Rubrik

<p><strong>Company Description</strong></p>
<p>Rubrik is one of the fastest growing companies in Silicon Valley, revolutionizing data protection and management in the emerging multi-cloud world. We are the leader in cloud data management, delivering a single platform to manage and protect data in the cloud, at the edge, and on-premises. Enterprises choose Rubrik to simplify backup and recovery, accelerate cloud adoption, enable automation at scale, and secure against cyberthreats. Rubrik has raised over $553 million in venture funding, most recently at a valuation of $3.3 billion. We’ve been recognized as a Forbes Cloud 100 Company five years in a row and as a LinkedIn Top 10 startup. </p>
<p><strong>Information Security - Who We Are</strong></p>
<p>The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our systems, provides awareness education to teams on security best practices for data protection, and ensures data sharing relationships with third parties in order to securely protect Rubrik information.</p>
<p><strong>What You’ll Do</strong></p>
<p>We are looking for an Information Security Program Manager (Risk Management) to be a part of our security risk management team, which focuses on building and supporting a security risk oversight function. Help us elevate and accelerate the maturity of our risk management and compliance capabilities by leading prioritized activities related to our security risk management strategy. The successful candidate will need to build and maintain strong cross-functional relationships across the company. To achieve this you must have excellent leadership, communication, and decision making skills.</p>
<p><strong>Responsibilities:</strong></p>
<ul>
<li>Gather security risk data, perform risk ranking qualitative and quantitative analysis.</li>
<li>Analyze security risks using real-world security data and systems automation.</li>
<li>Frequently document and communicate security risks, collaborating with a range of stakeholders from individual contributors to senior leadership levels.</li>
<li>Contribute to security program development by identifying new or emerging opportunities to apply security principles and technologies.</li>
<li>Analyze the security of new or existing applications, software, or specialized utility programs and provide risk recommendation.</li>
<li>Support strategic and technical initiatives, perform Operational Risk Assessments, manage Risk Acceptance activities, develop risk posture and remediation recommendations.</li>
<li>Monitor and evaluate security measures to protect against reasonably anticipated threats or hazards to the privacy, security or integrity of protected information.</li>
<li>Be an integral member of the risk and compliance team to build and maintain strong cross-functional relationships across the company to aid in achieving consensus, expectation setting, training and awareness, and promote consistency and improvement in our processes.</li>
<li>Contribute to the production and improvement of the content, quality, and timing of security governance, risk and compliance analysis and reporting.</li>
<li>Own and drive activities related to the remediation of technical security and compliance risks with cross-functional teams, including, but not limited to, leading meetings, working to assign, track work items, and producing reports.</li>
</ul>
<p><strong>Preferred Qualifications:</strong></p>
<ul>
<li>8+ years of related work experience in Information Security Governance, Risk and Compliance (GRC) or relevant Compliance roles in the tech industry.</li>
<li>Have driven several security and/or operational risk processes within a company with a modern risk oversight function.</li>
<li>Experience supervising the design and operation of risk &amp; control assessments to target different levels of information (e.g., RCSA vs. a service level assessment).</li>
<li>Experience with risk registers and helping prioritize security related work.</li>
<li>Can implement a solution (design), operational plan, and roadmap to achieve goals.</li>
<li>Experience implementing agile use cases in a GRC technology solution.</li>
<li>Executive presence: can represent a vision and build consensus across a variety of partners.</li>
<li>Knows how to estimate work effort and incubate skill sets to achieve team goals.</li>
<li>Has advanced knowledge of common security risks, vulnerabilities, and threats and can escort these issues through triage / risk treatment conversations.</li>
<li>Validated understanding of relevant information security frameworks, including related regulatory compliance requirements, such as ISO 27001/2 (including ISO 27017 &amp; 18), FedRAMP, SOC 2 Trust Services Criteria, CIS Top 20, PCI DSS, NIST CSF / 800-53, HIPAA.</li>
<li>Strong knowledge of audit and risk management methodologies, such as SOX, COBIT, NIST RMF / 800-37 / 800-30.</li>
<li>Strong understanding of risk quantification principles and experiencing implementing FAIR-like approach for quantifying and reporting risks.</li>
<li>Hands-on experience with data analytics and business intelligence dashboarding tools (e.g., Power BI) and with agile project management tools (e.g., Jira).</li>
<li>Detail-oriented and able to understand the bigger picture by using your technical expertise and problem solving abilities to prioritize and manage blocking issues.</li>
<li>Ability to ramp up quickly and learn new technologies with minimal lag time.</li>
<li>Able to discuss issues at technical and business levels with audiences of various backgrounds.</li>
<li>Experience in a high growth business environment is a plus.</li>
<li>Bachelor’s degree in Security, Computer Science, Management Information Systems or related field preferred.</li>
<li>SaaS and data management industry experience is a plus.</li>
<li>Professional certifications in Information Security or Risk Management (e.g., CISA, CISM, CRISC, CGEIT, CSX-P, CISSP, CCSK) is a plus.</li>
</ul><p><strong>About Rubrik:</strong></p>
<p>Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.</p>
<p>We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.</p>
<p><a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank"><strong>Linkedin</strong></a><strong> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| </strong></p>
<p><strong>Diversity, Equity &amp; Inclusion @ Rubrik: </strong></p>
<p>At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.</p>
<p>Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.</p>
<p>Our DEI strategy focuses on three core areas of our business and culture:</p>
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5><em>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</em></h5>
<h5><em>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </em></h5>
<h5><em>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</em></h5>
<em><a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a></em>
<em><a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a></em>
<em><a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a></em>
<em><a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a></em>

