IT Risk & Compliance Specialist, Information Security

IDEXX’s Information Security Team is dedicated to safeguarding the organization against various Cyber risks and ensuring compliance with industry standards and regulations. Key responsibilities of this team include the development of governance policies, Cyber risk management, third-party risk, overseeing SOX compliance, managing SOC2 compliance, ensuring privacy compliance across global operations, and conducting cyber risk training and assessments.

Led by an experienced manager, the group consists of seven (7) seasoned professionals with extensive expertise in risk management, compliance, and security. Despite its size, the team adeptly manages the diverse and complex aspects of IT risk and compliance within IDEXX. 

As an IT Risk & Compliance Specialist, you will be leading positive changes ensuring that the organization’s operations are conducted in a manner consistent with ethical business practices, organization policies, and legal requirements, while adhering to SOC2 compliance expectations.  

In This Role… 

• You will support the facilitation of external SOC2 audits, coordinating with both the external auditor and internal teams. 

• You will monitor management against internal standards within the program, acting as the first line of defense before internal or external audits. 

• You will conduct readiness assessments and provide recommendations, coaching, and consulting for control improvements. 

• You will communicate tactical and strategic updates to various business teams and leaders.  

• You will think strategically and apply learnings from past projects to future ones, in addition to innovating the program to reflect industry trends or expectations.  

• As others on the team wear 3-4 “hats”, you will also juggle multiple roles within the team, including risk identification, quantification, and consulting.

What You Will Need to Succeed… 

• 3 to 5 years of experience within IT Audit with experience with GRC (Governance, Risk & Compliance), Controls, Risk Assessment, or Internal Audit. 

• At least one year of experience performing readiness assessments for SOC2 compliance. 

• You have one of these certifications: CISA, CISM, CISSP, CRISC, CRMA or certification eligible 

• You know how to develop and implement controls and processes through frameworks like NIST, COSO, COBIT, etc. 

• You think strategically and focus on achieving goals together with your team. 

• You communicate successfully in person and in writing and develop strong relationships with all levels in the organization. 

• You can handle difficult issues in a professional, assertive, and proactive manner. 

What you can expect from us:
• Base annual salary target: $90000 - $100000 (yes, we do have flexibility if needed)
• Opportunity for annual cash bonus
• Health / Dental / Vision Benefits Day-One
• 5% matching 401k
• Additional benefits including but not limited to financial support, pet insurance, mental health resources, volunteer paid days off, employee stock program, foundation donation matching, and much more!

Why IDEXX?

We’re proud of the work we do, because our work matters. An innovation leader in every industry we serve, we follow our Purpose and Guiding Principles to help pet owners worldwide keep their companion animals healthy and happy, to ensure safe drinking water for billions, and to help farmers protect livestock and poultry from diseases. We have customers in over 175 countries and a global workforce of over 10,000 talented people.

So, what does that mean for you? We enrich the livelihoods of our employees with a positive and respectful work culture that embraces challenges and encourages learning and discovery.   At IDEXX, you will be supported by competitive compensation, incentives, and benefits while enjoying purposeful work that drives improvement. 

Let’s pursue what matters together. 

IDEXX values a diverse workforce and workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, foreign-born residents, and veterans to apply.

IDEXX is an equal opportunity employer. Applicants will not be discriminated against because of race, color, creed, sex, sexual orientation, gender identity or expression, age, religion, national origin, citizenship status, disability, ancestry, marital status, veteran status, medical condition, or any protected category prohibited by local, state, or federal laws.

#LI-EV1