.If you're seeking a career where innovation meets impact, you've come to the right place. As a global leader, Sovos is transforming tax compliance from a business requirement to a force for growth while revolutionizing how businesses navigate the ever-changing regulatory landscape.At Sovos, we're dedicated to more than just solving compliance challenges – we're committed to making a positive and lasting difference in everything we do. Our teams operate on the modern edge of digital technology, working not only to solve complex business challenges but also to enrich our personal, professional, and local communities.Our purpose-built systems provide the tools you need to thrive in a world where governments demand increased visibility, faster reporting and greater control over business processes. Excited about the possibilities? So are we!Don't worry if you don't check all the boxes – apply anyway! We're focused on hiring the right people, not just the "right" resume. It's not about what you've done elsewhere; it's all about what you're capable of doing here.The Work You'll Do:The GRC Program Specialist will work as part of the Sovos Information Security Team and assist in the identification and remediation of regulatory, business process, and information security risks. This position works collaboratively within Sovos Information Security team to identify regulatory obligations, client requirements, and best practices and perform testing and evaluation of the effectiveness of implemented controls designed to help ensure Sovos' ongoing compliance and security.More specifically you will:Evaluate security policy, processes, and procedures for completeness.Conduct audits and compliance reviews against existing security standards.Identify vulnerabilities or weaknesses in systems.Examine employee compliance with security controls and deficiencies.Interpret government, industry, and contract security requirements into actionable controls.Act as a liaison between client security teams and auditors for the purpose of defining requirements and security controls to be implemented at Sovos.Perform validation and effectiveness testing of implemented controls both within Sovos and at Sovos third parties.Prioritize remediation of issues and findings by recording corrective and preventative action plans.Respond to client security questionnaires.Assist with risk identification and management including but not limited to: business impact analysis, disaster recovery planning, business continuity, data retention, and risk management.Participate as a member of the Information Security team in developing and maintaining organization's security strategies.Identify, create, and maintain security-related documentation.Maintain ongoing knowledge of regulations and guidelines, information security trends, techniques, and technologies.Maintain and ensure confidentiality of client and employee information
