Manager

• Serve as the primary system owner and administrator for our compliance management platform, Vanta.
• Configure, manage, and optimize the platform to align with our implemented control frameworks (e.g., SOC 2, ISO 27001).
• Drive efficiency by deploying and maximizing automated testing, continuous monitoring, and evidence collection capabilities within the tool.
• Manage platform workflows to ensure all controls, tests, documents, and policies are appropriately assigned to owners across the business and tracked to completion.
• Manage all internal and external audit activities (e.g., SOC 2, ISO 27001, NIS 2) and other compliance initiatives (like annual penetration tests).
• Coordinate all audit-related tasks, including evidence gathering, managing auditor requests, facilitating interviews, and managing the remediation of any findings.
• Ensure our compliance and continued accreditation with all required security and privacy programs.
• Develop, maintain, and manage the enterprise risk register, working with stakeholders to identify, assess, and prioritize security and AI-related risks.
• Own and execute our risk and vulnerability assessment process.
• Manage the end-to-end risk and control exception process, ensuring all exceptions are documented, reviewed, and approved.
• Coordinate with the SRE and business teams on Business Continuity and Disaster Recovery (BCP/DR) planning and data backup systems.
• Develop and manage the Third-Party Risk Management (TPRM) program.
• Own, manage, and implement the full suite of security policies, standards, and procedures, maintaining all related handbook pages and documentation.
• Define, establish, and track Key Performance Indicators (KPIs) and metrics to measure the effectiveness of the security program.
• Monitor the external landscape for new and changing laws, regulations, and industry standards that impact the organization, including those related to AI governance (e.g., EU AI Act, NIST AI RMF) and AI security best practices (e.g., OWASP Top 10 for LLMs).
• Contribute to the security budget, identifying and justifying tools and resources needed to scale the program.
• Act as a key security representative for our customers; engage and present on our security posture as needed.
• Lead the response to customer-facing risk assessments and security questionnaires, and maintain a central repository of standardized answers.
• Lead, manage, and deliver the company-wide security awareness and training program.
• Work regularly with cross-functional teams (e.g., Legal, SRE, Engineering, AI/ML, Data Science) to ensure assurance and AI governance considerations, including the Secure AI/ML Development Lifecycle, are integrated into all business processes.
• Enable a culture of continuous improvement and innovation, identifying opportunities to enhance security posture and streamline processes.

Senior Assurance Manager

Foundation Board Engagement Manager

Senior Manager, Migraine Congress and Society Planning – Secondment

Implementation Manager

Publisher Development Manager

Program Development Manager