Senior Security GRC Manager

3 weeks ago

Stockholm, Stockholm, Sweden TN Sweden Full time

Social network you want to login/join with:

Senior Security GRC Manager - SOC 2 Compliance, Stockholm

Client: Spotify

Location: Stockholm, Sweden

Job Category: Other

EU work permit required: Yes

Job Reference:

fa1d4d2522a5

Job Views:

6

Posted:

15.03.2025

Job Description:

Spotify is seeking a Senior Security Governance, Risk, and Compliance (GRC) Manager to join the Security Studio who will work closely with our engineering teams and audit functions. You'll be focused on handling the execution of tasks for the Security GRC Program within Spotify, primarily in relation to driving SOC 2 compliance, but also to other compliance and information security frameworks. You will work on ensuring tasks deliver high-quality value and are completed in a timely fashion. Additionally, you will play an integral part in recommending process improvements and in helping to implement these updates. This role will require a deep understanding of SOC 2 compliance, information security practices, as well as experience in working with technology teams.

What You'll Do

  1. Lead the SOC 2 compliance program and large-scale SOC 2 projects, identify dependencies, define success metrics and achievements, and ensure timely delivery.
  2. Design, implement, monitor and maintain SOC 2 controls, while collaborating and building relationships with internal and external business partners.
  3. Lead and handle all stages of SOC 2 audits, ensuring successful completion.
  4. Resolve appropriate scope of SOC 2 audits, encompassing new and existing service offerings, their supporting infrastructure, and associated processes.
  5. Lead and respond to customer security questionnaires while collaborating with internal teams, and drive questionnaire response automation.
  6. Identify, assess, and advise on information security risks, processes and controls to a variety of business partners.

Who You Are

  1. You have 5+ years of experience with SOC 2 compliance, including leading a SOC 2 compliance program, controls design, and implementation. Experience in the technology industry is preferred.
  2. You have 5+ years of experience with security frameworks, SOC 2, ISO27001, NIST CSF, PCI-DSS, etc., security controls design and implementation, and security best practices.
  3. Prior IT Audit experience in areas of SOC 2, ITGC, SOX are preferred.
  4. CISA, CISM, CISSP or other related certifications are preferred but not required.
  5. You have experience with privacy frameworks, such as GDPR or CCPA.
  6. You are a strong collaborator, with experience working on teams composed of both technical and non-technical members.
  7. You have a demonstrated ability to lead large projects, problem-solve, multitask, and have excellent organizational skills.
  8. You have excellent written and verbal communication skills, with experience presenting to key stakeholders and partnering with internal collaborators and external auditors.
  9. You thrive in a data-driven, fast-paced and innovative environment.

Where You'll Be

For this role you will be in New York.

#J-18808-Ljbffr

  • Senior Cyber Security GRC

    2 weeks ago

    Stockholm, Stockholm, Sweden TN Sweden Full time

    Social network you want to login/join with:Senior Cyber Security GRC (Governance, Risk and Compliance) Specialists, StockholmClient:H&M GroupLocation:Stockholm, SwedenJob Category:OtherEU work permit required:YesJob Reference:3086abea1c4bJob Views:3Posted:02.04.2025Expiry Date:17.05.2025Job Description:Job DescriptionThe Cyber Security GRC (Governance, Risk...

  • GRC Professional

    2 weeks ago

    Stockholm, Stockholm, Sweden Quartr Full time

    Quartr is now looking for a GRC professional to develop and optimize our security and compliance strategies.About the JobThis is a new cross-function role involving close collaboration with both technical and non-technical teams in Stockholm.You'll play a key role in establishing policies, conducting risk assessments, and ensuring adherence to security best...

  • Chief Security Governance Officer

    6 days ago

    Stockholm, Stockholm, Sweden TN Sweden Full time

    Job OverviewTN Sweden is seeking a seasoned professional to fill the role of Senior Security GRC Manager.

  • GRC Lead

    2 weeks ago

    Stockholm, Stockholm, Sweden Quartr Full time

    Job OverviewQuartr is seeking a highly skilled GRC Lead to join our security team. As a key member of our team, you will be responsible for developing and implementing security and compliance strategies that align with industry standards and regulations.You will work closely with engineering, product, and leadership teams to establish policies, conduct risk...

  • GRC Strategist

    2 weeks ago

    Stockholm, Stockholm, Sweden Quartr AB Full time

    We're seeking a highly skilled Risk and Compliance expert to drive our security initiatives forward. As an Infosec specialist, you'll play a critical role in ensuring the integrity of our systems and data while maintaining compliance with industry standards.About the CompanyQuartr AB is a pioneering company in qualitative market research, providing...

  • Data Security Manager

    1 week ago

    Stockholm, Stockholm, Sweden Qred Full time

    About QredWe're a cutting-edge fintech company revolutionizing financial services for small businesses in Northern Europe. Our innovative solutions empower entrepreneurs to access the capital they need to grow and thrive.The RoleWe're seeking a skilled Cybersecurity Specialist to join our team, ensuring compliance with regulations and maintaining the highest...

  • GRC Solutions Specialist

    3 days ago

    Stockholm, Stockholm, Sweden Workiva Full time

    About the TeamOur team at Workiva is dedicated to delivering innovative solutions that meet our customers' needs. As a GRC Solutions Specialist, you will play a key role in developing solutions within current Workiva products.Working closely with internal teams from Sales, Product Development, and Customer Success, you will consult with customers to...

