Security Compliance Analyst

Deploy•San Francisco, CA

About The Position

Deploy is seeking a highly motivated Security Compliance Analyst with information security governance and compliance experience. The analyst will collaborate with engineers and auditors to meet security compliance controls and improve compliance capabilities. The role includes responding to auditor requests, performing on-call operations, and assisting with the Information Security team's risk management program. The analyst will work with executive and mid-level management, Engineering, and Product teams to support audits, implement the information security management system (ISMS), and build a comprehensive Governance, Risk and Compliance program. The role also supports security and privacy initiatives, risk assessments, training programs, vendor requirements, and the development and maintenance of policies and processes that protect confidential information and comply with applicable privacy laws and regulations. The position is with Deploy, an AI intelligence infrastructure company with more than 250 employees and offices in San Francisco, Seattle, New York, and Delhi.

Requirements

Bachelor's degree or related experience.
At least 4 years of experience conducting risk-based assessments for information systems and/or operations.
At least 1 year of experience running a comprehensive Governance, Risk and Compliance program.
At least 2 years of experience leading industry-standard audits, such as ISO 27001 or SOC 1/2, from either side.
Strong knowledge of applicable privacy laws, including CCPA/CPRA and GDPR.
Ability to communicate in writing and orally to technical and non-technical audiences in a business-friendly manner.
Demonstrated success in a competitive environment.
Highly self-motivated and ambitious in achieving goals.
Strong team player who can also work and execute independently.
Driven, with a strong personal motivation to excel.
Eager to learn and actively seek opportunities to contribute.
Highly organized and detail-oriented, able to handle multiple projects and changing priorities.

Responsibilities

Manage Deploy's current risk management program.
Manage external and internal audits, including reviewing materials for accuracy and adherence to regulatory expectations.
Implement the ISMS in coordination with executive and mid-level management.
Participate in building a comprehensive Governance, Risk and Compliance program.
Work with Engineering and Product teams to identify process improvements and efficiencies in change management, access management, and general technology process controls.
Provide compliance, risk, and controls expertise to support information security and compliance initiatives.
Assist with cyber security risk assessments to protect the business.
Maintain awareness of industry best practices for data maintenance handling as it relates to the role.
Manage security and privacy training programs.
Adhere to and champion policies, guidelines, and procedures for protecting information assets.
Manage external security, privacy, and compliance requirements, including vendor-related internal requirements and external requirements placed on Deploy.
Report actual or suspected security and/or policy violations or breaches to an appropriate authority.
Define, develop, implement, and maintain policies and processes that support consistent, effective privacy practices, minimize risk, protect confidential information across media types, and comply with applicable privacy laws and regulations.
Address auditors' requests and perform on-call operations.