About the RoleWonder is looking for a GRC specialist with a deep understanding of security risk management and the evolving threat landscape. In this role you will Develop and execute internal security risk assessments, track security maturity metrics and KPIs, and conduct control testing for IT systems supporting financial reporting. This role is key to supporting our audit readiness and compliance initiatives.
What You Bring to the Table - 3-5 years of experience with frameworks such as ISO 27001, SOC 2, NIST, CIS Controls, HIPAA, IT audit and SOX compliance
- Hands-on experience with SOX compliance, ITGCs, and the full audit lifecycle - scoping through remediation.
- Experience planning and executing information security risk assessments and security control testing
- Experience coordinating with internal or external auditors, including evidence gathering and walkthroughs.
- Strong written and verbal communication skills; able to explain technical controls to nontechnical audiences.
- High attention to detail and strong organizational skills with the ability to manage multiple workstreams simultaneously.
- CISA, CRISC, CISSP, or equivalent certification highly preferred
New York / New Jersey Base Salary: $176,000-$183,500
Wonder uses geographic-specific salary structures, which means the salary offered may vary depending on where the job is located. The final salary offer will take into account various factors, such as the candidate's skills, education, training, credentials, and experience.
BenefitsThe benefits applicable to this role include a competitive compensation package with equity and a 401(k). We also offer a choice of medical, dental, and vision plans, company paid short and long term disability coverage, paid time off including flexible time off for exempt employees, paid vacation for non-exempt employees, and paid sick leave in compliance with applicable law in addition to paid parental leave, discounted meals and exclusive perks across the Wonder family of brands.
Eligibility, effective dates, and available plan options vary by employment classification and location. To learn more about benefits for this role, visit our Careers page here.
We look forward to hearing from you! We'll contact you via email or text to schedule interviews and share information about your candidacy.
