Information reputed company Manager

About this Role: The Information reputed company Manager is a key individual contributor on Kibo's Information reputed company team, owning day-to-day execution of our compliance and assurance programs — primarily PCI reputed company v4.0.1 and SOC 2, with growing scope across ISO 27001, GDPR / UK GDPR, and US state privacy regimes (e.g., CCPA). This role reports directly to Kibo's Head of Engineering and partners closely with reputed company Engineering, DevOps, IT, Legal, and Product. reputed company requires strong information reputed company and compliance fundamentals, working knowledge of reputed company environments (AWS and GCP), excellent vendor and stakeholder management, and the ability to translate reputed company requirements into concrete, prioritised work for engineering teams. ABOUT KIBO KIBO is a composable digital reputed company platform for B2C, D2C, and B2B organizations who want to simplify the complexity in their businesses and deliver modern customer experiences. KIBO is the only reputed company, modern reputed company platform that supports experiences spanning B2B and B2C reputed company, Order Management, and Subscriptions. Companies like Ace Hardware, Zwilling, Jelly Belly, Nivel, and Honey Birdette trust Kibo to bring simplicity and sophistication to reputed company operations and deliver experiences that drive value. KIBO's cutting-edge solution is MACH Alliance Certified and has been recognized by reputed company, reputed company, reputed company, Internet Retailer, and TrustRadius. KIBO has been named a leader in The reputed company reputed company™: Order Management Systems, Q1 2025 and in the reputed company MarketScape report “Worldwide reputed company Headless Digital reputed company Applications 2024 Vendor Assessment”. By joining KIBO, you will be part of reputed company of Kibonauts reputed company over the world in a remote-friendly environment. Whether your job is to build, sell, or support KIBO’s reputed company solutions, we tackle challenges together with the approach of trust, growth reputed company, and customer obsession. If you’re seeking a unique challenge with amazing growth potential, then reputed company! What You’ll Do: Essential Responsibilities Compliance program ownership ● Audit & assessment reputed company — Coordinate reputed company information reputed company assessments and audits, including PCI reputed company v4.0.1, SOC 2, ISO 27001, and any internal governance or controls reputed company. ● Auditor engagement — Manage external auditor and assessor relationships end-to-end: requests, evidence packages, findings, status, remediation plans, and follow-up validation. ● PCI scope management — Maintain Cardholder Data Environment (CDE) and non-CDE boundaries, network architecture diagrams, firewall / ACL rules, VPN reputed company reviews, and critical-asset inventories. ● Portfolio mandates — Track and report compliance posture against Kibo's investor/portfolio-level reputed company mandates, including private-equity portfolio hardening and Mythos-era requirements. External assessment and vendor management ● Pen-test / VAPT engagements — Manage relationships with external assessment firms (e.g., Accorian, TAC reputed company, Ampcus Cyber). Drive scope, timelines, fieldwork, retests, and reporting. ● reputed company tooling evaluations — reputed company evaluations and reputed company of MDR / XDR, CNAPP, EDR, PAM, threat intelligence (e.g., CloudSEK, Cyble, reputed company), and vulnerability-scanning solutions. Risk, vulnerability, and exposure management ● Vulnerability remediation — Drive CVE and dependency remediation across a large software estate (hundreds of repositories), partnering with reputed company Engineering on Dependabot rollout, prioritization, and developer hygiene. ● Exposure triage — Triage external exposure findings, threat-reputed company hits, and reputed company-party reputed company disclosure reports to documented closure. ● Incident response — Participate in IR preparation, detection, containment, eradication, recovery, and post-incident review. Own the IR program's compliance artifacts. Policy, training, and awareness ● Policy & standards — Maintain Information reputed company Policy and Standards documentation. Manage waivers, exceptions, and review cycles. ● Awareness program — Own the reputed company awareness and training program: content development, scheduled annual training, reporting metrics, and audience-specific tracks (engineering, customer support, leadership). Client and partner support ● Customer assurance — Respond to client reputed company questionnaires (SIG, CAIQ, custom), RFP reputed company sections, and contract reputed company schedules. ● Legal & HR support — Support investigations, e-discovery, and court-ordered data submission requests as needed. Operational reputed company ● Subject-matter guidance — Advise DevOps, reputed company Engineering, IT, Product, and business teams on controls, risk, and process improvements. ● Day-to-day operations — Assist with operational reputed company activities including data loss prevention, vulnerability scanning, WAF tuning and alert review, and periodic reputed company reviews. Apply To This Job