Rubrik

Company Description
Rubrik is one of the fastest growing companies in Silicon Valley, revolutionizing data protection and management in the emerging multi-cloud world. We are the leader in cloud data management, delivering a single platform to manage and protect data in the cloud, at the edge, and on-premises. Enterprises choose Rubrik to simplify backup and recovery, accelerate cloud adoption, enable automation at scale, and secure against cyberthreats. Rubrik has raised over $553 million in venture funding, most recently at a valuation of $3.3 billion. We’ve been recognized as a Forbes Cloud 100 Company five years in a row and as a LinkedIn Top 10 startup. 
Information Security - Who We Are
The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our systems, provides awareness education to teams on security best practices for data protection, and ensures data sharing relationships with third parties in order to securely protect Rubrik information.
What You’ll Do
We are looking for an Information Security Program Manager (Risk Management) to be a part of our security risk management team, which focuses on building and supporting a security risk oversight function. Help us elevate and accelerate the maturity of our risk management and compliance capabilities by leading prioritized activities related to our security risk management strategy. The successful candidate will need to build and maintain strong cross-functional relationships across the company. To achieve this you must have excellent leadership, communication, and decision making skills.
Responsibilities:
<ul>
<li>Gather security risk data, perform risk ranking qualitative and quantitative analysis.</li>
<li>Analyze security risks using real-world security data and systems automation.</li>
<li>Frequently document and communicate security risks, collaborating with a range of stakeholders from individual contributors to senior leadership levels.</li>
<li>Contribute to security program development by identifying new or emerging opportunities to apply security principles and technologies.</li>
<li>Analyze the security of new or existing applications, software, or specialized utility programs and provide risk recommendation.</li>
<li>Support strategic and technical initiatives, perform Operational Risk Assessments, manage Risk Acceptance activities, develop risk posture and remediation recommendations.</li>
<li>Monitor and evaluate security measures to protect against reasonably anticipated threats or hazards to the privacy, security or integrity of protected information.</li>
<li>Be an integral member of the risk and compliance team to build and maintain strong cross-functional relationships across the company to aid in achieving consensus, expectation setting, training and awareness, and promote consistency and improvement in our processes.</li>
<li>Contribute to the production and improvement of the content, quality, and timing of security governance, risk and compliance analysis and reporting.</li>
<li>Own and drive activities related to the remediation of technical security and compliance risks with cross-functional teams, including, but not limited to, leading meetings, working to assign, track work items, and producing reports.</li>
</ul>
Preferred Qualifications:
<ul>
<li>8+ years of related work experience in Information Security Governance, Risk and Compliance (GRC) or relevant Compliance roles in the tech industry.</li>
<li>Have driven several security and/or operational risk processes within a company with a modern risk oversight function.</li>
<li>Experience supervising the design and operation of risk &amp; control assessments to target different levels of information (e.g., RCSA vs. a service level assessment).</li>
<li>Experience with risk registers and helping prioritize security related work.</li>
<li>Can implement a solution (design), operational plan, and roadmap to achieve goals.</li>
<li>Experience implementing agile use cases in a GRC technology solution.</li>
<li>Executive presence: can represent a vision and build consensus across a variety of partners.</li>
<li>Knows how to estimate work effort and incubate skill sets to achieve team goals.</li>
<li>Has advanced knowledge of common security risks, vulnerabilities, and threats and can escort these issues through triage / risk treatment conversations.</li>
<li>Validated understanding of relevant information security frameworks, including related regulatory compliance requirements, such as ISO 27001/2 (including ISO 27017 &amp; 18), FedRAMP, SOC 2 Trust Services Criteria, CIS Top 20, PCI DSS, NIST CSF / 800-53, HIPAA.</li>
<li>Strong knowledge of audit and risk management methodologies, such as SOX, COBIT, NIST RMF / 800-37 / 800-30.</li>
<li>Strong understanding of risk quantification principles and experiencing implementing FAIR-like approach for quantifying and reporting risks.</li>
<li>Hands-on experience with data analytics and business intelligence dashboarding tools (e.g., Power BI) and with agile project management tools (e.g., Jira).</li>
<li>Detail-oriented and able to understand the bigger picture by using your technical expertise and problem solving abilities to prioritize and manage blocking issues.</li>
<li>Ability to ramp up quickly and learn new technologies with minimal lag time.</li>
<li>Able to discuss issues at technical and business levels with audiences of various backgrounds.</li>
<li>Experience in a high growth business environment is a plus.</li>
<li>Bachelor’s degree in Security, Computer Science, Management Information Systems or related field preferred.</li>
<li>SaaS and data management industry experience is a plus.</li>
<li>Professional certifications in Information Security or Risk Management (e.g., CISA, CISM, CRISC, CGEIT, CSX-P, CISSP, CCSK) is a plus.</li>
</ul>About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Bangalore