Bangalore

Sr Information Security Analyst  - Risk Management

PEAK6

<p>Apex Fintech Solutions (AFS) powers innovation and the future of digital wealth management by processing millions of transactions daily, to simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech solutions enables us to support clients such as Stash, Betterment, SoFi, and WeBull, and more than 20 million of our clients' customers. </p>
<p>Collectively, AFS creates an environment in which companies with the biggest ideas in fintech are empowered to change the world. We are based in Dallas, TX and also have offices in Austin, New York, Chicago, Los Angeles, Portland, and Belfast. </p>
<p>If you are seeking a fast-paced and entrepreneurial environment where you'll have the opportunity to make an immediate impact, and you have the guts to change everything, this is the place for you. </p>
<p>AFS has received a number of prestigious industry awards, including:</p>
<ul>
<li>2021, 2020, 2019, and 2018 Best Wealth Management Company - presented by Fintech Breakthrough Awards</li>
<li>2021 Most Innovative Companies - presented by Fast Company</li>
<li>2021 Best API &amp; Best Trading Technology - presented by Global Fintech Awards</li>
</ul>


<p>The GRC Analyst (Privacy) will support the strategic priorities and mitigation of confidential and privacyrisks at Apex Fintech Solutions. The position will provide support and establish tools and services forexisting and future global privacy legislation (e.g. GDPR, CCPA). This role will provide consistent visionand strategy for data privacy across the organization and ensure alignment with federal, regulatory andinternational privacy requirements. The GRC Analyst (Privacy) will work both independently andcollaboratively to support the firm and client engagements (security program assessments), and developand continuously improve security program capabilities (e.g. risk assessment, vendor risk, and datasecurity). The analyst will also support the Data Security practice in the delivery of data security projects,including implementation of data classification, data management, and data leak preventioncapabilities.</p>
<p><strong>This role will operate within the hours of 10:00 - 18:30 from Monday to Friday. </strong></p>
<p>Primary Responsibilities:- Collect, review, and research data privacy requirements and translating them into actionableitems for delivery.- Comprehend Privacy Rights and Legislation and how it impacts the firm and individual teams.- Conduct privacy assessments, identify gaps, provide remediation guidance, and execute/seethrough implementation of plans.- Develop and support privacy training materials and communications to train employees.- Be a point of contact/subject matter expert should a privacy incident occur.- Assist with annual reviews of privacy processes to validate and ensure ongoing compliance.- Maintain privacy policy and procedures.- Assist in managing data privacy initiatives and program.- Deliver strategy, risk and compliance, and data security projects.- Develop and promote privacy-related awareness and organizational communications</p>
<p>Qualifications :- Bachelor’s degree in computer science, business, or related field- 3+ years’ Privacy-specific experience with privacy laws and regulations i.e., CCPA, LGPD, GDPR- 3+ years’ experience in compliance or risk management or cybersecurity role- Self-motivated to work independently and collaboratively, growth mindset- Strong organizational and communication skills (verbally and orally)- Ability to handle multiple priorities on tight deadlines without compromising quality.- Demonstrate experience managing data privacy initiatives in a global organization- Information privacy certification(s) i.e., CIPP/US, CIPP/E- Knowledge of industry security frameworks such as NIST, ISO, and COBIT- Demonstrate experience managing data privacy initiatives in a global organization</p>
<p><strong>Culture &amp; Core Values</strong></p>
<ul>
<li>InfoSec team is comprised of independent thinkers and doers who can positively impact our clients and shape Apex Clearing.</li>
<li>We strive to build and maintain a collaborative environment and engaging work—guided by <strong>Open and Honest Communication; Teamwork and Collaboration; Involving Everyone; Leaders Who Serve; and Personal Accountability</strong></li>
</ul>
<p><strong>Life at PEAK6 </strong></p>
<p>We want you to like coming to work so we work really hard to make your job fun and different from any other.  </p>
<p><strong>We offer: </strong></p>
<ul>
<li>28 days annual leave plus 10 NI national holidays</li>
<li>Pension matched up to 7% </li>
<li>Private health insurance for medical and dental </li>
<li>Life Insurance</li>
<li>Discounted gym membership</li>
<li>Great work/life balance and flexible working hours </li>
<li>Monthly catered lunches </li>
<li>Unlimited drinks and snacks </li>
<li>Quarterly hackathons</li>
<li>Poker tournaments </li>
<li>Charitable matching gift program</li>
</ul>



