
- Foundation built on values anchored in Accountability, Team, Urgency, Respect, Integrity, and Innovation.
- Opportunities for global exposure work alongside talented colleagues across India, Singapore, the UK, and the US, expanding your perspective and network.
- Invitations to yearly team offsites to connect, collaborate, and strengthen relationships in person.
- Leverage a lifestyle spending account benefit so you can choose your own wellness and work-from-home perks.
Work Arrangement
Hybrid
Additional Information
- Work Environment: We offer a mix of remote and hybrid working. Remote work arrangements are not available for all positions. Hybrid work is required for employees local to our offices. Where applicable, hybrid WFH days work must be conducted from your home office located in a jurisdiction in which Madison Logic has the legal right to operate. WFH requires availability and responsiveness on a full-time basis from a distraction free environment with access to high-speed internet. Please inquire for more details.
- Pay Transparency/Equity: We are committed to paying our team equitably for their work, commensurate with their individual skills and experience. Salary Range and additional compensation, including discretionary bonuses and incentive pay, are determined by a rigorous review process taking into account the experience, education, certifications and skills required for the specific role, equity with similarly situated team members, as well as employer-verified region-specific market data provided by an independent 3rd party partner. We will provide more information about our perks & benefits upon request.
- Our Commitment to Diversity & Inclusion: Madison Logic is proud to be an equal opportunity employer. We are committed to equal employment opportunity regardless of sex, race, color, religion, national origin, sexual orientation, age, marital status, disability, gender identity or Veteran status.
