Senior Analyst, Information Security & Privacy Full Time

Description:

• Perform internal reviews of privacy and security controls and policies.
• Collect, review, schedule and remediate internal security controls for compliance.
• Develop techniques, procedures and utilities for improving risk assessments.
• Coordinate development, implementation, and administration of security policies, practices, standards and programs.
• Coordinate and develop effective security awareness programs.
• Coordinate and project manage solutions for security posture.
• Create, test and implement business continuity, disaster recovery and incident response plans.
• Conduct fraud, abuse and threat investigations, as necessary.
• Provide support for data inventories and mapping.
• Manage regular review of company data privacy policies and procedures and recommends improvements.
• Assist in conducting data privacy risk and impact assessments and work with Product Managers, Engineers to ensure Privacy By Design.
• Support the management of data subject requests, and incident and breach management.
• Assist in the development of annual data privacy training materials and business unit specific training and manages employee compliance with required training.
• Work with the Manager of Information Security & Privacy to ensure that all practices of the Information Security and Privacy program are intelligence and risk driven.
• Support general Information Security & Privacy initiatives as they arise.

Requirements:

• 3+ years of privacy experience (privacy by design, privacy regulations, for example).
• 3+ years of information security experience.
• Extensive knowledge of GRC best practices for SaaS organizations.
• Successful delivery of compliance for a SaaS product to one or more security standards (SOC 2, ISO 27001, and NIST 800, for example).
• Strong knowledge of security standards and US and EU privacy laws (HIPAA, CCPA and GDPR).
• Experience delivering on multi-stakeholder projects.
• Familiarity with SaaS architectures, software development, and deployment to cloud providers.

Benefits:

• Company paid premiums for medical, dental and vision insurance for self and family.
• Company sponsored HSA account.
• Company 401K, 100% match up-to 6% of employee contributions.
• Flexible vacation policy.
• Telecommuting.
• Fitness incentives package.
• Company funded mental health resources.
• Wellness perks.
• Casual Dress.