Job Description

• Pune

What You'll Do

Avalara’s Organizational Risk, Resilience, Compliance and Audit team (ORRCA) is responsible for managing various risk and compliance initiatives and is looking for someone to support a growing team to help build out the risk management function.

• Perform risk assessments against Avalara’s risk management framework and develop remediation plans.
• Responsible for the overall coordination, execution, and quality control of assigned risk and compliance controls.
• Ensure controls are appropriately performed by all stakeholders within defined SLAs.
• Work closely with system and process owners to ensure corrective action plans are in place to remediate gaps or deficiencies.
• Help develop Avalara’s common controls framework.
• Identify areas for automation and/or business process improvements.
• Assist in collecting and migrating control information into Avalara’s GRC platform.
• Work strategically and independently with internal and external groups on multiple simultaneous projects.
• Assist with the performance of risk and compliance activities as they arise.

What You'll Need to be Successful

• Bachelor’s degree in information technology, Computer Science, or equivalent experience
• 3+ years of work experience in IT Audit, IT Security, or IT Risk Management
• Experience working with ISO 27001, SOC 1, SOC 2, SOX, NIST etc.
• Basic understanding of business continuity, disaster recovery, vendor risk management, data privacy, security, risk and compliance subject areas
• Skilled in business risk analysis and making technical trade-offs between short versus long-term security and business goals
• Self-starter, self-motivated, pro-active, and able to handle concurrent activities
• Strong organizational and planning skills
• Excellent verbal and written communication skills