anecdotes is a market leading GRC automation platform, allowing organizations with advanced and complex compliance programs to continuously monitor their control environments and improve their security and compliance posture over time. anecdotes is a B-round startup founded in June 2020 with presence across Israel, North America, including offices in NYC.

Position Overview

This position represents a unique opportunity within the GRC ecosystem. On the one hand, the professional requirements are those of an experienced GRC professional. On the other, the day-to-day responsibilities do not include running a GRC program, but rather include working closely with a wide variety of customers, as well as internal teams within anecdotes. This position involves leveraging modern technology in order to solve complex GRC challenges. The position offers fantastic exposure to broad GRC program implementation methodologies, as well as product development.

What You'll Do:

• Onboarding new customers and facilitating the “translation” of their existing processes into product based processes
• Working with existing customer base to assist CSMs in retention and upsell potential
• Demonstration of product capabilities to existing customers
  • Existing capabilities for potential upsells
  • New feature roll-outs to foster adoption
• Mapping of customer custom frameworks against a standard GRC requirement listing
• Functioning as an additional in-house SME for product teams
  

Who You Are:

• Hands-on familiarity with modern tech-stacks commonly seen in cloud-native organizations (CSPs/Security tooling/MDMs/SCM)
• Deep understanding of GRC frameworks, their requirements and implementation methodologies (ISO/IEC 27001, SOC2 Type 2, PCI-DSS, NIST CSF, FedRAMP etc.)
• Experience in building risk assessment processes from the ground up, and a grasp of different risk management methodologies
• Out-of-the-box thinker who can find product based solutions to customer challenges
• Eager to stay ahead of the curve with regards to advancement in both GRC related standardization/regulation and technology
• Well suited to a fast-paced, agile environment