<p>Apex currently requires all employees as a condition of employment to either be fully vaccinated for COVID-19 or submit to regular testing. The CDC defines "fully vaccinated" as two weeks after the second dose for Pfizer and Moderna, and two weeks after the single dose of Johnson &amp; Johnson. Apex will also require proof of vaccination and/or testing. Apex will also consider requests for exemption from these requirements as a reasonable accommodation for medical reasons or sincerely held religious beliefs. *Please note this requirement is ONLY for US Offices. </p>

Security Analyst (Privacy)

Ledger

We're making the world of digital assets accessible and secure for everyone. Join the mission. Founded in 2014, Ledger is the global platform for digital assets and Web3. Over 15% of the world’s crypto assets are secured through our Ledger Nanos. Headquartered in Paris and Vierzon, with offices in the UK, US, Switzerland and Singapore, Ledger has a team of more than 700 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets – including the Ledger hardware wallets line with more than 5 millions units already sold in 180 countries. At Ledger, we embody the values that make us unique: Pragmatism, Audacity, Commitment, Trust and Transparency. Have a look at our Origins video <a href="https://www.youtube.com/watch?v=Etqa_ECbz3M" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. As a IT Security Vulnerability Manager you will be responsible for the operation, reporting and day to day deliver of IT Security Vulnerability Management / Patch Management services within Ledger.
<h3>Your Mission</h3>
<ul>
<li>Accountability for the delivery and ongoing support and maintenance of the Vulnerability Management Suite,</li><li>Ensure Out of hours support of infrastructure security technologies,</li><li>Support of project deliveries within the time frames agreed with the project to incorporate into vulnerability management operational services,</li><li>Creation and maintenance of technology documentation for support and engagement,</li><li>Contribute to a strong team ethic and spirit to deliver timely, fit for purpose security deliverables against business requirements,</li><li>Act as a specialist champion to further the direction and strategy set by the IT Security Team,</li><li>Work closely with the IT Security Senior Management Team members to continuously improve the services operated,</li><li>Act as a Vulnerability management champion and work closely with all relevant teams ensuring timely creation and resolution of reported items. This will include scheduling work with the engineering teams for the expansion of vulnerability services and then ensuring those are incorporated into the regular operational service.</li></ul>
<h3>What we’re looking for</h3>
<ul>
<li>Education in a relevant technical subject to at least masters degree level (MSc Information Technology or similar)</li><li>At least 5 years’ experience in IT Security and thereby able to demonstrate a high level of technical ability in implementation, design and review roles</li><li>High technical knowledge of security across multiple technologies and a current understanding of their effective operation of security technologies - with particular focus on Vulnerability Management tooling.</li><li>Familiar with industry standard methods, and security practices.</li><li>Familiar with current techniques and toolsets</li><li>Worked with industry standard processes relating to service, change management and governance, such as ITIL incident and change management, Prince, Patch Management, Data Centre processes, PCI DSS and COBIT / COSO based controls.</li><li>Broad and demonstrable experience of working with a diverse set of stakeholders, applying technology capability for business benefit.</li></ul>
<h3>What’s in it for you?</h3>
<ul>
<li>Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow. </li><li>Flexibility: A hybrid work policy.</li><li>Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks.</li><li>Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage. </li><li>Well-being: Personal development, coaching &amp; fitness with our dedicated partners.</li><li>Vacation: Five weeks of paid leave per year, in addition to national holidays and rest &amp; relaxation (RTT) days.</li><li>High tech: Access to high performance office equipment and gadgets, including Apple products. </li><li>Transport: Ledger reimburses part of your preferred means of transportation .</li><li>Discounts: Employee discount on all our products.</li></ul>We are an equal opportunity employer for all without any distinction of gender, ethnicity, religion, sexual orientation, social status, disability or age.