Sr Information Security Analyst  - Risk Management

Netskope

About Netskope
Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security. 

Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Melbourne, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events (pre and hopefully post-Covid) and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive. Visit us at <a href="https://www.netskope.com/company/careers" rel="noopener noreferrer nofollow ugc" target="_blank">Netskope Careers.</a> Please follow us on <a href="https://www.linkedin.com/company/netskope" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a> and Twitter<a href="https://twitter.com/netskope" rel="noopener noreferrer nofollow ugc" target="_blank">@Netskope</a>.
<h3>What You’ll be responsible for in this role – Your contribution &amp; career journey</h3>
We are seeking a Security Operations Center (SOC) Analyst to join a 24x7x365 team of security professionals to monitor, detect, respond, and remediate threats facing our geographically-dispersed on-prem and cloud environments. 
<h3>Position Description</h3>
Serve as a point of contact for escalation of SOC functions. Frequent direct interface with the security teams to advise and coordinate operational activities to include notable threats, active incidents, and situation awareness. As well as coordinate/communicate with senior leadership on notable operational and programmatic issues.
The ideal SOC Analyst will possess a strong multi-disciplinary background. A strong technical aptitude across multiple IT arenas paired with outside-the-box thinking and the skillset to turn conceptual ideas into working solutions is imperative. There will be an extremely strong focus on incident/threat detection and response, Identity and Access Management, networking, and security. This individual will need to be self-motivated and possess a consultative mentality to work with various IT team members, Managers and other Organizational Units. This role reports directly to the SOC Manager in the CISO organization. Frequent managerial level interactions, discussions, and briefings will be expected.
The technical focus of this role is to evaluate multiple existing but independent toolsets and unite them into a single inter-related solutions platform. This role will lead in the interaction with both internal and external industry-elite incident response and security analytics &amp; engineering resources. Key project interactions will include SOC development, Security Operations, GRC, Threat and Vulnerability Management, Identity and Access Management Operations, and alpha/beta testing of emerging security solutions.
A general understanding of the totality of IT architectures and how they interrelate will be required. The successful candidate will be able to both evaluate technical solutions from the big picture perspective and actually drill down and configure the solutions independently.
<h3>Qualifications</h3>
Minimum Qualifications:
<ul>
<li>Minimum of 3 years in an enterprise-scale IT engineering or analyst role, with at least 1 years in a SOC </li>
<li>Act as incident commander during high severity incidents, if necessary.</li>
<li>Operate autonomously to further investigate and escalate in accordance with protocols SLAs.</li>
<li>Uphold and enforce established runbooks and processes. </li>
<li>Report SOC related metrics </li>
<li>Responsible for coaching/mentoring for all SOC team members</li>
<li>Identify SOC capability enhancement ideas for continuous improvement. Prioritize and assign resources to support enhancement projects and special requests.</li>
<li>Work with subject matter experts across the program to transform the maturity of the SOC to an industry-leading organization. </li>
<li>Demonstrate proficiency in incident response, kill chain oriented analytics, and identification of IoC’s.</li>
<li>Evaluate, tune, integrate, and optimize existing toolsets to meet monitoring and intelligence sharing requirements.</li>
<li>Understanding of Identity and Access Management technologies such as SSO/MFA/IGA and operations of those technologies</li>
<li>Work directly with Security Operations and Leadership to ensure that the final SOC solutions platform is designed to meet diverse operational goals and initiatives</li>
<li>Identify solution gaps and translate those gaps into vendor-agnostic technical requirements and/or capabilities</li>
<li>Working knowledge on Security technologies like Vulnerability Management, Identity and access management, Malware Detection, SIEM, DLP, SASE, CASB</li>
<li>Bachelor’s Degree in Computer Science, Information Security, Information Systems, or a related field, or equivalent.</li>
<li>Foundation in, and in-depth technical knowledge of, security engineering, computer and network security, authentication, security protocols, and applied cryptography.</li>
<li>Understanding of Cloud Security</li>
<li>Proficient understanding of regulatory and compliance mandates, including but not limited to GDPR, CCPA, Sarbanes-Oxley.</li>
<li>SOAR and other Automation knowledge (Python, bash scripting).</li>
<li>Experienced assessing and escalations to vendors for troubleshooting purposes.</li>
<li>Able to communicate and work with cross-functional teams.</li>
</ul>

