Information Security Compliance Manager

Welcome to Planet. We believe in using space to help life on Earth.

Planet designs, builds, and operates the largest constellation of imaging satellites in history. This constellation delivers an unprecedented dataset of empirical information via a revolutionary cloud-based platform to authoritative figures in commercial, environmental, and humanitarian sectors. We are both a space company and data company all rolled into one.

Customers and users across the globe use Planet's data to develop new technologies, drive revenue, power research, and solve our world’s toughest obstacles.

As we control every component of hardware design, manufacturing, data processing, and software engineering, our office is a truly inspiring mix of experts from a variety of domains.

We have a people-centric approach toward culture and community and we strive to iterate in a way that puts our team members first and prepares our company for growth. Join Planet and be a part of our mission to change the way people see the world.

Planet is a global company with employees working remotely world wide and joining us from offices in San Francisco, Washington DC, Germany, and The Netherlands.

About the Role: 

Planet is seeking an experienced Information Security Compliance Manager to join our dynamic Security  team. In this critical role, you will be responsible for managing the governance, risk, and compliance for various compliance frameworks, including ISO 27001, UK Cyber Essentials, SOX, NIST 800-171 standards. As an Information Security Compliance Manager, you will play a pivotal role in ensuring the security and compliance of our information systems and data, providing expert guidance, and driving continuous improvement in our security posture across corporate security and the enterprise. 

Impact You’ll Own:

• Develop and maintain information security policies, procedures, and guidelines that align with ISO 27001, SOX, NIST 800-171, and UK cyber essentials  requirements
• Lead Planets Information Security Management System (ISMS) in accordance with ISO 27001 standards
• Oversee the Information Security compliance efforts for Sarbanes-Oxley Act (SOX) requirements related to information security controls and reporting
• Collaborate with cross-functional teams to establish and enforce information security policies, procedures, and standards
• Conduct risk assessments, gap analyses, and control assessments to identify and mitigate security risks
• Develop and implement a robust vendor and third-party risk management program to assess and monitor the security posture of external partners
• Conduct due diligence assessments of third-party vendors to ensure they meet security and compliance requirements
• Collaborate with the incident response team to ensure that GRC activities are aligned with incident response procedures and that potential risks are adequately addressed
• Participate in post-incident reviews to identify weaknesses in the GRC program and recommend improvements to prevent future incidents
• Collaborate with the training and awareness team to develop and deliver GRC-related training programs for employees to ensure they understand their roles in compliance and risk management
• Building and maturing Planets security compliance across corporate, product, and manufacturing
• Fostering greater consistency of security compliance across the company
• Authoring, maintaining, and maturing policies, procedures, and standard documents
• Building and maintaining Planets Corporate Security function that supports and enables internal and external customers
• Building upon existing once a year certifications and audits to continuous compliance

What You Bring:

• Excellent understanding of information security principles, practices, and technologies
• Excellent knowledge of compliance frameworks, regulations, and standards
• Exceptional communication and interpersonal skills with the ability to collaborate effectively with cross-functional teams
• Excellent analytical and problem-solving skills
• Detail-oriented and able to manage multiple projects simultaneously
• Experience with risk assessment methodologies and tools
• Passion for identifying opportunities to improve policies, processes, and procedures, and socializing ideas with colleagues toward fostering common cause
• Passion for improving the status quo and making teams work better together
• 5-7 years of Governance, Risk, and Compliance  experience

What Makes You Stand Out:

• Experience leading and maturing compliance initiatives while enabling teams across the company to scale and mature
• Experience building and fosterin