FloQast is looking for a Risk & Controls Manager to join our growing InfoSec & Compliance department. This role serves as a risk and controls advisor, ensuring adherence to key compliance frameworks across the organization, and evaluating business initiatives from a risk and controls perspective to help ensure that FloQast's operations, products, and services remain aligned with regulatory, contractual, and internal requirements. This role will own several core risk domains, including privacy, third-party risk management, and policy management, and will also contribute to broader risk program initiatives, including issue management and process automation. We are looking for a well-rounded GRC professional who can operate across multiple risk and compliance domains, with the scope of this role expected to evolve as the needs of the department grow.
The InfoSec & Compliance department at FloQast reports directly to the General Counsel and is responsible for ensuring FloQast manages risk and maintains compliance with an array of frameworks covering security, privacy, AI, and financial reporting. We are a team of in-house subject matter experts who advise, direct, train, and monitor the organization, resulting in daily interactions with all departments on a variety of unique and interesting business initiatives.
This role has a requirement of working in office 3 days per week, which may be subject to change based on team and business needs, as determined by the department leader. Please note that this requirement is subject to ongoing review and may be adjusted in the future.
*Visa sponsorship is NOT available at this time
What You'll Do
- Collaborate and drive cross-functional alignment with internal stakeholders to review, maintain, and align documentation, policies, and procedures with audit and regulatory expectations
- Conduct and document compliance impact assessments covering risk, privacy, and AI considerations to support organizational decision-making
- Provide strategic, risk-informed guidance in response to compliance-related inquiries from internal teams
- Support FloQast's security and compliance programs by ensuring adherence to applicable SOC and ISO standards
- Own execution of FloQast's established privacy program, including maintaining privacy documentation, supporting data subject requests, and ensuring ongoing compliance with applicable privacy laws
- Manage FloQast's sub-processor program, including maintaining notification workflows, coordinating updates to the sub-processor list, and responding to client inquiries related to sub-processor changes
- Support privacy-related product and vendor reviews, escalating regulatory considerations as needed
- Own third-party risk management processes and associated due diligence activities, including coordinating vendor reviews and supporting procurement needs
- Own policy management processes across the organization, including facilitating annual reviews, coordinating updates with policy owners, maintaining version history, and routing finalized policies for approval
- Support the identification, tracking, and remediation of compliance and policy-related issues, partnering with relevant stakeholders to drive resolution
- Identify opportunities for process improvement, including automation and AI, within the risk management and compliance function, and actively develop and implement AI-driven workflows to enhance program efficiency and scalability
- Any other tasks that may be assigned to help the company meet its goals
What You'll Bring
- Bachelor's degree
- 6+ years of experience in compliance, risk management, information security, privacy, or a related field, with SaaS industry experience preferred
- Strong general compliance expertise, including areas such as privacy, security, and IT general controls
- Experience applying and maintaining compliance with frameworks such as SOC and ISO standards
- Foundational knowledge of privacy regulations and frameworks such as GDPR, CCPA, and related international privacy laws
- Strong communication and interpersonal skills, with the ability to collaborate effectively across teams and functions
- Highly organized, detail-oriented, and proactive in identifying and addressing compliance risks
- Ability to operate autonomously and drive risk and compliance initiatives with limited oversight
- Flexible and adaptable in a high-growth, fast-paced environment
Nice to haves/Others
- Certifications such as CIA, CISA, CISSP, CISM, CIPP/E, CIPM, or similar
- Experience with cloud hosting environments such as AWS, Azure, or GCP
- Experience with emerging technologies, including AI-driven features and associated risk considerations
- Prior experience supporting international compliance initiatives or privacy regulatory readiness across multiple jurisdictions
Skills Required
- Bachelor's degree
- 6+ years of experience in compliance, risk management, information security, privacy, or a related field
- Strong general compliance expertise, including privacy, security, and IT general controls
- Experience applying and maintaining compliance with SOC and ISO standards
- Foundational knowledge of GDPR, CCPA, and related international privacy laws
- Strong communication and interpersonal skills
- Highly organized, detail-oriented, and proactive approach to compliance risks
- Ability to operate autonomously and drive initiatives with limited oversight
- Flexibility and adaptability in a high-growth, fast-paced environment
- SaaS industry experience
- CIA, CISA, CISSP, CISM, CIPP/E, CIPM, or similar certification
- Experience with AWS, Azure, or GCP
- Experience with AI-driven features and associated risk considerations
- Experience supporting international compliance initiatives or privacy regulatory readiness across multiple jurisdictions
FloQast Compensation & Benefits Highlights
-
Healthcare Strength — Health insurance is portrayed as comprehensive with multiple plan choices, including options that are fully employer-paid. Coverage quality is frequently described as strong.
-
Leave & Time Off Breadth — Time off is highlighted through generous or flexible PTO and company-wide recharge/Catch-Up Days. These programs are positioned to support work-life balance.
-
Parental & Family Support — Family-forming programs and paid parental leave are emphasized. Additional supports such as adoption assistance and unique new‑parent perks are noted.
FloQast Insights
What We Do
By automating and streamlining common accounting workflows to make them more efficient, FloQast is where accounting teams want to work so they can focus on what matters most, even when that’s just logging off on time. Whether automating reconciliations, documentation requests, or streamlining recurring accounting processes, such as the month-end close, financial reporting, or payroll, FloQast's platform enhances the way accounting teams already work to help them operate more efficiently.
Why Work With Us
Our cloud-based, AI-enhanced software is trusted by more than 3,000 accounting teams, including those at Twilio, Gong, Instacart, and The Golden State Warriors - and still growing! We aspire to forever elevate accounting and improve both the practice and perceptions of the profession.
Gallery
.jpg)
.jpg)
FloQast Teams
FloQast Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
.jpg)
