Risk & Controls Manager

FloQast is looking for a Risk & Controls Manager to join our growing InfoSec & Compliance department. This role serves as a risk and controls advisor, ensuring adherence to key compliance frameworks across the organization, and evaluating business initiatives from a risk and controls perspective to help ensure that FloQast's operations, products, and services remain aligned with regulatory, contractual, and internal requirements. This role will own several core risk domains, including privacy, third-party risk management, and policy management, and will also contribute to broader risk program initiatives, including issue management and process automation. We are looking for a well-rounded GRC professional who can operate across multiple risk and compliance domains, with the scope of this role expected to evolve as the needs of the department grow. The InfoSec & Compliance department at FloQast reports directly to the General Counsel and is responsible for ensuring FloQast manages risk and maintains compliance with an array of frameworks covering security, privacy, AI, and financial reporting. We are a team of in-house subject matter experts who advise, direct, train, and monitor the organization, resulting in daily interactions with all departments on a variety of unique and interesting business initiatives. This role has a requirement of working in office 3 days per week, which may be subject to change based on team and business needs, as determined by the department leader.