Keyfactor, Inc.

Title: Security Compliance Analyst
Location: Barcelona, Spain
Job Function: Compliance
Employment Type: Full-Time
Industry: Enterprise Software
About the position 
We at Keyfactor are looking to hire a Security Compliance Analyst to join our fast-growing Cloud Operations and Compliance department. Security and Compliance works with all areas of the business, standing on the front lines to protect and enable fast, secure growth. The Security Compliance Analyst position will directly assist the Cloud Operations and Compliance Teams with the internal and external security and compliance responsibilities.
The position is based in Barcelona office with flexibility to work in hybrid setting when necessary. Applicants must hold Valid Right to Work in Spain to apply for this position.
RESONSIBILITIES
<ul>
<li>Participate in the collection of evidence for various audits and assessments (e.g., SOC, ISO27001, etc.)</li>
<li>Working with Keyfactor’s team members, suppliers, and business partners to ensure adherence to established Information Security policies</li>
<li>Communicating with the organization, including training, regarding information security policy implementations and technical measures</li>
<li>Consulting with all levels of the organization on information security control implementations and alignment with industry standards and best practices</li>
<li>Participate in internal risk assessments and audits</li>
<li>Responding in a timely manner to customers’ vendor risk assessments, information security questionnaires and evaluations</li>
</ul>
SKILLS AND QUALIFICATIONS
<ul>
<li>Fundamental technical troubleshooting and problem-solving skills</li>
<li>Formal industry and regulatory audit execution such as SOC 2, GDPR, CCPA, ISO 27001, PCI DSS, FedRAMP, and/or Sarbanes-Oxley</li>
<li>Information Security Policy composition, maintenance, and implementation experience</li>
<li>Executing risk management and treatment plans</li>
<li>Multi-tasking and prioritization involving complex technical and policy-related subjects</li>
<li>Currently maintains or is in the process of obtaining industry security certifications (e.g., CISSP, CEH, CISM, CISA, CIPT, etc.)</li>
<li>Basic systems administration capabilities (e.g., Windows Server, Active Directory user accounts, password management, security groups, etc.)</li>
</ul>
COMPENSATION
Salary will be commensurate with experience.
CULTURE, CAREER OPPORTUNITIES AND BENEFITS
We build teams that continually strive to get better than the day before. You will be challenged daily and given opportunities to grow personally and professionally. We balance autonomy and structure to create an entrepreneurial environment to spur creativity and new ideas. A few initiatives that make our culture special include:
<ul>
<li>Comprehensive benefit coverage</li>
<li>Dedicated employee focused ambassadors via Key Contributor &amp; Culture Committee</li>
<li>DIVERSE Commitment</li>
<li>Global Volunteer Day</li>
<li>Flexible time off</li>
<li>Monthly Cross Functional meetings</li>
<li>Monthly Leadership Development meetings</li>
<li>Monthly All Hands meetings – followed by group gatherings</li>
<li>Second Friday’s (the office is closed on the second Friday of every month)</li>
<li>The Keyfactor Alliance Program</li>
<li>Weekly Feedback Snapshot</li>
</ul>
OUR CORE VALUES
Our core values are extremely important to how we run our business and what we look for in every team member:
<ul>
<li>Trust is paramount – We deliver security software and solutions where trust is of the highest importance for our customers. We are honest and a trusted partner in every aspect of business.</li>
<li>Customers are core - We strategize, operate, and execute through a customer-centric view. We prioritize the security interests of our customers, and we act as if their data were our own.</li>
<li>Innovation never stops, it only accelerates - The speed of change is accelerating. We are committed, through investment and focus, to stay ahead of the innovation curve.</li>
<li>Deliver with agility - We thrive in high paced and continually changing environments. We navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
<li>Keyfactor is a proud equal opportunity employer. navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
</ul>

Keyfactor is a proud equal opportunity employer.

