Qualifications

• 5-7 years of experience in Information Security, demonstrating a strong foundation in security principles.
• Proficient in developing and implementing a Common Control Framework (CCF).
• Experience conducting Security Control assessments and collaborating with stakeholders for remediation.
• Ability to perform Risk Assessments of items in the CyberSecurity Risk Register.
• Solid understanding of key information security frameworks such as SOC-2, ISO27001, NIST, PCI-DSS, and HIPAA.
• Skilled in using Tableau and/or Google Looker to build dashboards for data visualization.
• Familiarity with Google Workspace tools including Sheets, Docs, and Drive.

Responsibilities

• Collaborate with the Governance, Risk Management, and Compliance (GRC) team to scale security programs.
• Conduct Security Control assessments and work with teams to address identified gaps.
• Perform detailed Risk Assessments for entries in the CyberSecurity Risk Register.
• Develop and implement a Common Control Framework (CCF) to enhance security posture.
• Create insightful dashboards using Tableau and Google Looker to visualize security metrics.
• Engage with cross-functional stakeholders to build strong working relationships and facilitate communication.
• Analyze complex security problems and develop effective solutions.

Benefits

• Opportunity to work within a dynamic team focused on security innovation.
• Engagement with a variety of security frameworks and standards.
• Access to professional development and certification opportunities in the field of information security.
• Flexible work environment that fosters strong team collaboration.
• Involvement in the fast-paced technology sector, especially within a startup atmosphere.