Keyfactor, Inc.

Title: Security Compliance Analyst
Location: Barcelona, Spain
Job Function: Compliance
Employment Type: Full-Time
Industry: Enterprise Software
About the position 
We at Keyfactor are looking to hire a Security Compliance Analyst to join our fast-growing Cloud Operations and Compliance department. Security and Compliance works with all areas of the business, standing on the front lines to protect and enable fast, secure growth. The Security Compliance Analyst position will directly assist the Cloud Operations and Compliance Teams with the internal and external security and compliance responsibilities.
The position is based in Barcelona office with flexibility to work in hybrid setting when necessary. Applicants must hold Valid Right to Work in Spain to apply for this position.
RESONSIBILITIES
<ul>
<li>Participate in the collection of evidence for various audits and assessments (e.g., SOC, ISO27001, etc.)</li>
<li>Working with Keyfactor’s team members, suppliers, and business partners to ensure adherence to established Information Security policies</li>
<li>Communicating with the organization, including training, regarding information security policy implementations and technical measures</li>
<li>Consulting with all levels of the organization on information security control implementations and alignment with industry standards and best practices</li>
<li>Participate in internal risk assessments and audits</li>
<li>Responding in a timely manner to customers’ vendor risk assessments, information security questionnaires and evaluations</li>
</ul>
SKILLS AND QUALIFICATIONS
<ul>
<li>Fundamental technical troubleshooting and problem-solving skills</li>
<li>Formal industry and regulatory audit execution such as SOC 2, GDPR, CCPA, ISO 27001, PCI DSS, FedRAMP, and/or Sarbanes-Oxley</li>
<li>Information Security Policy composition, maintenance, and implementation experience</li>
<li>Executing risk management and treatment plans</li>
<li>Multi-tasking and prioritization involving complex technical and policy-related subjects</li>
<li>Currently maintains or is in the process of obtaining industry security certifications (e.g., CISSP, CEH, CISM, CISA, CIPT, etc.)</li>
<li>Basic systems administration capabilities (e.g., Windows Server, Active Directory user accounts, password management, security groups, etc.)</li>
</ul>
COMPENSATION
Salary will be commensurate with experience.
CULTURE, CAREER OPPORTUNITIES AND BENEFITS
We build teams that continually strive to get better than the day before. You will be challenged daily and given opportunities to grow personally and professionally. We balance autonomy and structure to create an entrepreneurial environment to spur creativity and new ideas. A few initiatives that make our culture special include:
<ul>
<li>Comprehensive benefit coverage</li>
<li>Dedicated employee focused ambassadors via Key Contributor &amp; Culture Committee</li>
<li>DIVERSE Commitment</li>
<li>Global Volunteer Day</li>
<li>Flexible time off</li>
<li>Monthly Cross Functional meetings</li>
<li>Monthly Leadership Development meetings</li>
<li>Monthly All Hands meetings – followed by group gatherings</li>
<li>Second Friday’s (the office is closed on the second Friday of every month)</li>
<li>The Keyfactor Alliance Program</li>
<li>Weekly Feedback Snapshot</li>
</ul>
OUR CORE VALUES
Our core values are extremely important to how we run our business and what we look for in every team member:
<ul>
<li>Trust is paramount – We deliver security software and solutions where trust is of the highest importance for our customers. We are honest and a trusted partner in every aspect of business.</li>
<li>Customers are core - We strategize, operate, and execute through a customer-centric view. We prioritize the security interests of our customers, and we act as if their data were our own.</li>
<li>Innovation never stops, it only accelerates - The speed of change is accelerating. We are committed, through investment and focus, to stay ahead of the innovation curve.</li>
<li>Deliver with agility - We thrive in high paced and continually changing environments. We navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
<li>Keyfactor is a proud equal opportunity employer. navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
</ul>

Keyfactor is a proud equal opportunity employer.

