Security Trust & Compliance Program Manager

At Everlaw, our mission is to promote justice by illuminating the truth, and we’re changing the way that legal teams at law firms, corporations, government agencies, and nonprofits find the information they need to achieve their truth-finding goals. 

We are looking for a dedicated and experienced Security Trust and Compliance Program Manager to enhance and manage our security trust and compliance programs. Our Security Trust and Compliance Program is pivotal to Everlaw’s continued topline revenue growth: more than ever, an organization’s security and compliance posture and robustness is a key factor in a customer’s buying decision. As the Security Trust & Compliance Program Manager, you will collaborate with our corporate IT, engineering, legal, and GTM teams to stay ahead of the curve on security, compliance, and risk regulations and trends. The ideal candidate has a strong background in information security, compliance, and risk management, along with exceptional project and program management skills.

Our company culture is open and vibrant and we’re committed to the professional growth of our team members, offering an annual learning and development stipend and regular check-ins with managers regarding career goals. If you’re looking for a place that values passion, integrity, thinking big, and a desire to learn, we’d love to hear from you! Think you’re missing some of the skills and are hesitant to apply? We do not believe in the ‘perfect’ candidate and encourage you to apply if you feel you can bring value to our team.

Getting started

• We want you to feel like part of the team early on! Our onboarding process will integrate you into the company with informative sessions on our product, policies, processes, and team structure and goals.
• We’re excited for you to learn, grow, and contribute right away! We trust that you’ll bring experience and knowledge that will uplift and uplevel the team, but we don’t expect you to know everything on Day 1.

In your role, you'll...

Program Management

• Develop, manage and support comprehensive security trust and compliance programs, working closely with our legal team, security engineering team, and other stakeholder teams.
• Define and manage program goals and objectives under leadership’s guidance, and in alignment with company objectives.
• Create and maintain detailed program documentation, including policies, procedures, and guidelines.
• Implement and track key performance indicators (KPIs) to measure the effectiveness of security trust and compliance programs.
• Work independently to identify and execute program management activities, document plans and report updates and/or challenges.

Compliance & Trust Program Coordination and Support

• Lead, execute and manage Everlaw’s security and privacy training awareness programs.
• Identify and manage security risks and vulnerabilities, and collaborate with the Security Engineering and Corporate IT team to track remediation efforts.
• Assist the GRC team in performing security risk assessments and developing mitigation strategies.
• Lead Everlaw’s annual cybersecurity insurance renewal process in collaboration with Finance, SecEng, IT, and other teams.
• Lead Everlaw’s annual security and operational policies and procedures update initiative in collaboration with Finance, SecEng, IT, and other teams.
• Support Sr. Compliance Program Managers and Trust Program Manager to help drive program maturity.
• Coordinate preparation of  metrics, status updates, and provide timely updates to the SMT (Security Management Team), SLT (Security Leadership Team), Sales leadership, and other management groups.
• Develop and deliver security trust reports, metrics and dashboards for management.
• Perform annual vendor security and privacy risk assessments,
• Support Trust Program Manager to develop customer facing materials and understand customer needs.
• During the busy season (quarter end, year end) time frame, assist with customer RFI work.
• Support compliance and customer security audits and assessments, providing necessary documentation and support.
• Assist the GRC team with other ad hoc and as-required tasks.

About you

• You have a Bachelor’s degree in Information Security, Computer Science, Risk Management, or a related field.
• You have 2- 3 years of experience in information security, compliance, or risk management.
• You have 1-2 years of experience managing security and compliance programs. 
• You have strong data analytics skills 
• You are authorized to work in the United States. Please note that at this time, Everlaw is not sponsoring F-1 visas, including OPT, for this role.