Additional Required Qualifications
<ul>
<li>Detects, identifies and mitigates vulnerabilities in systems, including but not limited to databases, applications, network elements and devices, and data storage</li>
<li>Deploy security policies, investigate and evaluate alerts for malicious file execution attempts, and design enhanced protocols aligned with protecting corporate-wide production systems</li>
<li>Utilize various Vulnerability Management tools to scan enterprise for threats due to missed patches and newly identified vulnerabilities and work with various IT verticals to ensure all systems are hardened and patched.</li>
<li>Effectively communicates and influences at all levels of the organization</li>
<li>Lead root-cause analysis efforts to determine improvement opportunities when failures occur. Contribute as lead and SME on incident research and resolution when appropriate, mentoring incident team members.</li>
<li>Manage workload, prioritizing tasks and documenting time.</li>
<li>Provides training, and coaching for Analysts, Technicians, and Engineers in the IT Security</li>
<li>Provides identity management advice and support for network systems and applications. </li>
</ul>
Preferred Qualifications
<ul>
<li>One of the following: CISSP, CEH and or CompTIA Security +, SANS GIAC, CISSP, CRISC, or CISA are highly desired</li>
<li>3+ years of Security Operations and Engineering experience preferred, with</li>
<li>1+ years of work directly in a SOC environment</li>
</ul>




#LI-TS1Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to <a href="https://www.netskope.com/privacy-policy" rel="noopener noreferrer nofollow ugc" target="_blank">Netskope's Privacy Policy</a> for more details.