Barcelona

Security Compliance Analyst

Kin + Carta

At Kin + Carta, we’ve got opportunities to offer you — for growth, for leadership, for big, world-changing impact and for, dare we say it, fun. We are a global workforce that is committed to building a world that works better for everyone. And that starts with our Kin. That’s why we’re proud of: 
<ul>
<li><a href="https://www.kinandcarta.com/en-us/careers/life-at-kin-and-carta/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">The life we create within our virtual walls, every day</a></li>
<li><a href="https://www.kinandcarta.com/en-us/insights/2022/05/why-work-for-a-b-corp/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">Being B Corp certified</a></li>
<li><a href="https://www.kinandcarta.com/en-us/insights/2022/04/2022-womens-choice-award/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">Our honor as a “Best Company to Work For” by Women's Choice Award</a></li>
</ul>
<h3>The role</h3>
The ideal Americas Information Security Officer for Kin + Carta is innovative, passionate about global information security with both policy and technical experience. This person looks to continually learn, and enjoys sharing expertise. Strong verbal and written communication are a must. Experience working with HITRUST, or Nessus is a plus.

<h3>Role responsibilities</h3>
<ul>
<li>Pursue infosec excellence for the region with the continuous development and management of K+C InfoSec standards to ensure compliance for HITRUST, PCI-DSS, ISO 27001 and other required controls.</li>
<li>Perform internal audits on information security in line with international standards, which includes but not restricted to HITRUST</li>
<li>Security assess new and current suppliers - plan, organize and review Digital implementations, tools, APIs and platforms. </li>
<li>Support the completion of stakeholder infoSec schedules for RFPs, MSAs, delivery and project teams, by resolving project queries and approval of security requirements </li>
<li>Contribute to the InfoSec Risk Register and collaborate on treatment of risks tailored to the needs of the region. Manage and track mitigations, remediations and compensating controls.</li>
<li>Completing Information Security assessments from external parties in a timely manner</li>
<li>Contribute to the performance and improvement of the ISMS</li>
<li>Establish and review monitoring and logging process and standards </li>
<li>Designing, delivering and monitoring InfoSec training and awareness</li>
<li>Reviewer and approver of ISMS documentation </li>
<li>Collaborate with K+C and CDS, providing information security consultancy, strategy and implementation planning along with the prioritization of the highest impact projects </li>
<li>Joint responsibility with the Digital Defense team for all BAU tickets and tasks and recording time and tag allocation.</li>
</ul>

<h3>Minimum qualifications</h3>
We want all new hires to succeed in their roles at Kin + Carta. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Minimum Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply.
<ul>
<li>Experience in a security role with the emphasis on risk, policy and governance</li>
<li>ISMS Documentation Development</li>
<li>A working understanding of security frameworks or methodologies, HITRUST and/or ISO27001, NIST, CIS</li>
<li>Exposure to Enterprise Security tools AV, Vulnerability, IAM, SSO.</li>
<li>Continuous improvement with activities that stretch you beyond your job role, an opportunist who finds the positive side of a challenge.</li>
<li>Critical thinking skills with a mindset that considers solutions prior to presenting challenges</li>
</ul>

<h3>Preferred qualifications</h3>
<ul>
<li>BS in Computer Science, or a related field</li>
<li>Certified CSF Practitioner or training towards</li>
<li>CompTIA Security+ Certification </li>
<li>Microsoft Certified Cybersecurity</li>
<li>CISSP, CISM or equivalent training</li>
<li>Experience working with international security standards  </li>
</ul>

