{"22083953":{"jobPath":"/jobs/22083953/chief-global-compliance-officer","source":"naylor","job":"22083953","jobTitle":"Chief Global Compliance Officer"},"22037811":{"jobPath":"/jobs/22037811/compliance-network-administrator","source":"naylor","job":"22037811","jobTitle":"Compliance Network Administrator"},"22019624":{"jobPath":"/jobs/22019624/librarian-assistant-associate-professor-university-records-manager","source":"naylor","job":"22019624","jobTitle":"Librarian Assistant/Associate Professor- University Records Manager"},"22088366":{"jobPath":"/jobs/22088366/senior-accounting-compliance-specialist","source":"naylor","job":"22088366","jobTitle":"Senior Accounting & Compliance Specialist"},"22087574":{"jobPath":"/jobs/22087574/reliability-compliance-manager","source":"naylor","job":"22087574","jobTitle":"Reliability Compliance Manager"},"22083074":{"jobPath":"/jobs/22083074/director-ethics-compliance-navista-managed-services-organization","source":"naylor","job":"22083074","jobTitle":"Director, Ethics & Compliance (Navista) - Managed Services Organization"},"22080246":{"jobPath":"/jobs/22080246/manager-ethics-and-compliance","source":"naylor","job":"22080246","jobTitle":"Manager, Ethics and Compliance"},"22089480":{"jobPath":"/jobs/22089480/effort-reporting-and-compliance-consultant","source":"naylor","job":"22089480","jobTitle":"Effort Reporting and Compliance Consultant"},"22022458":{"jobPath":"/jobs/22022458/manager-information-governance-board-and-record-systems","source":"naylor","job":"22022458","jobTitle":"MANAGER, INFORMATION GOVERNANCE (BOARD AND RECORD SYSTEMS)"},"22094325":{"jobPath":"/jobs/22094325/research-compliance-specialist-senior","source":"naylor","job":"22094325","jobTitle":"Research Compliance Specialist Senior"},"22093255":{"jobPath":"/jobs/22093255/assistant-director-of-athletic-for-compliance","source":"naylor","job":"22093255","jobTitle":"Assistant Director of Athletic for Compliance"},"22059017":{"jobPath":"/jobs/22059017/director-of-governance-risk-and-compliance","source":"naylor","job":"22059017","jobTitle":"Director of Governance, Risk and Compliance"},"22090636":{"jobPath":"/jobs/22090636/revenue-cycle-manager-and-privacy-officer","source":"naylor","job":"22090636","jobTitle":"Revenue Cycle Manager and Privacy Officer"},"22081884":{"jobPath":"/jobs/22081884/information-management-summer-student","source":"naylor","job":"22081884","jobTitle":"Information Management Summer Student"},"22087543":{"jobPath":"/jobs/22087543/senior-manager-environmental-diligence-compliance","source":"naylor","job":"22087543","jobTitle":"Senior Manager, Environmental Diligence & Compliance"},"22083066":{"jobPath":"/jobs/22083066/senior-specialist-quality-compliance","source":"naylor","job":"22083066","jobTitle":"Senior Specialist, Quality Compliance"},"22080176":{"jobPath":"/jobs/22080176/manager-transaction-review-and-compliance","source":"naylor","job":"22080176","jobTitle":"Manager Transaction Review and Compliance"},"22095265":{"jobPath":"/jobs/22095265/compliance-manager","source":"naylor","job":"22095265","jobTitle":"Compliance Manager"},"22095484":{"jobPath":"/jobs/22095484/sr-regulatory-and-compliance-officer","source":"naylor","job":"22095484","jobTitle":"Sr Regulatory and Compliance Officer"},"22087070":{"jobPath":"/jobs/22087070/affordable-housing-compliance-specialist-lihtc","source":"naylor","job":"22087070","jobTitle":"Affordable Housing Compliance Specialist (LIHTC)"},"22081802":{"jobPath":"/jobs/22081802/sr-director-sox-it-compliance","source":"naylor","job":"22081802","jobTitle":"Sr. Director, SOX IT Compliance"},"22093160":{"jobPath":"/jobs/22093160/vice-chancellor-for-legal-affairs-risk-and-compliance-and-general-counsel","source":"naylor","job":"22093160","jobTitle":"Vice Chancellor for Legal Affairs, Risk and Compliance and General Counsel"},"22093306":{"jobPath":"/jobs/22093306/director-of-compliance","source":"naylor","job":"22093306","jobTitle":"Director of Compliance"},"22096459":{"jobPath":"/jobs/22096459/director-of-research-integrity-and-compliance-and-research-integrity-officer","source":"naylor","job":"22096459","jobTitle":"Director of Research Integrity and Compliance and Research Integrity Officer"},"22093566":{"jobPath":"/jobs/22093566/principal-compliance-investigator","source":"naylor","job":"22093566","jobTitle":"Principal Compliance Investigator"}}
Laserfiche is hiring a Director of Governance, Risk & Compliance (GRC) to lead enterprise-wide governance, risk and compliance programs at Laserfiche. This hands-on role will be responsible for ensuring the organization operates in alignment with regulatory compliance requirements, industry standards and internal policies, while enabling business agility and operational excellence. The ideal candidate has deep experience in cyber and physical security, IT risk management, business resiliency, AWS services and data privacy—along with hands-on involvement with implementing controls, standards and frameworks such as ISO 27001, NIST 800-53, FedRAMP/GovRAMP and SOC 2 controls (AICPA Trust Services Criteria).
Location:
Hybrid: Three days per week (Tuesday, Wednesday and Thursday) in-office in Long Beach, CA
Remote work from home on Mondays and Fridays
Periodic travel including travel on weekends as needed for international site audits
About the Role - Key Responsibilities:
Governance and Risk Management
Develop and lead the enterprise Governance, Risk and Compliance (GRC) program to ensure effective alignment between business objectives, risk management and regulatory compliance requirements.
Provide hands-on leadership for AI and security governance, cybersecurity controls (SOC 2, ISO 27001, GovRAMP/FedRAMP, CMMC, NIST 800-53, CJIS, PCI), data privacy and regulatory compliance (EU AI Act, GDPR, CCPA, PIPEDA, HIPAA).
Partner with technology and business leaders to assess AI, technology and security risks, and ensure appropriate controls are designed, implemented, tested and operating effectively.
Collaborate with ITS, Development and other departments to lead IT, security and business resiliency policy creation, maintenance, communication, training and enforcement across the enterprise.
Safeguard Laserfiche information in accordance with Laserfiche Information Security Policies.
Compliance & Controls Oversight and Monitoring
Own and lead compliance and certification programs (SOC 2, ISO 27001, ISO 42001, ISO 9001, GovRAMP/FedRAMP, CMMC) that are aligned to industry standards and regulatory frameworks.
Manage and conduct internal audits, risk assessments, third-party and vendor risk management assessments.
Coordinate control self-assessments, remediation and risk treatment plans.
Manage and update control matrices and risk registers; ensure controls are mapped to relevant frameworks and operating effectively.
Manage continuous controls monitoring and risk reporting provided to external and internal stakeholders.
Data Privacy
Partner with Legal, ITS, Development, People and other organizations to operationalize privacy requirements.
Oversee and perform data mapping and data inventory activities, ensuring accurate organizational understanding of data flows, risks and controls.
Collaborate with Legal and other departments on performing DPIA/PIAs and other compliance initiatives.
Business Resiliency and Disaster Recovery (DR)
Lead the business continuity management program, including performing an annual business impact analysis (BIA), developing, testing and updating BCPs, and providing organizational training in collaboration with L&D.
Coordinate with ITS on DR planning and testing, and working with executive stakeholders on updating and testing crisis management plans (CMP).
Customer Sales Enablement and Product Development
Collaborate with Sales, ITS, Development and Legal on sales enablement initiatives including responding to RFPs and customer questionnaires on security controls, data privacy, AI, BCM, DR and CMP.
Serve as a subject matter expert on internal controls and security, and collaborate with Product Strategy, Development and ITS on product enhancements, features and security capabilities.
Monitor Laserfiche security controls and compliance with customer contractual requirements.
Bachelor’s degree in management information systems, IT audit, cybersecurity or related degree program is required
Minimum of 7+ years of experience in information security, IT risk management, compliance, or related GRC disciplines.
Certification is required in a relevant area (e.g., CISA, CRISC, CISM).
Demonstrated leadership experience building or scaling enterprise GRC programs.
Experience with industry regulations (e.g., HIPAA, GDPR, CCPA), GovRAMP/FedRAMP, NIST standards (NIST 800-53), ISO 27001 certifications, SOC 2 reporting and security assessments, and leading frameworks such as AICPA Trust Services Criteria.
Strong understanding of privacy regulations and experience with operational privacy work (data mapping and flow diagramming, DPIAs, data governance).
Strong technical skills in cybersecurity, controls and AWS security audits; Big Four experience a plus.
Excellent communication, presentation and negotiation skills, with the ability to influence internal and external stakeholders and write policies and controls documentation.
Exceptional organizational and program management skills with a keen attention to detail.
Ability to thrive in a fast-paced environment with competing priorities and deadlines.
Ability to manage complex, cross-functional projects with internal and external stakeholders.