Barcelona

Security Compliance Analyst

Vectra

Vectra® is the leader in AI-driven threat detection and response for hybrid and multi-cloud enterprises.
The Vectra Platform captures packets and logs across network, public cloud, SaaS, and identity by applying patented security-led AI to surface and prioritize threats for rapid threat response. Vectra's threat detections are powered by a deep understanding of attacker methods and problem-optimized AI algorithms. Alerts uncover attacker methods in action and are correlated across customer environments to expose real attacks. Organizations around the world rely on Vectra to see and stop threats before a breach occurs. For more information, visit www.vectra.ai.Position Overview
As a key member of the Vectra pre-sales team, you will partner closely with your sales counterpart, prospects and Vectra customers throughout the region. You will be the subject matter expert regarding all pre-sales related activities for our prospects leading them all the way through to closing of the deal (and who doesn’t love closing a deal?!). And because we love our customers, you might step into some collaboration with the customer periodically after the deal is closed to further add value to the relationship with the customer.
Responsibilities
<ul>
<li>Pre-sales technical account management together with the Regional Sales Managers.</li>
<li>Lead customers and partners through demos and problem solving in clear, concise matter by being the subject matter expert on all things Vectra</li>
<li>Explore and maintain knowledge of Vectra's key competitors.</li>
<li>Communicate cross functionally constantly to ensure all key stakeholders are in the loop about product functionality and product desires experienced in the field.</li>
<li>Partner with the Product Management and R&amp;D departments to develop features critical to Vectra's success.</li>
<li>Develop and maintain an in-depth technical knowledge of the Vectra product line.</li>
<li>Identify new opportunities by creating and developing strong technical relationships with customers and channel partners.</li>
<li>Maintain knowledge at a high technical level of the current security landscape.</li>
<li>Collaborate with Customers on Technology reviews, product findings, and integration with other technologies they may have.</li>
<li>Collaborate with other Vectra Engineers on high-level projects to deliver Vectra technologies to our customers.</li>
<li>Participate in deployment review and forecast calls.</li>
<li>Participate in design review and release meetings.</li>
<li>Travel as needed within region.</li>
</ul>
Experience and soft skills
<ul>
<li>Startup DNA is a must: willing and able to do "whatever it takes" with motivation to find solutions rather than admire the challenge.</li>
<li>Customer-first behavior is a must.</li>
<li>extensive experience in technical or pre-sales as a Security Engineer (or Sales Engineer).</li>
<li>Large account management is required.</li>
<li>Excellent business fluency in German and English is required.</li>
</ul>
Technical qualifications
<ul>
<li>Deep understanding of security-focused product lines (CASB, EDR, SIEM or forensics-type platforms) with the ability to translate into security best practices.</li>
<li>Strong knowledge in networking and ability to understand L3 to L7 OSI layers.</li>
<li>String written (RFP) and verbal communications (Pre-sales presentations and conferences) are a must.</li>
<li>Good understanding of an attacker progression (Red Team or Pentest).</li>
<li>Good understanding of Incident Response (Blue Team) methodologies.</li>
<li>Good understanding of Cloud Security.</li>
<li>Good understanding of Security Processes and methodologies (CISSP/...) is a plus.</li>
</ul> A two-minute video that describes what we do at Vectra, and an article about Vectra's last funding round:<a href="https://vimeo.com/89579264" rel="noopener noreferrer nofollow ugc" target="_blank">https://vimeo.com/89579264</a><a href="https://tcrn.ch/3gVAXNw" rel="noopener noreferrer nofollow ugc" target="_blank">https://tcrn.ch/3gVAXNw</a>

Singapore

Security Engineer, Pre-Sales APJ

Rubrik

Rubrik is seeking creative problem solvers with a passion for cyber security. In this role you will partner with all parts of the business to build security solutions that help secure the brand and protect the organization, company and customer environments. You will be responsible for executing security engineering programs and managing security technologies across the board. The ideal candidate for this role is someone who can build innovative ways to deliver frictionless security capabilities to enhance the security posture of the organization.
What you'll be doing:
<ul>
<li>Architect, deploy and manage security solutions and supporting infrastructure in cloud and datacenter environments in support of internal customer security needs</li>
<li>Manage a scalable and highly available solution for security logging and drive efforts of logging onboarding for increased security visibility</li>
<li>Automation where it makes sense</li>
<li>Assist with security incidents, investigations, root-cause analysis and drive down detection and containment times in partnership with the Security Operations team</li>
</ul>
Experience you'll need: 
<ul>
<li>Bachelor degree in Computer Science or related field or equivalent experience</li>
<li>3+ years experience in security engineering, building and managing security solutions across the stack (on-prem and cloud) </li>
<li>Strong understanding of logging and data management best practices and strong experience in any logging and/or SIEM platform such as Azure Sentinel, Devo, Splunk, logz.io, ELK and supporting technologies (syslog, Kafka, Spark, Pub/Sub, EventHubs, etc.)</li>
<li>Proficiency in any scripting language (Python, PowerShell, Perl, Ruby, shell, etc.)</li>
<li>Working experience in GCP or Azure</li>
</ul>
Preferred Qualifications:
<ul>
<li>Security certifications are a plus (CISSP, CISM, SANS certs, vendor certs, etc.)</li>
<li>Basic knowledge of container technologies (Docker, Kubernetes, etc), microservices and CI/CD pipelines</li>
</ul>
#LI-TG1About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Palo Alto