<h3>About Kin + Carta</h3>
Kin + Carta is a global digital transformation consultancy committed to working alongside our clients to build a world that works better #ForEveryone. Our 2,000 curious minds make creative connections between people, data and technology to create connected outcomes across the full lifecycle of the product and platform ecosystems.
We’re makers, builders and creators by nature, and we come to work every day to build experiences for some of the world’s most influential companies. We help businesses accelerate their digital roadmap, rapidly innovate, modernize their systems, enable their teams and optimize for continued growth. 
We are a technology business with trust and human connection at its heart. <a href="https://www.kinandcarta.com/en-us/social-responsibility/" rel="noopener noreferrer nofollow ugc" target="_blank">As a Certified B Corp</a>, our triple bottom line focus on people, the planet and profit is at the core of everything we do.
We welcome our Kin to show up as their authentic selves every day. Because this is so important to us, Kin + Carta is proud to be an equal opportunity employer. To read further about our commitment to Inclusion, Diversity, Equity and Awareness, check out the <a href="https://www.kinandcarta.com/en-us/idea/" rel="noopener noreferrer nofollow ugc" target="_blank">IDEA page</a> on our website. 
If you need accommodations at any point in the application or interview process, please let us know.

United States

Americas Information Security Officer

Sidetrade

Sidetrade, one of the leading European AI Software companies, is on an exciting mission. Together we are transforming the customer journey. We empower marketing, sales and finance teams to grow sales and accelerate cash. When you combine our powerful technology and massive datasets with our creative and smart people, anything is possible.Aimie, our intelligent technology, recognizes customer behavior patterns, makes immediately actionable recommendations and get results:<ul> <li>Increase your sales and marketing effectiveness </li> <li>Develop and retain your customer base</li> <li>Accelerate Cash generation</li> </ul>We are looking for a results-driven Chief Information Security Officer who will responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected.Some of the things you'll be doing include…<ul> <li>Identify information security and protection goals, objectives and metrics consistent with corporate strategic plan.</li> <li>Manage initiatives to design, configure, implement and test strategic security system solutions to address complex technical and business requirements</li> <li>Support and coordinate activities related to security audits</li> <li>Partner with leaders across the company to ensure that corporate information security projects receive appropriate prioritization and resources.</li> <li>Partner with business stakeholders across the company to raise awareness of risk management concerns</li> <li>Manage and maintain the Information Security Management System (ISO27001)</li> <li>Lead a team responsible for developing, implementing and supporting company-wide security initiatives.</li> </ul>More about you...<ul> <li>10 years of experience in risk management and information security </li> <li>Certified ISO27001 Implementer and proven track record in driving a company to follow the framework and guidelines of ISO27001</li> <li>Knowledge of common information security management frameworks, especially ISO27001</li> <li>Excellent written and verbal communication skills</li> <li>Innovative thinking and leadership with an ability to lead and motivate cross-functional, interdisciplinary teams</li> <li>Experience with contract and vendor negotiations</li> <li>Master Degree in business administration or a technology-related field required. </li> <li>Fluent in both French and English</li> </ul>

Boulogne-Billancourt

France

Chief Information Security Officer (RSSI)

Silent Eight

At Silent Eight, we develop our own AI-based products to combat financial crimes that enable things like money laundering, the financing of terrorism, and systemic corruption. We’re a leading RegTech firm working with large international financial institutions such as Standard Chartered Bank and HSBC. Join us and help make the world a safer place! Who are we looking for
Silent Eight is looking for an adept and zealous Head of IT Security to join our growing organization. This person will work closely with our C-Suite and help Silent Eight align a prudent security strategy to our business strategy. The Head of IT Security will employ their subject matter expertise and business acumen to create a framework that helps our organization scale while being constantly mindful of risk and the ever-changing landscape of Information Security.
Tasks
<ul>
<li>Advises and guides senior management on developing and implementing the Silent Eight security strategy.</li>
<li>Partners with technology leads and the operational infrastructure security team on identifying and implementing appropriate security controls to meet customer, regulatory, statutory, and compliance requirements.</li>
<li>Is constantly assessing and evaluating the efficiency of current state strategies and tools; keeps abreast of emerging trends, and anticipates future demands.</li>
<li>Identifies opportunities to enhance Silent Eight’s competitiveness and security maturity through the adoption of security-focused certifications and standards.</li>
<li>Indirectly supports sales by engaging and consulting with customer security teams.</li>
<li>Implements, maintains, develops, and tests the company-wide security awareness and training program.</li>
</ul>