St. Louis

Security Operations Analyst

SugarCRM

About SugarCRMFrom the very beginning, SugarCRM had a unique vision: to offer a different kind of Customer Relationship Management (CRM). We pioneered the first commercial open-source CRM platform, and now, more than two decades later, are on a mission to provide products and services that make the hard things easier for sales, marketing and customer service teams. In fact, we help mid-market businesses around the globe reach new levels of performance and predictability by letting our award-winning CRM platform do the work.  Our diverse group of worldwide employees are united and driven by a shared passion for our mission, culture, and <a href="https://www.sugarcrm.com/careers/" rel="noopener noreferrer nofollow ugc" target="_blank">values</a>. We treat our employees like humans not line items and are building a culture where your work at Sugar helps fuel personal, professional and business growth – check out our recent ‘<a href="https://www.sugarcrm.com/press-releases/great-place-work-certification/" rel="noopener noreferrer nofollow ugc" target="_blank">Great Place to Work’ certification</a> that we are so proud of. Work/life fit and flexibility for our team matters and together we pride ourselves on solving for our customers, always. What’s more, we empower everyone to do their best work from home, the office, on the road, or anywhere in between.   If you're ready to grow your career and help organizations grow better and faster, you've come to the right place. Find out more about our <a href="https://www.sugarcrm.com/careers/" rel="noopener noreferrer nofollow ugc" target="_blank">SugarCRM careers </a>and how you can become a part of our journey. The Security Governance, Risk &amp; Compliance Analyst (GRC Analyst) will be responsible for leading the day-to-day governance, risk and compliance (GRC) function as part of the Global Information Security department. The analyst’s role will include the creation, management and effectiveness monitoring of policies, standards, procedures and associated controls aligned to frameworks and regulations. The GRC analyst is also tasked with performing risk assessments, assigning ownership of risks to business units, and ensuring those risks are regularly reviewed. The GRC Analyst will play a key part in aligning SugarCRM’s security program with industry standards, ensuring the company operates at a reasonable level of risk, and in turn helping ensure our customers data is kept secure. The GRC Analyst will have, but is not limited to, the following roles and responsibilities:
<h3>Impact you will make in the role:</h3>
<ul>
<li>Serve as a key governance, risk, and compliance SME for corporate and product information security.</li><li>Support compliance initiatives including government regulations, privacy law, and security frameworks such as SOC2, ISO27001, NIST and FedRAMP.</li><li>Define the global security policy, as well as associated standards and procedures.</li><li>Support the third-party risk management and vendor due diligence programs.</li><li>Administer the security GRC toolset, including risk register.</li><li>Co-ordinate risk assessments and internal auditing activities.</li><li>Interact with business units to ensure risks are managed correctly.</li><li>Respond to customer requests relating to RFPs and security and privacy diligence information.</li><li>Work closely with external auditors on certification and attestation activities.</li></ul>
<h3>What you will need to succeed:</h3>
<ul>
<li>BS degree in computing, information security, or a related field. MS is preferred.</li><li>5+ years of information security GRC/audit experience is also acceptable in lieu of a degree.</li><li>Industry certifications preferred – for example CRISC, CISA, CISM, ISO27001 Lead Auditor.</li><li>Strong experience working with security and privacy frameworks including SOC2, ISO27001, SCF (Secure Controls Framework), NIST CSF, and NIST 800 Series.</li><li>Strong experience governing and championing risk management activities in a global organization.</li><li>Strong experience working with data protection and privacy laws including GDPR, CCPA.</li><li>Experience working in a cloud-first and remote-first company.</li><li>Experience using OneTrust, RSA Archer, ServiceNow GRC or equivalent GRC tools.</li><li>Experience with compliance automation is a plus, for example Drata or Vanta.</li><li>Highly organized and motivated, with the ability to work independently as a self-starter.</li><li>Strong communications skills – an ability to communicate complex compliance requirements to business stakeholders and software engineering teams.</li></ul>We understand that no candidate is perfectly qualified for any job. Experience comes in different forms; many skills are transferable; and passion goes a long way. Even more important than your resume is a clear demonstration of dedication, impact, and the ability to thrive in a fluid and collaborative environment. We want you to learn new things in this role, and we encourage you to apply if your experience is close to what we’re looking for. We also know that diversity of background and thought makes for better problem solving and more creative thinking, which is why we're dedicated to adding new perspectives to the team. Benefits and Perks:Beyond a stellar work environment, friendly people, and inspiring work, we have some sweet benefits and perks: - UK Pension Scheme- Private medical and dental insurance- Health &amp;Wellness Reimbursement Program- Unpaid sabbatical leave- Educational Resources - Career &amp; Personal Development Program- Various discount programs (i.e. travel, virtual exercises classes, etc.)- We are a merit-based company with many opportunities to learn, excel and grow your career!#LI-Remote

Based

Security Governance, Risk &amp; Compliance Analyst

Justworks, Inc.