Paris

IT Security Vulnerability Management

Coalfire

About CoalfireCoalfire is on a mission to make the world a safer place by solving our clients’ toughest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world. But that’s not who we are – that’s just what we do.We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.  And we’re growing fast.We’re looking for a Senior Consultant to support our Technology team. Position SummaryThe Senior Consultant will work as part of a team assessing the security and compliance of client firms against regulatory and industry requirements and standards, and against security best practice frameworks. This role will have an expert understanding of framework requirements, perform audit/assessments, and develop reports for clients. They will work closely with Project Managers, Directors and other Delivery team members to effectively manage project timelines and deliverables A Senior Consultant at Coalfire will help enhance our clients’ security posture, working with a wide range of clients to ensure that business and customer data is protected. This role will evaluate the design and effectiveness of technology controls throughout the business cycle and will help identify performance improvement opportunities. As a senior member of the team, this role will also be responsible for enhancing engagement methodology, improving internal processes and overseeing and reviewing the work of Associates and Consultants. This role facilitates Security Control Assessments and other advanced-level monitoring activities, often within cloud-based environments. To succeed, he/she will need a strong understanding of technical and non-technical security related system controls and an understanding of the various testing methods utilized to ascertain the effectiveness of those controls. The role works in a team atmosphere with an experienced Technical Project Lead, and is assigned technical sections and expected to create client-ready deliverables.
<h3>What You'll Do:</h3>
<ul>
<li>Lead audits/assessments including audit plan preparation, review of documentation and evidence, evaluation of procedures, and client interviews. </li><li>Maintain strong depth of knowledge in one or more cybersecurity frameworks.</li><li>Prepare, review and approve assessment reports.</li><li>Manage priorities, tasks and hours on projects in conjunction with the project manager to achieve delivery utilization targets.</li><li>Ensure quality products and services are delivered on time.</li><li>Escalate client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue </li><li>Provide mentorship to team members in areas of audit, assessment, technical review and writing. </li><li>Interface with clients through entire engagement, interacting with all levels of client organizations</li><li>Establish and maintain positive collaborative relationships with clients and stakeholders</li><li>Continuous professional development in maintaining industry specific certifications. Maintains strong depth of knowledge in the practice area. </li><li>Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables. </li><li>Establish account relationships and identifies upsell and cross sell opportunities and escalates to sales.</li><li>Draft audit programs that sufficiently address both the required objectives of the regulatory body and the complexity of the client environment</li><li>Lead interview and inquiry walkthroughs with clients to determine the conformity of environments against stated requirements</li><li>Assess security vulnerabilities against the appropriate security frameworks</li><li>Pursue and corroborates conclusions derived from inquiry procedures with client while ensuring diligent interview notes are captured </li><li>Offline and remote evidence inspection of client provided documentation; appropriately mark artifacts requiring follow-up or additional clarification </li><li>Educate and interpret compliance activities for clients</li><li>Understand how to apply quality standards and adheres to a minimum benchmark for quality assurance throughout the documentation of each work product or deliverable</li><li>Provide advice to customers on issues affecting the scope of work in a manner that provides additional value</li><li>Develop documentation and author recommendations associate with your findings on how to improve the customer’s security posture in accordance with appropriate controls</li></ul>
<h3>What You'll Bring:</h3>
<ul>
<li>Expertise in security frameworks and regulatory requirements (such as SOC 2, ISO, NIST, COBIT, HIPAA/HITECH, HITRUST or PCI).</li><li>Experience working with technologies hosted via cloud computing environments (e.g., Amazon Web Services, Microsoft Azure, Google Cloud Platform</li><li>The ability to evaluate the design and effectiveness of technology controls throughout the business cycle.</li><li>Demonstrated ability to structure and lead projects successfully</li><li>Strong written and verbal communication skills, with the ability to communicate succinctly and instill confidence with internal stakeholders and external customers.</li><li>Excellent Consulting skills: ability to advise and challenge the status quo while building strong relationships</li><li>Ability to build high-trust relationships, rapport and credibility quickly</li><li>Strong personal initiative to appropriately manage time, and manage time of others, to meet deadlines</li><li>Ability to shift focus frequently while maintaining excellent quality</li><li>Skill and will to train and mentor junior staff</li><li>Computer and typing skills that permit rapid data collection and note taking</li><li>Ability to facilitate meetings to small or large groups</li><li>Public speaking and executive presence that solicits attention </li><li>Inquisitive and curious nature with the ability to effectively probe for deeper information</li><li>Diplomatic and broad minded</li><li>Strong technical researcher</li><li>AWS Solution Architect or other CSP certification</li><li>At least one information security certification, such as CISSP, CISA, or CIA (or willing to obtain one of these certifications)</li><li>Bachelor's degree (four-year college or university) or equivalent combination of education and work experience. Degree preferably in Information Systems, CIS, MIS or IT</li></ul>Why you'll want to join usAt Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like flexible time off, certification and training reimbursement, and comprehensive insurance options. At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $86,000 to $148,000 based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs.This can be a remote position (must be located in the United States). #LI-HW1#LI-Remote

