Security Assurance and Compliance Program Manager

Financial Recovery Technologies (FRT) is a leading technology-based services firm that helps the investment community identify eligibility, file claims, and recover funds from securities class action settlements. Our clients include some of the world’s largest institutional investors, and we’re proud to deliver results through our technology, innovation, unbiased expertise, client experience.

Security Assurance and Compliance Program Manager

• Support FRT’s information security, information technology, and compliance governance program by ensuring the organization remains compliant with applicable legal, regulatory, and contractual obligations as well as company policies and standards.
• Complete client and prospect security due diligence questionnaires, participate in client assessments, and related activities.
• Serve as primary point of contact for due diligence inquiries from external stakeholders on IT, security, privacy, and regulatory requirements.
• Support internal security awareness, IT security program management, policy maintenance, and other IT security and technology risk management efforts.
• Integral part of the team managing the organization’s SOC 2 audits.
• Facilitate cross‑functional coordination related to Information Security, Privacy, Regulations (Compliance), and IT Security risk management initiatives.
• Build relationships, communicate compliance requirements, and monitor emerging compliance topics to inform strategic direction.
• Act as team lead on legal, regulatory, and privacy topics in collaboration with the Information Security Team and Finance.
• Collaborate with internal stakeholders within IT Security, Tech Ops, Finance, and related teams to support ongoing technology and information risk management and governance activities.
• Contribute to company‑wide security awareness training initiatives.
• Manage client and prospect third‑party risk assessments, including completion and submission of IT/security, Privacy, and Regulatory due diligence questionnaires (DDQs).
• Serve as owner for IT Security and Compliance due diligence inquiries and assessments from clients and prospects.
• Monitor company policies and standards status and track revisions/updates.
• Manage the technology audit (SOC
  2) process.
• Oversee the vendor due diligence program.
• Assist with handling regulatory obligations in collaboration with IT Security, Finance, and Legal.
• Monitor regulatory developments and assess impact to company operations, policies, and controls.
• Ensure policies align with regulatory expectations while balancing business requirements to avoid overly burdensome controls.
• Coordinate with external counsel and advisors as needed to support regulatory requirements.
• Partner with Product Management to ensure products incorporate privacy/regulatory requirements.

• A minimum of 3–5 years of IT and/or regulatory compliance experience.
• Experience with Cyber Security frameworks.
• Background working with audit standards such as SOC 2.
• Experience managing third‑party risk assessments or security due diligence activities.
• Experience writing policies, plans, or governance documentation related to information security, technology, privacy, regulations, and risk management.
• Excellent communication and writing skills.
• Experience with Privacy and general Compliance topics.
• Knowledge and experience working with financial institutions preferred.
• Project management skills.
• Security Certifications such as Security+, GSEC, etc. preferred.
• Intellectual curiosity and a commitment to continuous growth.
• Desire to join a growing company with a vibrant, entrepreneurial culture dedicated to being the top provider in the class action recovery space.

• Competitive salary and bonus.
• Health, dental, vision.
• 401(k) with company match.
• Income protection plans (life, accidental death and dismemberment, short- and long-term disability) and access to a suite of voluntary benefits.
• Fun, smart, diverse colleagues.
• Hybrid work model; office located in Medford, MA.
• Close to public transit (walking distance to Wellington T on Orange Line).
• Free drinks and snacks.
• Free parking onsite.
• Free access to onsite gym.

Medford, MA…