  • GRC Solution Developer

    1 day ago

    Stockholm, Stockholm, Sweden Workiva Inc. Full time

    Are you a skilled solution developer looking to make a meaningful impact in the field of Governance, Risk, and Compliance (GRC)? As a GRC Solution Developer at Workiva Inc., you will have the opportunity to work on challenging projects and collaborate with talented professionals.About the RoleThis role involves working closely with customers and internal...

  • Senior IT-Säkerhetsexpert med fokus på GRC

    2 weeks ago

    Stockholm, Stockholm, Sweden IP-Solutions Full time

    Vill du ligga i framkant av teknik och säkerhet? Hos oss har du möjligheten att arbeta med innovativa lösningar inom informationssäkerhet där teknik och strategi möts för att skapa verklig effekt. Som Senior IT-Säkerhetsexpert med fokus på GRC bidrar du till att utveckla och implementera strategier och processer för att säkerställa hög säkerhet...

  • Senior Compliance Manager

    6 days ago

    Stockholm, Stockholm, Sweden TN Sweden Full time

    Key ResponsibilitiesThis position involves leading the execution of tasks for the Security GRC Program within TN Sweden. The primary focus will be on driving SOC 2 compliance, as well as other compliance and information security frameworks.

  • Information Security

    2 weeks ago

    Stockholm, Stockholm, Sweden Quartr Full time

    Are you passionate about security, risk, and compliance? Do you want to be responsible for securing our products by ensuring compliance with industry standards? Quartr is now looking for a hands-on Infosec (GRC) specialist to help us build a strong security foundation for compliance to ensure that we achieve and maintain the crucial certification SOC2.About...

  • Information Security

    4 weeks ago

    Stockholm, Stockholm, Sweden Quartr AB Full time

    Are you passionate about security, risk, and compliance? Do you want to be responsible for securing our products by ensuring compliance with industry standards? Quartr is now looking for a hands-on Infosec (GRC) specialist to help us build a strong security foundation for compliance to ensure that we achieve and maintain the crucial certification SOC2.About...

  • Technical Information Security Officer

    4 weeks ago

    Stockholm, Stockholm, Sweden Qred AB Full time

    We're not just any bank – we're Qred, a cutting-edge, tech-driven force on a mission to revolutionize financing for small businesses in 7 markets across northern Europe. With our innovative solutions, we're making it easier for entrepreneurs to access the capital they need to grow and thrive. As we scale, we are now looking for a Technical Information...

  • Information Security

    4 weeks ago

    Stockholm, Stockholm, Sweden Quartr Full time

    Are you passionate about security, risk, and compliance? Do you want to play an active role in securing financial technology by ensuring compliance with industry standards? Quartr is now looking for a hands-on Infosec (GRC) specialist to help us build a strong security foundation for compliance to ensure that we achieve and maintain the crucial certification...

  • Senior Informationssäkerhets- och GRC-specialist

    4 weeks ago

    Stockholm, Stockholm, Sweden IP-Solutions Full time

    Vill du ligga i framkant av teknik och säkerhet?Hos oss får du möjligheten att arbeta med banbrytande lösningar inom informationssäkerhet, där teknik och strategi möts för att skapa verklig effekt.Vi är en konsultfirma där innovation, expertis och laganda går hand i hand – och vi söker nu dig som vill vara med och sätta standarden för...

  • Risk Management Professional

    1 week ago

    Stockholm, Stockholm, Sweden Qred Full time

    Our MissionWe're Qred, a fintech company transforming the financial landscape for entrepreneurs in Northern Europe. With our innovative solutions, we make it easier for them to access the capital they need to grow and thrive.The OpportunityWe're seeking a skilled Risk Management Professional to join our team, responsible for ensuring our compliance with...

  • GRC, Cybersecurity Consultant

    3 weeks ago

    Stockholm, Stockholm, Sweden HiQ Sweden Full time

    Nu söker vi fler kollegor till vårt växande Cybersecurity-team på HiQ. Här finns möjligheten att tillsammans med ett starkt team hjälpa intressanta företag, och i förlängningen privatpersoner, att leva i en säkrare digital framtid. På HiQ arbetar vi i framkant med cybersäkerhet, under en nationell satsning inom organisationen bygger vi upp ett...

  • Enterprise IT Security Specialist

    2 weeks ago

    Stockholm, Stockholm, Sweden Kindred People AB Full time

    In this critical role, you will work closely with cross-functional teams to design, develop, and deploy advanced identity management solutions that integrate seamlessly with our existing Microsoft ecosystem. Your extensive experience in identity and access management will enable you to effectively collaborate with stakeholders and drive strategic...

  • Senior IT Security Engineer

    4 days ago

    Stockholm, Stockholm, Sweden Odevo AB Full time

    Company OverviewOdevo AB is a pioneering company in the property management industry, committed to revolutionizing software solutions. Our cloud-based platform is unique, and we're dedicated to challenging the status quo.We're seeking a seasoned and passionate senior cyber security engineer to join our growing IT Operations Information Security team. In this...

  • Senior Information Security Lead

    2 weeks ago

    Stockholm, Stockholm, Sweden Vipas AB Full time

    Senior Security Manager - Nordic RegionVipas AB invites applications for a Senior Security Manager position, focusing on developing and executing security strategies across the Nordic region. This high-profile role demands a leader with extensive security expertise, excellent communication skills, and a proven track record of driving change.Key...