Our requirements:
<ul>
<li>Proven track record of designing strategies and roadmaps for IT security and governance </li>
<li>Background of implementing and managing information security in a global commercial environment</li>
<li>Strong experience designing and implementing security control frameworks in a corporate environment and ideally in a global corporate environment</li>
<li>Ability to present technical materials to diverse stakeholder groups; can engage effectively with executives of large enterprises on both technical and non-technical matters</li>
<li>Experience with industry compliance frameworks (e.g., SOC, PCI-DSS, ISO 27017/27018, GDPR, C5, SecNumCloud, ENS)</li>
<li>Ability to work effectively with a cross-functional and geographically dispersed team and customer base</li>
<li>Experience in obtaining, managing and maintaining an ISO27001 certification</li>
</ul>

Why join us?
<ul>
<li>Your work will impact how the biggest banks worldwide stop money laundering and terrorism financing activities. But more than just banks, you will play a part in fighting the human cost of financial crime, a cause at the core of our mission and beliefs.</li>
<li>You’ll be an investor in our company and share in our success as part of our attractive employee stock ownership plan.</li>
<li>You will be co-creating our business solutions.</li>
<li>We firmly believe in flexibility and trust that you can perform your rolewherever you choose to</li>
<li>We cherish a diverse and multicultural atmosphere in regular get-togethers just for fun.</li>
</ul>
Benefits:
<ul>
<li>Employment Type: B2B or Contract of Employment</li>
<li>Employee Stock Options</li>
<li>Paid days to balance your work and life in a way that suits you best</li>
<li>Location: Fully remote forever </li>
</ul>Our culture
You will be co-creating our business solutions
We believe that your feedback allows us to create the best solutions as well as adjusted work culture. You will have a real impact on the growth of the company and the product we develop. 
Experienced team
We aren’t your run-of-the-mill tech start-up. At Silent Eight, everyone is a leader in their own field with perspective and experience shared across teams and departments.
Development-centric
Because learning never ends, we empower our employees to invest in themselves. We provide a range of resources such as paid Development Days, in-house training, lunch-and-learns, etc. to make sure our employees are continuing to grow each day.  
Team building events
We know that our success is only possible if we work together as a team. We are a group of passionate individuals united by a common mission. Therefore we like to meet together regularly to connect not just as coworkers, but as human beings, whether it’s at an offsite in Dubai or a weekly “Tea Time” to catch up. 
100% remote work forever
We are not new to working remotely. In fact, we’ve been doing it since 2013 and we know how to make you feel supported, connected, and included. We believe that the freedom to choose where you work from is important to finding the journey that is right for you.
Don’t wait! Join our team today! 
Silent Eight is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or other classification protected by applicable federal, state or local law.

