Risk & Controls Manager

Los Angeles, California / New York City, NY / Chicago, Illinois / Austin, TexasLegal & Compliance – InfoSec and Compliance /Full-time /HybridFloQast is looking for a Risk & Controls Manager to join our growing InfoSec & Compliance department. This role serves as a risk and controls advisor, ensuring adherence to key compliance frameworks across the organization, and evaluating business initiatives from a risk and controls perspective to help ensure that FloQast's operations, products, and services remain aligned with regulatory, contractual, and internal requirements. This role will own several core risk domains, including privacy, third-party risk management, and policy management, and will also contribute to broader risk program initiatives, including issue management and process automation. We are looking for a well-rounded GRC professional who can operate across multiple risk and compliance domains, with the scope of this role expected to evolve as the needs of the department grow.The InfoSec & Compliance department at FloQast reports directly to the General Counsel and is responsible for ensuring FloQast manages risk and maintains compliance with an array of frameworks covering security, privacy, AI, and financial reporting. We are a team of in-house subject matter experts who advise, direct, train, and monitor the organization, resulting in daily interactions with all departments on a variety of unique and interesting business initiatives.This role has a requirement of working in office 3 days per week, which may be subject to change based on team and business needs, as determined by the department leader. Please note that this requirement is subject to ongoing review and may be adjusted in the future.*Visa sponsorship is NOT available at this timeWhat You'll DoCollaborate and drive cross-functional alignment with internal stakeholders to review, maintain, and align documentation, policies, and procedures with audit and regulatory expectationsConduct and document compliance impact assessments covering risk, privacy, and AI considerations to support organizational decision-makingProvide strategic, risk-informed guidance in response to compliance-related inquiries from internal teamsSupport FloQast's security and compliance programs by ensuring adherence to applicable SOC and ISO standardsOwn execution of FloQast's established privacy program, including maintaining privacy documentation, supporting data subject requests, and ensuring ongoing compliance with applicable privacy lawsManage FloQast's sub-processor program, including maintaining notification workflows, coordinating updates to the sub-processor list, and responding to client inquiries related to sub-processor changesSupport privacy-related product and vendor reviews, escalating regulatory considerations as neededOwn third-party risk management processes and associated due diligence activities, including coordinating vendor reviews and supporting procurement needsOwn policy management processes across the organization, including facilitating annual reviews, coordinating updates with policy owners, maintaining version history, and routing finalized policies for approvalSupport the identification, tracking, and remediation of compliance and policy-related issues, partnering with relevant stakeholders to drive resolutionIdentify opportunities for process improvement, including automation and AI, within the risk management and compliance function, and actively develop and implement AI-driven workflows to enhance program efficiency and scalabilityAny other tasks that may be assigned to help the company meet its goalsWhat You'll BringBachelor's degree6+ years of experience in compliance, risk management, information security, privacy, or a related field, with SaaS industry experience preferredStrong general compliance expertise, including areas such as privacy, security, and IT general controlsExperience applying and maintaining compliance with frameworks such as SOC and ISO standardsFoundational knowledge of privacy regulations and frameworks such as GDPR, CCPA, and related international privacy lawsStrong communication and interpersonal skills, with the ability to collaborate effectively across teams and functionsHighly organized, detail-oriented, and proactive in identifying and addressing compliance risksAbility to operate autonomously and drive risk and compliance initiatives with limited oversightFlexible and adaptable in a high-growth, fast-paced environmentNice to haves/OthersCertifications such as CIA, CISA, CISSP, CISM, CIPP/E, CIPM, or similarExperience with cloud hosting environments such as AWS, Azure, or GCPExperience with emerging technologies, including AI-driven features and associated risk considerationsPrior experience supporting international compliance initiatives or privacy regulatory readiness across multiple jurisdictionsThe base pay range for this position is $115,000 - $155,000. Compensation is not limited to base salary. FloQast values our Total Rewards, and offers a competitive and elaborate Benefits Package including, but not limited to, Medical, Dental, Vision, Family Forming benefits, Life & Disability Insurance, Unlimited Vacation, and participation in our Employee Stock Program. FloQast reserves the right to amend, change, alter, and revise pay ranges and benefits offerings at any time. All applicants acknowledge that by applying to this position you understand that this specific pay range is contingent upon meeting the qualifications and requirements of the role, and for the successful completion of the interview selection and process. It is at the Company's discretion to determine what pay is provided to a candidate within the range associated with the role.#LI-Hybrid#LI-LB1#BI-HybridAbout FloQast:FloQast is the leading AI-powered Accounting Transformation Platform, uniquely built by former accountants for accountants. We automate complex, recurring accounting workflows—transforming preparers into strategic reviewers and relieving accountants from tedious manual work. Our cloud-based solution is trusted by over 3,500 world-class accounting teams, including Lululemon, Doordash, and the MLB, to drive collaboration and financial accuracy. Driven by a mission to continuously elevate the profession, FloQast is redefining both the practice and the perception of accounting on a global scale. Our values act as a guiding compass, shaping every decision we make, and are non-negotiable, particularly in our hiring process. Alongside our employees, partners, and customers, we embody these values every day:Unwaveringly Authentic Ambitious with IntegrityEmpowered to GrowCommitted to CollaborationCustomer Obsessed in All WaysFloQast is regularly rated as a Best Place to Work!- Inc. Magazine’s Best Workplaces in 2025, 2024, 2023, 2022, and 2021- Best Places to Work by LA Business Journal since 2017 (that’s 9 years!)- Built In’s ​​Best Place to Work in Los Angeles 7 years in a row!Because we are Customer Obsessed in All Ways, check out what our customers have to say about FloQast on G2 Crowd. If this aligns closely with what you are looking for, hit “Apply” and come join our growing team!FloQast, Inc is committed to operating fair and unbiased recruitment procedures allowing all applicants an equal opportunity for employment, free from discrimination on the basis of religion, race, sex, age, sexual orientation, disability, color, ethnic or national origin, or any other classification as may be protected by applicable law. We aim to recruit the right people for the jobs we have to offer, and to assess applications on the basis of relevant skills, education, and experience. We welcome people of different backgrounds, experiences, abilities, and perspectives. We are an equal opportunity employer and strive to provide a professional and welcoming workplace for all employees.Link to FloQast Recruiting AI Usage PolicyWe may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.