What Youll Do
Avalaras Organizational Risk, Resilience, Compliance and Audit team (ORRCA) is responsible for managing various risk and compliance initiatives and is looking for someone to support a growing team to help build out the security compliance function. You will report to Senior Director, Security Operations.
#LI-Remote
What Your Responsibilities Will Be
- You will be responsible for the overall coordination, execution, and quality control of assigned compliance controls such as access reviews, change reviews, terminated user analysis.
- You will ensure controls are appropriately performed by all stakeholders within defined SLAs.
- You will help implement compliance management in ServiceNow.
- You will perform compliance assessments against frameworks and develop remediation plans.
- You will work closely with system owners to ensure corrective action plans are in place to remediate gaps or deficiencies.
- You will identify areas for automation and/or business process improvements.
- You will assist in collecting and migrating control information into Avalaras GRC platform.
- You will work strategically and independently with internal and external groups on multiple simultaneous projects.
- You will apply compliance and security control knowledge within cloud environments such as AWS and GCP.
- You will identify opportunities to leverage AI and other automation technologies to streamline compliance processes.
What Youll Need to be Successful
- Bachelors degree in information technology, Computer Science, or equivalent experience
- 3+ years of work experience in IT Audit, IT Security, or IT Risk Management
- 3+ years of work experience working with ISO 27001, SOC 1, SOC 2, SOX, NIST etc.
- AI and automation experience.
- Basic understanding of risk concepts, including risk identification, evaluation, mitigation, and measurement
How Well Take Care of You
Total Rewards
In addition to a great compensation package, paid time off, and paid parental leave, many Avalara employees are eligible for bonuses.
Health & Wellness
Benefits vary by location but generally include private medical, life, and disability insurance.
Inclusive culture and diversit y
Avalara strongly supports diversity, equity, and inclusion, and is committed to integrating them into our business practices and our organizational culture. We also have a total of 8 employee-run resource groups, each with senior leadership and exec sponsorship.
What You Need To Know About Avalara
We re Avalara. We re defining the relationship between tax and tech.
We ve already built an industry-leading cloud compliance platform, processing nearly 40 billion customer API calls and over 5 million tax returns a year, and this year we became a billion-dollar business .
Our growth is real, and we re not slowing down until we ve achieved our mission - to be part of every transaction in the world.
We re bright, innovative, and disruptive, like the orange we love to wear. It captures our quirky spirit and optimistic mindset. It shows off the culture we ve designed, that empowers our people to win. Ownership and achievement go hand in hand here. We instill passion in our people through the trust we place in them.
We ve been different from day one. Join us, and your career will be too.
We re An Equal Opportunity Employer
Supporting diversity and inclusion is a cornerstone of our company we don t want people to fit into our culture, but to enrich it. All qualified candidates will receive consideration for employment without regard to race, color, creed, religion, age, gender, national orientation, disability, sexual orientation, US Veteran status, or any other factor protected by law. If you require any reasonable adjustments during the recruitment process, please let us know.
- Bachelors degree in information technology, Computer Science, or equivalent experience
- 3+ years of work experience in IT Audit, IT Security, or IT Risk Management
- 3+ years of work experience working with ISO 27001, SOC 1, SOC 2, SOX, NIST etc.
- AI and automation experience.
- Basic understanding of risk concepts, including risk identification, evaluation, mitigation, and measurement
- You will be responsible for the overall coordination, execution, and quality control of assigned compliance controls such as access reviews, change reviews, terminated user analysis.
- You will ensure controls are appropriately performed by all stakeholders within defined SLAs.
- You will help implement compliance management in ServiceNow.
- You will perform compliance assessments against frameworks and develop remediation plans.
- You will work closely with system owners to ensure corrective action plans are in place to remediate gaps or deficiencies.
- You will identify areas for automation and/or business process improvements.
- You will assist in collecting and migrating control information into Avalaras GRC platform.
- You will work strategically and independently with internal and external groups on multiple simultaneous projects.
- You will apply compliance and security control knowledge within cloud environments such as AWS and GCP.
- You will identify opportunities to leverage AI and other automation technologies to streamline compliance processes.