Security Governance, Risk & Response Lead

We are seeking a Security Governance, Risk & Response Lead to join our team in Alpharetta, GA. This full-time position requires you to work on-site five days a week and be a part of our dynamic Legal team that supports our growing global customer base.

As a proactive and detail-oriented Security Governance, Risk & Response Lead, reporting to the General Counsel, you will play a crucial role in supporting security governance, risk management, and compliance coordination across the organization. Your responsibilities will include driving incident response coordination, managing policy lifecycle, providing audit and certification support, and conducting legal risk assessments related to security obligations.

In this role, you will collaborate with Legal, Security, and Compliance teams to ensure operational excellence, regulatory alignment, and trusted business enablement. Your focus will be on connecting technical risk to business impact and enhancing enterprise resilience through robust governance practices.

Key Responsibilities

• Draft, maintain, and oversee security policies, standards, and SOPs to fulfill legal and compliance obligations.
• Keep track of regulatory changes and industry frameworks like ISO 27001, NIST, SOC 2, GDPR to ensure continuous alignment.
• Coordinate security risk assessments and gap analyses with Security teams, monitor remediation progress for legal and audit purposes.
• Collaborate with IT and Security to align cybersecurity practices with industry standards and enterprise risk appetite.
• Support Legals participation in third-party vendor reviews, interpreting security findings for contractual and regulatory impact.

Audit & Compliance Enablement

• Act as Legals coordinator for internal/external audits related to information security.
• Organize and manage evidence collection for controls and compliance documentation.
• Work across teams to ensure readiness for certifications such as SOC 2, ISO 27001.
• Assist in preparing risk reporting, audit summaries, and executive-level dashboards.

Incident Response Coordination

• Lead documentation and coordination of security incidents, ensuring timely escalation and internal communication.
• Enhance incident response workflows, templates, and playbooks.
• Conduct post-incident reviews and incorporate insights into governance frameworks.

Legal Risk & Contract Support

• Aid in contract negotiations by evaluating security risk and translating controls into legal terms.
• Review and draft information security-related clauses for contracts.
• Maintain security-specific negotiation playbooks and fallback language.

About You

With 8+ years of experience in information security governance, compliance, legal risk management, or cybersecurity risk coordination, you should also possess expertise in incident response and supporting audits/certifications. Familiarity with frameworks such as ISO 27001, NIST CSF, SOC 2, GDPR, HIPAA is required along with strong policy writing and documentation skills. Your ability to communicate technical security information to legal and executive audiences effectively, coupled with excellent organizational and multitasking skills, will set you up for success in this role.

You should be familiar with incident playbooks, vendor risk processes, and audit tracking, and have an understanding of security domains like access management and encryption. A strategic and operational mindset with attention to detail, collaborative nature, solutions-focused approach, resilience in a fast-paced environment, and dedication to building trust and enabling business through effective governance are essential qualities we are looking for.

To Be Ahead Of The Pack, You Might Have

• CISSP, CISA, or similar security/compliance certifications.
• Experience working in a SaaS or cloud-based technology company.
• Background in legal, regulatory, or compliance roles within enterprise settings.

Join us at Aptean, where our mission is to solve tomorrows unique challenges today with unrivaled, purpose-built software and superior customer experiences. With a global presence and a diverse employee base, we aim to harness our individual power to maximize the success of our customers, employees, and company.,