Senior Information Security Engineer

Kin + Carta

At Kin + Carta, we’ve got opportunities to offer you — for growth, for leadership, for big, world-changing impact and for, dare we say it, fun. We are a global workforce that is committed to building a world that works better for everyone. And that starts with our Kin. That’s why we’re proud of: 
<ul>
<li><a href="https://www.kinandcarta.com/en-us/careers/life-at-kin-and-carta/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">The life we create within our virtual walls, every day</a></li>
<li><a href="https://www.kinandcarta.com/en-us/insights/2022/05/why-work-for-a-b-corp/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">Being B Corp certified</a></li>
<li><a href="https://www.kinandcarta.com/en-us/insights/2022/04/2022-womens-choice-award/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">Our honor as a “Best Company to Work For” by Women's Choice Award</a></li>
</ul>
<h3>The role</h3>
The ideal Americas Information Security Officer for Kin + Carta is innovative, passionate about global information security with both policy and technical experience. This person looks to continually learn, and enjoys sharing expertise. Strong verbal and written communication are a must. Experience working with HITRUST, or Nessus is a plus.

<h3>Role responsibilities</h3>
<ul>
<li>Pursue infosec excellence for the region with the continuous development and management of K+C InfoSec standards to ensure compliance for HITRUST, PCI-DSS, ISO 27001 and other required controls.</li>
<li>Perform internal audits on information security in line with international standards, which includes but not restricted to HITRUST</li>
<li>Security assess new and current suppliers - plan, organize and review Digital implementations, tools, APIs and platforms. </li>
<li>Support the completion of stakeholder infoSec schedules for RFPs, MSAs, delivery and project teams, by resolving project queries and approval of security requirements </li>
<li>Contribute to the InfoSec Risk Register and collaborate on treatment of risks tailored to the needs of the region. Manage and track mitigations, remediations and compensating controls.</li>
<li>Completing Information Security assessments from external parties in a timely manner</li>
<li>Contribute to the performance and improvement of the ISMS</li>
<li>Establish and review monitoring and logging process and standards </li>
<li>Designing, delivering and monitoring InfoSec training and awareness</li>
<li>Reviewer and approver of ISMS documentation </li>
<li>Collaborate with K+C and CDS, providing information security consultancy, strategy and implementation planning along with the prioritization of the highest impact projects </li>
<li>Joint responsibility with the Digital Defense team for all BAU tickets and tasks and recording time and tag allocation.</li>
</ul>

<h3>Minimum qualifications</h3>
We want all new hires to succeed in their roles at Kin + Carta. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Minimum Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply.
<ul>
<li>Experience in a security role with the emphasis on risk, policy and governance</li>
<li>ISMS Documentation Development</li>
<li>A working understanding of security frameworks or methodologies, HITRUST and/or ISO27001, NIST, CIS</li>
<li>Exposure to Enterprise Security tools AV, Vulnerability, IAM, SSO.</li>
<li>Continuous improvement with activities that stretch you beyond your job role, an opportunist who finds the positive side of a challenge.</li>
<li>Critical thinking skills with a mindset that considers solutions prior to presenting challenges</li>
</ul>

<h3>Preferred qualifications</h3>
<ul>
<li>BS in Computer Science, or a related field</li>
<li>Certified CSF Practitioner or training towards</li>
<li>CompTIA Security+ Certification </li>
<li>Microsoft Certified Cybersecurity</li>
<li>CISSP, CISM or equivalent training</li>
<li>Experience working with international security standards  </li>
</ul>