Denver

Senior Consultant, Cloud Security Assurance- SOC 2 | Remote US

About CoalfireCoalfire is on a mission to make the world a safer place by solving our clients’ toughest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world. But that’s not who we are – that’s just what we do.We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.  And we’re growing fast.We’re looking for a Senior Consultant to support our Healthcare Security Assurance Technology team. Position SummaryAs a Senior Consultant you will work as part of a team assessing the security and compliance of client firms against regulatory and industry requirements and standards, and against security best practice frameworks. You will have an expert understanding of framework requirements, perform audit/assessments, and develop reports for clients. You will work closely with Project Managers, Directors and other Delivery team members to effectively manage project timelines and deliverables Senior Consultants at Coalfire will help enhance our clients’ security posture, working with a wide range of clients to ensure that business and customer data is protected. You will evaluate the design and effectiveness of technology controls throughout the business cycle and will help identify performance improvement opportunities. As a senior member of the team, you will also be responsible for enhancing engagement methodology, improving internal processes and overseeing and reviewing the work of Associates and Consultants. You will facilitate Security Control Assessments and other advanced-level monitoring activities, often within cloud-based environments. To succeed, he/she will need a strong understanding of technical and non-technical security related system controls and an understanding of the various testing methods utilized to ascertain the effectiveness of those controls. As as senior consultant you will work in a team atmosphere with an experienced Technical Project Lead, and is assigned technical sections and expected to create client-ready deliverables.
<h3>What You'll Do</h3>
<ul>
<li>Lead audits/assessments including audit plan preparation, review of documentation and evidence, evaluation of procedures, and client interviews. </li><li>Maintain strong depth of knowledge in one or more cybersecurity frameworks.</li><li>Prepare, review and approve assessment reports.</li><li>Manage priorities, tasks and hours on projects in conjunction with the project manager to achieve delivery utilization targets.</li><li>Ensure quality products and services are delivered on time.</li><li>Escalate client and project issues to management in a timely manner to inform and engage the necessary resources to address the issue </li><li>Provide mentorship to team members in areas of audit, assessment, technical review and writing. </li><li>Interface with clients through entire engagement, interacting with all levels of client organizations</li><li>Establish and maintain positive collaborative relationships with clients and stakeholders</li><li>Continuous professional development in maintaining industry specific certifications. Maintains strong depth of knowledge in the practice area. </li><li>Collaborate with project managers, quality management, sales and other delivery team members to drive customer satisfaction and meet project deliverables. </li><li>Establish account relationships and identifies upsell and cross sell opportunities and escalates to sales.</li><li>Draft audit programs that sufficiently address both the required objectives of the regulatory body and the complexity of the client environment</li><li>Lead interview and inquiry walkthroughs with clients to determine the conformity of environments against stated requirements</li><li>Assess security vulnerabilities against the appropriate security frameworks</li><li>Pursue and corroborates conclusions derived from inquiry procedures with client while ensuring diligent interview notes are captured </li><li>Offline and remote evidence inspection of client provided documentation; appropriately mark artifacts requiring