About The Role

Security & Compliance

Support the organization's information security and compliance programs.
Assist with customer security assessments, questionnaires, and due diligence requests.
Support annual audits and certifications, including SOC and ISO-related activities.
Collect, organize, and maintain compliance evidence and documentation.
Assist with policy development, maintenance, and periodic reviews.
Monitor regulatory, contractual, and customer security requirements.

Privacy & Data Protection

Support compliance with applicable privacy regulations, including GDPR, CCPA/CPRA, HIPAA, and other data protection requirements.
Coordinate Data Subject Access Requests (DSARs) and other privacy-related requests.
Maintain Records of Processing Activities (RoPA) and privacy documentation.
Participate in Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs).
Support vendor privacy reviews and data protection agreement tracking.
Assist with privacy incident documentation and response activities.

Risk Management & Governance

Support third-party risk management and vendor assessments.
Assist with risk assessments and remediation tracking.
Maintain governance, risk, and compliance records and reporting.
Support security and privacy metrics, reporting, and dashboards.
Assist with implementation and administration of governance, risk, and compliance (GRC) platforms.

Training & Awareness

Coordinate security and privacy awareness initiatives.
Assist with compliance training administration and tracking.
Develop communication and awareness materials to promote security and privacy best practices.

Cross-Functional Collaboration

Partner with Security, Legal, Contracts, Human Resources, IT, and business teams to support compliance objectives.
Assist with customer and vendor contract reviews related to security and privacy requirements.
Participate in internal projects to ensure security and privacy considerations are appropriately addressed.
Support customer, vendor, and audit inquiries as needed.

Qualifications

Required

8-11 years of progressive experience in information security, privacy, compliance, governance, audit, risk management, or a related field.
Working knowledge of information security principles and controls.
Familiarity with security, privacy, and compliance frameworks and regulations, including HIPAA, PCI DSS, FERPA, GDPR, CCPA/CPRA, or similar requirements.
Strong organizational, analytical, and documentation skills.
Excellent written and verbal communication skills.
Ability to manage multiple priorities in a fast-paced environment.
Demonstrated ability to independently manage multiple security, privacy, and compliance initiatives with limited supervision.
Proficiency with Microsoft Office applications, including Excel, Word, and PowerPoint.

Preferred

Experience supporting SOC 1, SOC 2, ISO 27001, or similar compliance frameworks.
Experience with vendor risk management and customer security questionnaires.
Familiarity with privacy assessments, data mapping, and data governance activities.
Experience with governance, risk, and compliance (GRC) platforms.
Experience with artificial intelligence (AI) technologies, AI governance, AI-assisted productivity tools, privacy considerations, and emerging regulatory requirements (e.g., ISO/IEC 42001 and the EU AI Act) is highly desirable.
Willingness to support a global organization with regular availability through 11:00 AM Eastern Time (8:30 PM IST during U.S. daylight saving time and 9:30 PM IST during U.S. standard time).
Light development, scripting, API, or automation experience is a plus.
Experience supporting security automation, AI initiatives, or technology-enabled process improvements is a plus.
Security+, CISSP, CCSK, CIPP, CIPM, CRISC, CISA, or similar certifications preferred.
Experience within a professional services, consulting, or technology organization.

Professional Qualities

Strong attention to detail and follow-through.
Ability to work independently and collaboratively.
Sound judgment and professionalism when handling sensitive and confidential information.
Curiosity and willingness to learn across security, privacy, governance, compliance, and AI disciplines.
Strong customer service mindset and ability to communicate effectively with technical and non-technical stakeholders.
High degree of integrity, ethics, and accountability.

Why Join Apps Associates?

This role offers a unique opportunity to work directly with executive leadership while contributing to a global security, privacy, and compliance program. The successful candidate will apply broad experience across cybersecurity, privacy, governance, audit, risk management, AI governance, customer compliance initiatives, and emerging technologies within a growing professional services organization.