Overview

Company Description

SPANX isn’t your average company. We revolutionized an industry by challenging the status quo and putting the customer first. You might know the story: our founder, Sara Blakely, who needed the right thing as a base layer to feel 100% in white pants, so she cut the legs off a pair of tights and Spanx was born. The spark of that origin is the fuel for our future. We grew up in shapewear. But we’ve graduated. For 25 years (yep, we're old enough to rent a car now), we've been experimenting, innovating, and occasionally banging our heads against the drawing board. And we will never stop obsessing about what women who are out there doing their thing deserve. Because we are those women. And we’re honored to create on behalf of us all.

We make elevated essentials with confidence built in. Essentials for layering underneath or wearing out loud, for “just-between-us” and “where'd you get that?” For everything you've got planned (and don't). Because what you put on can change how you show up. And if its' not working for you, it's got no place in your closet. Or on your body. Creating items that’ll make you feel great is a matter of the heart—and the lab. In every Spanx product is technology we design and build to highlight, complement, and form your look, just the way you like it. SPANX design and technology help make sure what you see in the mirror reflects that feeling of feeling your best (you know the feeling?). We are a high-growth, innovative and ambitious company and we are embarking on an exciting trajectory of both digital and international expansion.

About The Role

We are seeking a dedicated and experienced IT Governance, Risk, and Compliance Manager to join our growing team. In this role, you will be instrumental in ensuring our organization's information security policies, procedures, and standards align with regulatory requirements and industry best practices. You will work closely with various departments to implement governance frameworks, conduct risk assessments, and ensure the effective management of information security risks.

The IT Security GRC Manager at Spanx supports in creating robust governance frameworks and compliance controls, with a focus on, mitigating risks and aligning security initiatives with business objectives. As a member of the information security team you will play an integral role in further achieving, maintaining, and surpassing the hyper-growth journey that is Spanx.

This role is based in our Atlanta headquarters, requires weekly in office work Tuesday-Thursday, and reports to the Sr. Director of IT Operations

Job Description

You’ll love it because you will…

Governance Framework Implementation: Develop and implement information security governance frameworks that align with organizational objectives and compliance requirements.
Policy and Procedure Management: Draft, review, and update information security policies, procedures, and guidelines to ensure they remain relevant and effective.
Risk Management: Conduct regular information security risk assessments, identify vulnerabilities, and work with relevant stakeholders to implement mitigation strategies.
Compliance and Auditing: Ensure the organization's compliance with legal, regulatory, and contractual information security requirements. Prepare for and support internal and external audits.
Training and Awareness: Develop and deliver information security awareness training programs to employees and stakeholders to foster a security-conscious culture.
Incident Management: Assist in the development and maintenance of the information security incident response plan. Participate in incident response activities and post-incident analyses.
Stakeholder Engagement: Collaborate with IT, legal, and business units to ensure information security governance initiatives are understood and supported across the organization.
Continuous Improvement: Monitor emerging security threats, technologies, and governance practices for continuous improvement of the information security governance framework.
Act as a thought partner and independently identify opportunities for process improvement and effectively managing change
Solicit feedback and buy-in from internal and external partners

Qualifications

We Require...

5+ years of relevant with a strong focus on governance, risk management, and compliance (GRC)
Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field
Strong knowledge of Information Security and Privacy Frameworks such as ISO 27001/27002, NIST, and GDPR
Robust knowledge of risk assessment methodologies, information security audits, and compliance assessments
Proven success in implementing an information security program
A highly detail-oriented individual
Leveraging expertise to develop holistic business solutions
The means to Identify and handle ambiguity in complex situations
Independent prioritization and self-management responsibilities
Prior experience working cross-functionally
Ability to simplify complex ideas
Receptivity to feedback and buy-in from internal and external partners
A thought partner who can pinpoint opportunity for process improvement effectively managing change
A progressive thinker who offers experimental thought leadership

Additional Information

Spanx is proud of our continued Progressive People Practices…

Company Healthcare Plan: $0.00 out of pocket (Employee only benefit) Fertility testing and treatment are included in Spanx’s medical plans, even without the diagnosis of infertility.
Parental Leave Policy: Primary caregiver receives 16 weeks AND will have the option to work a half-time schedule (20 hours per week) for up to four additional weeks with full-time (40 hours per week) pay.
Mental Health Days: 10 days
401K: Matched up to 4% with immediate vesting.
PTO & Company Holidays: PLUS two full weeks of companywide closures (one in the Spring; one between Christmas and NYE)
Flex Friday: Year-round half day Fridays!

All your information will be kept confidential according to EEO guidelines.

Spanx jobs

Manager, IT Security GRC