<h3>About Kin + Carta</h3>
Kin + Carta is a global digital transformation consultancy committed to working alongside our clients to build a world that works better #ForEveryone. Our 2,000 curious minds make creative connections between people, data and technology to create connected outcomes across the full lifecycle of the product and platform ecosystems.
We’re makers, builders and creators by nature, and we come to work every day to build experiences for some of the world’s most influential companies. We help businesses accelerate their digital roadmap, rapidly innovate, modernize their systems, enable their teams and optimize for continued growth. 
We are a technology business with trust and human connection at its heart. <a href="https://www.kinandcarta.com/en-us/social-responsibility/" rel="noopener noreferrer nofollow ugc" target="_blank">As a Certified B Corp</a>, our triple bottom line focus on people, the planet and profit is at the core of everything we do.
We welcome our Kin to show up as their authentic selves every day. Because this is so important to us, Kin + Carta is proud to be an equal opportunity employer. To read further about our commitment to Inclusion, Diversity, Equity and Awareness, check out the <a href="https://www.kinandcarta.com/en-us/idea/" rel="noopener noreferrer nofollow ugc" target="_blank">IDEA page</a> on our website. 
If you need accommodations at any point in the application or interview process, please let us know.

United States

Americas Information Security Officer

CRI Group

DESCRIPTION OF THE TASKS
Following tasks will be performed by external service provider:- Technical responsibility for System and Networking projects - Provision of technical studies, technical expertise, and technical evaluations - Participation in meetings within the Commission - Design, engineering, testing, documentation, release control, maintenance, and technical support of Linux workstation environment- Assistance with training support staff and users- Drafting of technical, operational, and user documentation - Participation in coordination, project, and operational meetings.- Provision of expert advise and assistance, technology watch, evaluation studies, architectural considerations, applicable standards, solution patterns, and best practices in the specific are of Linux systems.- Provide support and follow up on incidents and problems related to his/her duties
KNOWLEDGE AND SKILLS
Following skills and knowledge are required for the performance of the above listed tasks: - Excellent knowledge of the Linux distribution (s) used in the European Commission including – but not limited to – system architecture, installation, configuration, maintenance, and support- Excellent knowledge of writing clear and structured analysis documents- Excellent communication skills with technical and non-technical audiences- Good knowledge of HSMs (certification in this field, e.g., Nshield will be considered asset)- Good knowledge of firewalls, and related VPN technologies- Good knowledge of LDAP authentication servers and networking- Good knowledge of Databases (certification in this field, e.g., Oracle will be considered asset)- Good knowledge of Security (certification in this field, e.g., CISSP/CISM will be considered asset)- Good knowledge of IT Infrastructure/Operations including virtualization and datacentres technologies- Practical experience in management of a secured environment- Ability to participate in technical meetings- Ability to apply high quality standardsDue to the nature of a large international organisation such as the European Commission, candidates should also have the following non-technical skills:- Fluency in English, both spoken and written- Capability of integration in an international/multicultural environment, rapid self-starting capability and experience in working in team
- Ability to work in multi-cultural environment, on multiple large projects- Excellent Team Player- High degree of discretion and integrity is required as the applications managed and maintained in DG CLIMA, E.3 unit contain personal and sensitive data
SPECIFIC EXPERTISE
Following specific expertise is mandatory for the performance of tasks:- at least 3 years of specific expertise in Linux virtualization and HSM management (min. competence level 4)
The following documents / procedures will be requested to successfully complete the hiring process :
<ul>
<li>A copy of your university degree(s)</li>
<li>A copy of your criminal record</li>
<li>Security Clearance Procedure</li>
</ul>
WHO WE ARE?
CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.
CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.
Please visit our website and let's get in touch: <a href="https://cri-group.eu/" rel="noopener noreferrer nofollow ugc" target="_blank">www.cri-group.eu</a>

Brussel

Linux Consultant with virtualization and HSM management expertise

Apply to Cissp Cyber Security Jobs in companies remotely and near you. New Cissp Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Compliance Analyst at Keyfactor, Inc.	Full Time CISM Audit Analyst Consulting
Security Engineer, Pre-Sales APJ at Vectra	Full Time Red Team Blue Team Incident Response Cissp
Senior Information Security Engineer at Rubrik	Full Time CISM Analyst Automation Azure
Americas Information Security Officer at Kin + Carta	Remote Full Time CISM Comptia Audits
Linux Consultant with virtualization and HSM management expertise at CRI Group	Full Time CISM Consultant Cissp Clearance

Cissp Cyber Security Jobs

0 Cissp Cyber Security Jobs. Page 1 of 1

5 closed cissp cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cissp Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Cissp Cyber Security Jobs

0 Cissp Cyber Security Jobs. Page 1 of 1

5 closed cissp cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cissp Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter