Principal Security Governance & Audit Specialist
The Principal Security Governance & Audit Specialist at ID.me is a pivotal role within the company's security and compliance team. ID.me is a leading digital identity verification provider, offering secure online identity solutions to individuals and organizations. The company serves over 175 million users across various sectors, including federal and state agencies, healthcare organizations, and consumer brands.
In this role, the specialist will be responsible for developing and managing the Common Control Framework (CCF), ensuring that security controls are effectively implemented and maintained across all certifications held by ID.me. This includes creating a unified set of controls mapped to standards such as SOC 2, ISO 27001, PCI DSS, HIPAA, and FedRAMP. The specialist will also oversee the policy library, manage exception processes, and provide strategic reporting to keep the CCF current as standards evolve.
The role requires close collaboration with the Audit & Assurance team to ensure that governance controls are auditable and that audit findings are integrated into the CCF. The specialist will work with Compliance Engineering, Legal, Privacy, Sales, and external auditors to ensure that controls are tested, evidenced, and aligned with regulatory requirements. Additionally, the specialist will manage the exception process, perform gap assessments for new frameworks, and support the AI governance program aligned to ISO/IEC 42001.
Candidates should have a strong background in security governance, audit processes, and compliance frameworks. Experience with standards such as SOC 2, ISO 27001, PCI DSS, HIPAA, and FedRAMP is essential. The role demands excellent communication skills for effective collaboration across departments and with external auditors. A deep understanding of security controls, policy development, and exception management is crucial.
ID.me offers a comprehensive benefits package, including health insurance, retirement plans, and professional development opportunities. The company fosters a collaborative and innovative work environment, encouraging employees to contribute to the development of secure digital identity solutions. As a rapidly growing company, ID.me provides opportunities for career advancement and involvement in impactful projects.
Joining ID.me means becoming part of a mission-driven organization dedicated to providing secure and equitable access to online services. The company values diversity and inclusion, striving to create a workplace where all employees can thrive. With a commitment to innovation and excellence, ID.me offers a dynamic environment for professionals seeking to make a meaningful impact in the field of digital identity verification.