Senior Technology Compliance Lead

Fastly•Denver, CO

15h•Remote

About The Position

As a Senior Technology Compliance Lead, you will help scale Fastly’s technology compliance program to accommodate the growing and evolving needs of our customers. This is a unique opportunity to advance our focus on compliance as a competitive advantage that grows our business and increases customer confidence in our service offerings. You will own and lead from start to finish execution of Fastly’s most critical technical security audits, collaborating with people both inside and outside the organization, including department heads, engineers, auditors, and customers. This position will report to the Director, Technology Compliance and will work closely with partners across the organization, including Customer Success, Security, Engineering, Legal, Sales, Program Management, and Human Resources.

Requirements

8-10 years of security or compliance analysis, or assurance/advisory experience, including a focus on customer security communications and leading programs as an individual contributor
A thorough understanding of technical environments, and the ability to communicate with subject matter experts about technical and operational security controls
Experience mapping and rationalizing controls to meet requirements across multiple information security/technology compliance standards, including gap analysis and remediation planning and management (e.g., PCI DSS, HIPAA, ISO 27001, SOC 1/ SOC 2, FedRAMP)
BS degree in Management Information Systems, Computer Science, or a related field
Excellent written and verbal communication skills to communicate details of a security program to a wide spectrum of audiences, including customers and senior leadership
Strong analytical skills and attention to detail
Ability to be self-directed and take initiative on projects and tasks, directing others and in identifying gaps related to security controls, with minimal day-to-day oversight/direction

Nice To Haves

CISA, CISM, CISSP, or related certification
Experience using governance, risk management, and compliance (GRC) tools

Responsibilities

Manage the audit process from start to finish for multiple external and internal audits (e.g., PCI DSS, GDPR, FedRAMP, SOC2, ENS, etc), including customer audits, making continual improvement and scaling the audit function, including delivering and scaling the audit management strategy
Maintain a deep understanding of our platform and its supporting infrastructure and processes, as well as how our compliance obligations apply to that environment
Continuously confirm and refine Fastly’s internal control framework and related documentation (e.g., policies, procedures, narratives, training material), and drive ongoing controls development and improvement
Drive and scale the continuous monitoring program
Actively identify and communicate control gaps; help the company develop and confirm remediation efforts
Support third party oversight processes, including security and compliance assessments of Fastly’s vendors and service providers
Enhance internal reference and training material about our technology compliance program