Who We Are
At Justworks, you’ll enjoy a welcoming and casual environment, great benefits, wellness program offerings, company retreats, and the ability to interact with and learn from leaders in the startup community. We work hard and care about our most prized asset - our people.
We’re helping businesses get off the ground by enabling them to focus on running their business. We solve HR issues. We’re data-driven and never stop iterating. If you’d like to work in a supportive, entrepreneurial environment, are interested in building something meaningful and having fun while doing it, we’d love to hear from you.
We're united by shared goals and shared motivations at Justworks. These are best summed up in our company values, which are reflected in our product and in our team.
<a href="https://justworks.com/careers" rel="noopener noreferrer nofollow ugc" target="_blank">Our Values</a>
If this sounds like you, you’ll fit right in.Who You Are
You are a technical expert in security engineering and architecture with a business mindset to influence a strategic, forward-looking security architecture program aligned with Justworks’ risk posture. You enjoy hands-on work of technical security while also helping develop the multi-year strategy.
You are a highly motivated, strong communicator who understands security architecture and engineering. You are someone who has strong collaboration skills with a firm grasp of governance and compliance. This role reports to the Director, Security Architecture &amp; Engineering. 
Your Success Profile
<h3>What You Will Work On</h3>
<ul>
<li>Provide security architecture and engineering guidance and solutions that protect the organization and its products, inclusive of application security, product security, and cloud security</li>
<li>Provide strategic technical and network architectural guidance to senior management and technology project teams related to security</li>
<li>Develop and design security architecture, design, and coding standards across the Justworks infrastructure to promote a standardized set of security requirements, aligning with internal policies and meeting external compliance requirements</li>
<li>Lead technical design reviews to evaluate existing security controls and identify opportunities to enhance the security posture of Justworks</li>
<li>Act as a tools and services advisor, working with engineering and risk teams to build security control requirements</li>
<li>Define secure system development lifecycle (SDLC) principles and map to a security maturity model in-line with Justworks risk posture</li>
</ul>
<h3>How You Will Do Your Work</h3>
As a Staff Security Engineer/Architect, how results are achieved is paramount for your success and ultimately result in our success as an organization. In this role, your foundational knowledge, skills, abilities and personal attributes are anchored in the following:
<ul>
<li>Demonstrated expertise in security strategy, design, and secure coding practices with a focus on scaling solutions for complex enterprises, ideally in a SaaS environment</li>
<li>Technical expert with depth in modern cloud-based security architecture and engineering in an AWS environment </li>
<li>Technical experience with DevOps, Jira, and other agile automation tools</li>
<li>Proven track record as a strong communicator both in written and oral presentations; capable of rapidly creating detailed, yet concise written reports</li>
<li>Strong analytical skills</li>
<li>Exceptional organizational skills</li>
</ul>
In addition, all Justworkers focus on aligning their behaviors to our core values known as COGIS. It stands for:
<ul>
<li>Camaraderie - Day to day you can be seen working together toward a higher purpose. You like to have fun. You’re an active listener, treat people respectfully, and have a strong desire to know and help others.</li>
<li>Openness - Your default is to be open. You're willing to share information, understand other perspectives, and consider new possibilities. You’re curious, ask open questions, and are receptive to thoughts and feedback from others.</li>
<li>Grit - You demonstrate grit by having the courage to commit and persevere. You’re committed, earnest, and dive in to get the job done well with a positive attitude.</li>
<li>Integrity - Simply put, do what you say and say what you'll do. You’re honest and forthright, have a strong moral compass, and strive to match your words with your actions while leading by example. </li>
<li>Simplicity - Be like Einstein: “Everything should be made as simple as possible, but no simpler.”</li>
</ul>
<h3>Qualifications</h3>
<ul>
<li>Minimum of 5 years of experience in information security concepts, common technical security controls, and security architecture design principles</li>
<li>Extensive experience in security architecture, system design and engineering scalable security solutions in a cloud-native (AWS) environment</li>
<li>Experience with secure coding practices and security scanning technologies </li>
<li>Background as a security architect or security engineering with experience implementing DevSecOps</li>
<li>Security Certifications: CISSP, CISM, CRISC, GIAC, CCSP or CEH</li>
</ul>
#LI-KY1Please Note: We believe Justworks has a responsibility to support efforts to get as many people vaccinated as possible. We’re committed to safeguarding the well-being of our employees, their families and the broader community from the risks associated with COVID-19. Because this position requires onsite work, this position will require the successful candidate to show proof of vaccination against COVID-19.  As an equal opportunity employer, Justworks will provide reasonable accommodation to those individuals who are unable to be vaccinated in accordance with its obligations pursuant to applicable federal, state, provincial, and local law. 
Diversity At Justworks
Justworks is committed to maintaining a workplace where diversity of identity, culture, and life experience is the norm and is celebrated authentically and respected consistently. Diversity in our work, our people, and our product drives creativity and innovation, entrepreneurial leadership and integrity, competitiveness, and collaboration throughout our business and in the market. We depend on our differences to make our team stronger, our workplace more dynamic, and our product accessible to all of our customers.
We’re proud to be an equal opportunity employer open to all qualified applicants regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, veteran status, or any other legally protected status. 
<a href="https://justworks.com/blog/black-lives-matter-90-days-later" rel="noopener noreferrer nofollow ugc" target="_blank">Our DEI Commitment</a>