follow-up or additional clarification </li><li>Educate and interpret compliance activities for clients</li><li>Understand how to apply quality standards and adheres to a minimum benchmark for quality assurance throughout the documentation of each work product or deliverable</li><li>Provide advice to customers on issues affecting the scope of work in a manner that provides additional value</li><li>Develop documentation and author recommendations associate with your findings on how to improve the customer’s security posture in accordance with appropriate controls</li><li>Travel to meet with clients as needed up to 25%</li></ul>
<h3>What You'll Bring</h3>
<ul>
<li>The ability to evaluate the design and effectiveness of technology controls throughout the business cycle</li><li>Demonstrated ability to structure and lead projects successfully</li><li>Strong written and verbal communication skills, with the ability to communicate succinctly and instill confidence with internal stakeholders and external customers</li><li>Excellent Consulting skills: ability to advise and challenge the status quo while building strong relationships</li><li>Ability to build high-trust relationships, rapport and credibility quickly</li><li>Strong personal initiative to appropriately manage time, and manage time of others, to meet deadlines</li><li>Ability to shift focus frequently while maintaining excellent quality</li><li>Skill and will to train and mentor junior staff</li><li>Computer and typing skills that permit rapid data collection and note taking</li><li>Ability to facilitate meetings to small or large groups</li><li>Public speaking and executive presence that solicits attention </li><li>Inquisitive and curious nature with the ability to effectively probe for deeper information</li><li>Diplomatic and broad minded</li><li>Strong technical researcher</li><li>Expertise in security frameworks and regulatory requirements (such as SOC 2, ISO, NIST, COBIT, HIPAA/HITECH, HITRUST or PCI)</li><li>Experience working with technologies hosted via cloud computing environments (e.g., Amazon Web Services, Microsoft Azure, Google Cloud Platform</li><li>Bachelor's degree (four-year college or university) or equivalent combination of education and work experience. Degree preferably in Information Systems, CIS, MIS or IT</li></ul>
<h3>Bonus Points</h3>
<ul>
<li>AWS Solution Architect or other CSP certification</li><li>At least one information security certification, such as CCSFP, CISSP, CISA, or CIA (or willing to obtain one of these certifications)</li></ul>Why you'll want to join usAt Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like flexible time off, certification and training reimbursement, and comprehensive insurance options. At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $86,000 to $148,000 based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participate in annual incentive, commission, and/or recognition programs.This can be a remote position (must be located in the United States). #LI-HW2#LI-Remote

Senior Consultant, HITRUST Assurance | Remote US

Apply to Cobit Cyber Security Jobs in companies remotely and near you. New Cobit Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Sr Information Security Analyst - Risk Management at Rubrik	Full Time CISM Audit Analyst Manager
Security Analyst (Privacy) at PEAK6	Full Time Analyst CCPA CIPP Cobit
IT Security Vulnerability Management at Ledger	Manager Cobit Crypto Golangvernance PCI
Senior Consultant, Cloud Security Assurance- SOC 2 \| Remote US at Coalfire	Remote Full Time Consultant Audit Manager
Senior Consultant, HITRUST Assurance \| Remote US at Coalfire	Remote Full Time Consultant Audit Manager

Cobit Cyber Security Jobs

0 Cobit Cyber Security Jobs. Page 1 of 1

5 closed cobit cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cobit Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Cobit Cyber Security Jobs

0 Cobit Cyber Security Jobs. Page 1 of 1

5 closed cobit cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cobit Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter