Support the development and implementation of cybersecurity governance, risk, and compliance frameworks tailored to Marigold’s products and services.
Participate in risk assessments to identify threats, vulnerabilities, and gaps in the company’s security posture.
Collaborate with internal stakeholders to establish and enforce security policies, standards, and procedures.
Support compliance initiatives and audits aligned with recognized frameworks and standards such as ISO 27001, SOC, NIST, PCI-DSS, and related controls.
Coordinate responses to customer security assessments, questionnaires, RFPs, data protection agreements, and audit requests.
Manage third-party risk assessments and vendor security evaluations to help mitigate supply chain risk.

Requirements

Experience supporting cybersecurity governance, risk, and compliance activities in a technology-driven environment.
Solid understanding of information security concepts, controls, and risk management practices.
Strong time management and organizational skills with the ability to prioritize effectively.
Excellent written and verbal communication skills across technical and non-technical audiences.
Ability to work independently while collaborating effectively across teams and organizational levels.
Nice to Have: Experience with compliance frameworks such as ISO 27001, SOC, NIST, HITRUST, or CIS Controls.
Familiarity with cloud security and secure software development lifecycle practices.
Experience with tools such as Jira, Confluence, Salesforce, Loopio, Safebase, or enterprise GRC platforms.

Benefits

Competitive benefits including: medical/dental/vision insurance, life/accident/disabilities insurance, supplemental health benefits, FSA, EAP and pet insurance
Generous time off (we call it Open Time Away) as well as paid holidays and a birthday benefit day off.
Paid Volunteer Time
401k plan with a company match on your contributions.
Employee-centric and supportive remote work environment with flexibility.
Support for life events including paid parental leave.

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurity governancerisk managementinformation securitycompliance frameworksISO 27001SOCNISTPCI-DSScloud securitysecure software development lifecycle

Soft Skills

time managementorganizational skillswritten communicationverbal communicationcollaborationindependenceprioritization