Security Risk & Compliance Analyst

Jamf

2d•$85,100 - $154,420•Remote

About The Position

The Security Risk & Compliance Analyst is responsible for ensuring that Jamf’s security controls, policies, and procedures are implemented in accordance with applicable laws, regulations, and industry standards. Reporting to the Director of Security Risk & Compliance, the Analyst will support the activities and improvements across the entire scope of Jamf’s Security Risk & Compliance program. You may be required to work periodically at a Jamf office or collaborative work location with other Jamf employees in your area for certain events or moments that matter.

Requirements

Minimum of 1 year of relevant experience (e.g. security operations, governance, risk management, compliance) (Required)
Working knowledge of operating systems, networking, cloud technology, security tools
Strong analytical and problem-solving skills
Excellent written/verbal communication and interpersonal skills
Ability to work collaboratively and independently, participating in multiple projects simultaneously
A practical mindset that can balance compliance and business needs
4 year / Bachelor's Degree in Computer Science or related field (Required)
Participation in ongoing security training is mandatory
Established security protocols will be adhered to, sensitive data will be handled responsibly, and data protection practices are followed, including understanding relevant privacy regulations and reporting breaches
Acknowledging the Jamf Code of Conduct, where applicable security and privacy policies can be found, is a requirement of all roles at Jamf

Nice To Haves

Familiarity with risk management methodologies, cybersecurity frameworks, and regulatory compliance (e.g. NIST, ISO 27001, ISO 27701, SOC2; StateRAMP and FedRAMP a plus)
Experience in use of GRC applications a plus
Actively pursuing one or more of the following: CGRC, CISA, CISSP, CISM, CompTIA Security+
Amazon Web Services (AWS) experience
Knowledge or security training from ISACA
A combination of relevant experience and education may be considered

Responsibilities

Conduct risk assessments in accordance with established methodology.
Collaborate with team members to evaluate cyber risk and treatment plans, and follow up to ensure appropriate action is taken to mitigate risk.
Support maintenance of security policies to ensure compliance with relevant laws, regulations, and industry standards.
Collaborate with teams across Jamf to ensure security policies are consistently implemented.
Participate in monitoring efforts to ensure compliance with the security-related policies and procedures.
Participate in external audits to ensure Jamf’s ongoing maintenance of its security certifications (i.e., ISO 27001, ISO 27701, SOC2 Type 2, StateRAMP).
Support the vendor risk management function for evaluating Jamf’s vendors and partners to identify potential risks.
Review security terms in vendor and partner contracts for consistency with Jamf’s standard annex.
Support the customer assurance process for responding to questions and questionnaires from customers, potential customers, and partners regarding security and compliance.
Review security terms in customer contracts and collaborate with security teams to ensure control requirements are implemented.
Support the security awareness training program.
Support preparation of periodic reporting for Senior Management.
Support implementation of program improvement initiatives.