United Kingdom

Head of IT Security

KOHO

About KOHOKOHO’s purpose is to empower Canadians to build a great financial foundation with products that are radically transparent and easy to manage. Our journey began in 2014, and we have since built a community of over 600,000 users. Leading investors around the globe believe in our vision, and we’ve successfully raised over $320M to make our vision a reality. The KOHO collective has grown to 300+ employees to date. Discover our culture <a href="https://www.koho.ca/culture/" rel="noopener noreferrer nofollow ugc" target="_blank">here</a> and get the inside scoop from our team <a href="https://www.linkedin.com/posts/koho_whats-it-like-to-work-at-koho-activity-6919662895492403200-6MuY/?utm_source=linkedin_share&amp;utm_medium=member_desktop_web" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>! About the RoleReporting to the Director, IT and Security,  we are looking for a manager to ensure KOHO products meet security, privacy, and resiliency requirements.  This position will lead product security and collaborates with Tech/Engineering, Product, Risk, and Legal teams. You will work closely with Product teams to understand KOHO product roadmaps and strategy. Lead and develop KOHO’s product privacy and security strategy across all product linesUnderstand product features that impact the privacy and security for our users across all products.  You’ll be a foundational security team member and have significant responsibilities that make an impact on KOHO’s security posture. 
<h3>What you'll do</h3>
<ul>
<li>Align security strategy with the product roadmap to ensure user information and privacy is protected</li><li>Facilitate discussion and implementation of security strategy among project stakeholders across the stakeholder groups</li><li>Ensure security compliance and governance requirements are implemented by product and tech teams</li><li>Serve as the subject matter security expert to internal business stakeholders on go-to-market strategy, confidentiality, and additional stages of product development.</li><li>Maintains strong knowledge of ongoing security threats, remediation and operational standard methodologies</li><li>Work and collaborate cross-functionally with Product, Tech, Risk and Legal teams to establish consistent security and privacy for all KOHO products and services</li><li>Participate on incidents related to fraud and abuse of our products </li><li>Develop processes to remediate product risks and drive remediation of vulnerabilities across Tech and Product teams</li><li>Test and recommend tools for Tech and Security teams to implement that reduce product attack surface</li><li>Develop OKRs by collecting, analyzing, and summarizing data and trends.</li><li>Report progress to leadership and stakeholders for all tracked metrics.</li></ul>
<h3>Who You Are</h3>
<ul>
<li>You’ll need at least 3 years experience as a Product Security Engineer or Manager</li><li>Extensive experience with cloud and application architecture and security vulnerabilities</li><li>Hands-on experience with developing product security roadmaps and developing implementation plans</li><li>Demonstrated experience with implementing security and privacy features </li><li>Previous experience influencing Product and Engineering teams </li><li>Experience with security frameworks and standards such as PCI-DSS, SOC2, and ISO27001</li><li>Bachelor’s degree in Computer Science, IS, Security, or Engineering</li><li>Experience working in credit, banking, payment card processing and/or finance preferred</li></ul>What’s In It For You?We invest time and resources into making sure KOHO is as good as the people we hire. Here are some of the reasons we attract and keep the best people:• Balance Your Life - Company-wide Summer wellness days, Winter holiday closure, unlimited Personal Days, a wellness spending account, and maternity &amp; parental leave top-up.• Remote First - Work from anywhere in Canada with a budget to set up your home office• Level Up - Access to 3 in-house certified performance coaches and an annual training budget. • Reach Your Goals - Salary assessments twice per year, GRSP matching.• The KOHO Culture - We have won 7 "Great Place to Work ®" awards since 2019. The KOHO culture is one of collaboration, creativity, and diverse perspectives. We are committed to building and fostering an inclusive, accessible environment for everyone. If you have any questions, concerns, or requests regarding accessibility needs, please contact peopleaccessibility@koho.ca and the People and Culture team will be happy to help.#LI-Remote #LI-MD2

Canada

America/Yellowknife

Product Security Manager

Apply to Iso27001 Cyber Security Jobs in companies remotely and near you. New Iso27001 Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Compliance Analyst at Keyfactor, Inc.	Full Time CISM Audit Analyst Consulting
Americas Information Security Officer at Kin + Carta	Remote Full Time CISM Comptia Audits
Chief Information Security Officer (RSSI) at Sidetrade	Full Time Chief Contract Audits Finance
Head of IT Security at Silent Eight	Remote Full Time Consulting Contract C
Product Security Manager at KOHO	Remote Full Time Manager Banking Cloud

Iso27001 Cyber Security Jobs

0 Iso27001 Cyber Security Jobs. Page 1 of 1

5 closed iso27001 cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Iso27001 Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Iso27001 Cyber Security Jobs

0 Iso27001 Cyber Security Jobs. Page 1 of 1

5 closed iso27001 cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Iso27001 Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter