About Vantage Data Centers

Vantage is committed to being a workplace of inclusion, equity, respect and acceptance. We celebrate diversity and intentionally seek out opportunities to learn from one another’s experience.

Vantage Data Centers powers, cools, protects and connects the technology of the world’s well-known hyperscalers, cloud providers and large enterprises. Developing and operating across North America, EMEA and Asia Pacific, Vantage has evolved data center design in innovative ways to deliver dramatic gains in reliability, efficiency and sustainability in flexible environments that can scale as quickly as the market demands.

Information Security Department 

The Information Security department at Vantage Data Centers prides itself on its inclusive and collaborative environment. We work closely with other departments to ensure that any technology, hardware, or software, is updated, properly configured, vetted and monitored before, during and after deployment. The department’s responsibilities include actively participating industry standard audits such as ISO 27001, PCI DSS and others. We are responsible for the ISMS and maintaining and creating the policies and procedures and programs that are the backbone of the company. We are a dynamic department where our day-to-day tasks may vary but it is always rewarding. 

Position Overview 

This role can be based in any of our US locations: Denver, CO; Phoenix, AZ; Santa Clara, CA; or Ashburn, VA. 

We are seeking a highly skilled Governance, Risk & Compliance (GRC) Engineer to join our team. In this role, you will be responsible for developing, implementing, and managing governance, risk, and compliance frameworks to ensure our organization meets regulatory requirements, mitigates risks, and adheres to industry standards. You will work closely with various departments to design and implement security controls, conduct risk assessments, and ensure compliance with legal and regulatory requirements. Your expertise will be critical in safeguarding our organization’s data, infrastructure, and reputation. 

Essential Job Functions 

GRC Framework Development: 

• Design, implement, and manage the GRC framework to align with the organization's strategic objectives. 

• Develop and maintain policies, procedures, and standards to support governance, risk management, and compliance activities. 

• Ensure alignment of the GRC framework with industry standards, regulatory requirements, and best practices. 

Risk Management: 

• Conduct risk assessments to identify and evaluate potential risks to the organization's information assets. 

• Develop risk mitigation strategies and recommend appropriate controls to manage identified risks. 

• Monitor and report on the effectiveness of risk management efforts, making adjustments as needed. 

Compliance Management: 

• Ensure compliance with relevant regulations, standards, and internal policies, such as GDPR, HIPAA, ISO 27001, and others. 

• Manage and oversee compliance audits, both internal and external, and ensure that all findings are addressed in a timely manner. 

• Develop and maintain compliance documentation, including evidence of compliance and audit trails. 

Security Controls Implementation: 

• Collaborate with IT and security teams to design and implement security controls that align with the GRC framework.