Security Compliance Analyst

Hive•San Francisco, CA

8d•$110,000 - $140,000

About The Position

Deploy is seeking a motivated Security Compliance Analyst with information security governance and compliance experience. The analyst will collaborate with engineers and auditors to meet security compliance controls and improve compliance capabilities, address auditor requests, perform on-call operations, and assist with the Information Security team’s risk management program. The role supports the development and operation of Deploy’s Governance, Risk and Compliance program, privacy practices, audits, security assessments, and training programs.

Requirements

Bachelor's degree or related experience.
At least 4 years of experience conducting risk-based assessments for information systems and/or operations.
At least 1 year of experience running a comprehensive Governance, Risk and Compliance program.
At least 2 years of experience leading industry-standard audits, such as ISO 27001 or SOC 1/2, from either side.
Strong knowledge of applicable privacy laws, including CCPA/CPRA and GDPR.
Ability to communicate in writing and orally with technical and non-technical audiences in a business-friendly manner.
Demonstrated success in a competitive environment.
Highly self-motivated and ambitious in achieving goals.
Strong team player who can also work and execute independently.
Driven to excel without needing external prompting.
Eager to learn and actively seek opportunities to contribute.
Highly organized and detail-oriented, able to handle multiple projects and changing priorities.

Responsibilities

Manage Deploy's current risk management program.
Manage external and internal audits, including reviewing materials for accuracy and adherence to regulatory expectations.
Implement the ISMS in coordination with executive and mid-level management.
Participate in building a comprehensive Governance, Risk and Compliance program.
Work with Engineering and Product teams to identify process improvements and efficiencies in change management, access management, and technology process controls.
Provide compliance, risk, and controls expertise for information security and compliance initiatives.
Assist with cybersecurity risk assessments.
Maintain awareness of industry best practices for data maintenance and handling as relevant to the role.
Manage security and privacy training programs.
Adhere to and champion policies, guidelines, and procedures for protecting information assets.
Manage external security, privacy, and compliance requirements, including internal vendor requirements and external requirements placed on Deploy.
Report actual or suspected security or policy violations and breaches to an appropriate authority.
Define, develop, implement, and maintain policies and processes that support consistent, effective privacy practices, minimize risk, protect the confidentiality of protected information across media types, and comply with applicable privacy laws and regulations.
Address auditors’ requests and perform on-call operations.