Platform.sh is looking for a motivated Risk & Audit Specialist to join our team, where you’ll play a key role in maintaining and enhancing our security and compliance standards. In this role, you’ll manage crucial compliance certifications (PCI, SOC2, GDPR, and ISO 27001), lead risk assessments, conduct internal audits, and ensure we meet all regulatory requirements. You’ll have the opportunity to grow within the team, mentor junior colleagues, and drive our continuous improvement initiatives. If you enjoy tackling challenges in a supportive and rewarding environment, this is a fantastic chance to join us and help keep Platform.sh at the cutting edge of compliance and security.

With a solid background in compliance and risk management, you’ll assess and manage company risks, evaluate internal controls, and champion ethical practices. You’ll also support our sales team by addressing security and compliance questions, reviewing contracts, and keeping our Trust Center up to date. This dynamic role is perfect for someone with outstanding communication, analytical, and technical skills, ready to make a meaningful impact on our organization’s security and compliance efforts.

What to expect:

• Lead transformative and technical compliance initiatives that shape the future of our risk management programs.
• Provide management with key insights on the health of our risk and audit activities, ensuring our organization remains secure and compliant.
• Take charge of internal assessments, risk assessments and third-party assessments, ensuring adherence to best practice security standards and regulatory requirements.
• Play a crucial role in assessing and managing security risks, helping us navigate complex regulations and maintain robust internal controls.
• Respond to potential or existing customer questions related to our security and compliance practices as part of sales enablement/support.
• Monitor and evaluate the impact of new features, technologies, and processes on our risk and audit activities, keeping us ahead of potential challenges.
• Engage with stakeholders, providing expert guidance on our security and compliance practices to build trust and support sales efforts.
• Respond to ad hoc needs internally, by conducting assessments, monitoring security controls, and also collaborating with auditors to support our annual audit requirements.

What you bring:

• A Bachelor’s degree in a relevant field (e.g., Computer Science, Information Technology, Business) or equivalent experience.
• Proven experience in a similar role handling compliance aspects of mergers and acquisitions.
• Experience addressing client security and compliance queries.
• Extensive knowledge of compliance certifications (e.g., PCI, SOC2, GDPR, ISO 27001) and other relevant standards.
• Hands-on experience with security control monitoring and internal audits.
• Strong knowledge of technical risk management and security practices.
• Proficiency with risk and compliance management tools.
• Familiarity with third-party risk management processes.
  
• Solid understanding of risk assessment, internal controls, and regulatory compliance.
• Excellent communication skills, both written and verbal.
• Strong analytical and problem-solving abilities.
  
• Relevant certifications (CISA, CRISC, CGRC, GRCA, CC) preferred.