New York

Staff Security Engineer &amp; Architect

Ninja Van

Ninja Van is a late-stage logtech startup that is disrupting a massive industry with innovation and cutting edge technology. Launched 2014 in Singapore, we have grown rapidly to become one of Southeast Asia's largest and fastest-growing express logistics companies. Since our inception, we’ve delivered to 100 million different customers across the region with added predictability, flexibility and convenience. Join us in our mission to connect shippers and shoppers across Southeast Asia to a world of new possibilities. More about us: - We process 250 million API requests and 3TB of data every day.- We deliver more than 1.5 million parcels every day.- 100% network coverage with 1000+ hubs and stations in 6 SEA markets (Singapore, Malaysia, Indonesia, Thailand, Vietnam and Philippines), reaching 500 million consumers.- 600,000 active shippers in all e-commerce segments, from the largest marketplaces to the individual social commerce sellers.- Raised more than US$500 million over five rounds.We are looking for world-class talent to join our crack team of engineers, product managers and designers. We want people who are passionate about creating software that makes a difference to the world. We like people who are brimming with ideas and who take initiative rather than wait to be told what to do. We prize team-first mentality, personal responsibility and tenacity to solve hard problems and meet deadlines. As part of a small and lean team, you will have a very direct impact on the success of the company. You need to have information security governance experience to conduct risk analysis, to identify potential risks and issues. You will be instrumental in driving security awareness, policy and process definition as well as risk management in the organization. 
<h3>Role and responsibilities</h3>
<ul>
<li>Manage IT Security Governance Projects, and track their progress across different BUs </li><li>Build knowledge and coach Business Units Info Security leads, to understand Info Security Governance processes, as well as ensure timely resolution of issues identified in audits and assessments. </li><li>Perform Third Party Security Assessments in time and with consistency across all assessments</li><li>Security Awareness program definition, management and delivery </li><li>InfoSec Metrics collection and definition.</li><li>InfoSec KRI collection and Definition</li><li>Manage IT Security Assessments and work with stakeholders to develop projects/plans to remediate issues</li><li>Define and keep updated the IT Security Audit Issues tracker. Track delivery of Issues identified to closure</li><li>Document and maintain internal SOPs and standards related to IT Security Governance. </li><li>Maintain InfoSec documentation and life cycle. Documents includes policies, standards, SOPs and runbooks.</li></ul>
<h3>Requirements</h3>
<ul>
<li>Minimum 5 years working experience in Information Security Management. </li><li>Degree from Information Technology or equivalent discipline. </li><li>Certification on CISSP / CRISC is preferred. </li><li>Regional experience in this role is preferred. </li><li>Experience in IT Security Consulting and/or IT Security Audit organisations will be a benefit</li><li>Knowledge of overall IT Security domains. </li><li>Ability to define, prioritize and execute processes in a precise and structured manner. </li><li>Excellent communication, presentation and influencing skills.</li></ul>Submit a job applicationBy applying to the job, you acknowledge that you have read, understood and agreed to our Privacy Policy Notice (the “Notice”) and consent to the collection, use and/or disclosure of your personal data by Ninja Logistics Pte Ltd (the “Company”) for the purposes set out in the Notice. In the event that your job application or personal data was received from any third party pursuant to the purposes set out in the Notice, you warrant that such third party has been duly authorised by you to disclose your personal data to us for the purposes set out in the the Notice.

Kuala Lumpur

GRC Specialist, Information Security

Apply to Crisc Cyber Security Jobs in companies remotely and near you. New Crisc Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Sr Information Security Analyst - Risk Management at Rubrik	Full Time CISM Audit Analyst Manager
Security Operations Analyst at Netskope	Full Time CISO Soc Analyst Comptia Analyst
Security Governance, Risk & Compliance Analyst at SugarCRM	Remote Full Time CISM Audit Analyst
Staff Security Engineer & Architect at Justworks, Inc.	Agile Application Security Automation AWS CCSP
GRC Specialist, Information Security at Ninja Van	Audits Cissp Crisc Golangvernance Privacy

Crisc Cyber Security Jobs

0 Crisc Cyber Security Jobs. Page 1 of 1

5 closed crisc cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Crisc Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Crisc Cyber Security Jobs

0 Crisc Cyber Security Jobs. Page 1 of 1

5 closed crisc cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Crisc Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter