Keyfactor, Inc.

Title: Security Compliance Analyst
Location: Barcelona, Spain
Job Function: Compliance
Employment Type: Full-Time
Industry: Enterprise Software
About the position 
We at Keyfactor are looking to hire a Security Compliance Analyst to join our fast-growing Cloud Operations and Compliance department. Security and Compliance works with all areas of the business, standing on the front lines to protect and enable fast, secure growth. The Security Compliance Analyst position will directly assist the Cloud Operations and Compliance Teams with the internal and external security and compliance responsibilities.
The position is based in Barcelona office with flexibility to work in hybrid setting when necessary. Applicants must hold Valid Right to Work in Spain to apply for this position.
RESONSIBILITIES
<ul>
<li>Participate in the collection of evidence for various audits and assessments (e.g., SOC, ISO27001, etc.)</li>
<li>Working with Keyfactor’s team members, suppliers, and business partners to ensure adherence to established Information Security policies</li>
<li>Communicating with the organization, including training, regarding information security policy implementations and technical measures</li>
<li>Consulting with all levels of the organization on information security control implementations and alignment with industry standards and best practices</li>
<li>Participate in internal risk assessments and audits</li>
<li>Responding in a timely manner to customers’ vendor risk assessments, information security questionnaires and evaluations</li>
</ul>
SKILLS AND QUALIFICATIONS
<ul>
<li>Fundamental technical troubleshooting and problem-solving skills</li>
<li>Formal industry and regulatory audit execution such as SOC 2, GDPR, CCPA, ISO 27001, PCI DSS, FedRAMP, and/or Sarbanes-Oxley</li>
<li>Information Security Policy composition, maintenance, and implementation experience</li>
<li>Executing risk management and treatment plans</li>
<li>Multi-tasking and prioritization involving complex technical and policy-related subjects</li>
<li>Currently maintains or is in the process of obtaining industry security certifications (e.g., CISSP, CEH, CISM, CISA, CIPT, etc.)</li>
<li>Basic systems administration capabilities (e.g., Windows Server, Active Directory user accounts, password management, security groups, etc.)</li>
</ul>
COMPENSATION
Salary will be commensurate with experience.
CULTURE, CAREER OPPORTUNITIES AND BENEFITS
We build teams that continually strive to get better than the day before. You will be challenged daily and given opportunities to grow personally and professionally. We balance autonomy and structure to create an entrepreneurial environment to spur creativity and new ideas. A few initiatives that make our culture special include:
<ul>
<li>Comprehensive benefit coverage</li>
<li>Dedicated employee focused ambassadors via Key Contributor &amp; Culture Committee</li>
<li>DIVERSE Commitment</li>
<li>Global Volunteer Day</li>
<li>Flexible time off</li>
<li>Monthly Cross Functional meetings</li>
<li>Monthly Leadership Development meetings</li>
<li>Monthly All Hands meetings – followed by group gatherings</li>
<li>Second Friday’s (the office is closed on the second Friday of every month)</li>
<li>The Keyfactor Alliance Program</li>
<li>Weekly Feedback Snapshot</li>
</ul>
OUR CORE VALUES
Our core values are extremely important to how we run our business and what we look for in every team member:
<ul>
<li>Trust is paramount – We deliver security software and solutions where trust is of the highest importance for our customers. We are honest and a trusted partner in every aspect of business.</li>
<li>Customers are core - We strategize, operate, and execute through a customer-centric view. We prioritize the security interests of our customers, and we act as if their data were our own.</li>
<li>Innovation never stops, it only accelerates - The speed of change is accelerating. We are committed, through investment and focus, to stay ahead of the innovation curve.</li>
<li>Deliver with agility - We thrive in high paced and continually changing environments. We navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
<li>Keyfactor is a proud equal opportunity employer. navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
</ul>

Keyfactor is a proud equal opportunity employer.

Barcelona

Security Compliance Analyst

Rubrik

Company Description
Rubrik is one of the fastest growing companies in Silicon Valley, revolutionizing data protection and management in the emerging multi-cloud world. We are the leader in cloud data management, delivering a single platform to manage and protect data in the cloud, at the edge, and on-premises. Enterprises choose Rubrik to simplify backup and recovery, accelerate cloud adoption, enable automation at scale, and secure against cyberthreats. Rubrik has raised over $553 million in venture funding, most recently at a valuation of $3.3 billion. We’ve been recognized as a Forbes Cloud 100 Company five years in a row and as a LinkedIn Top 10 startup. 
Information Security - Who We Are
The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our systems, provides awareness education to teams on security best practices for data protection, and ensures data sharing relationships with third parties in order to securely protect Rubrik information.
What You’ll Do
We are looking for an Information Security Program Manager (Risk Management) to be a part of our security risk management team, which focuses on building and supporting a security risk oversight function. Help us elevate and accelerate the maturity of our risk management and compliance capabilities by leading prioritized activities related to our security risk management strategy. The successful candidate will need to build and maintain strong cross-functional relationships across the company. To achieve this you must have excellent leadership, communication, and decision making skills.
Responsibilities:
<ul>
<li>Gather security risk data, perform risk ranking qualitative and quantitative analysis.</li>
<li>Analyze security risks using real-world security data and systems automation.</li>
<li>Frequently document and communicate security risks, collaborating with a range of stakeholders from individual contributors to senior leadership levels.</li>
<li>Contribute to security program development by identifying new or emerging opportunities to apply security principles and technologies.</li>
<li>Analyze the security of new or existing applications, software, or specialized utility programs and provide risk recommendation.</li>
<li>Support strategic and technical initiatives, perform Operational Risk Assessments, manage Risk Acceptance activities, develop risk posture and remediation recommendations.</li>
<li>Monitor and evaluate security measures to protect against reasonably anticipated threats or hazards to the privacy, security or integrity of protected information.</li>
<li>Be an integral member of the risk and compliance team to build and maintain strong cross-functional relationships across the company to aid in achieving consensus, expectation setting, training and awareness, and promote consistency and improvement in our processes.</li>
<li>Contribute to the production and improvement of the content, quality, and timing of security governance, risk and compliance analysis and reporting.</li>
<li>Own and drive activities related to the remediation of technical security and compliance risks with cross-functional teams, including, but not limited to, leading meetings, working to assign, track work items, and producing reports.</li>
</ul>
Preferred Qualifications:
<ul>
<li>8+ years of related work experience in Information Security Governance, Risk and Compliance (GRC) or relevant Compliance roles in the tech industry.</li>
<li>Have driven several security and/or operational risk processes within a company with a modern risk oversight function.</li>
<li>Experience supervising the design and operation of risk &amp; control assessments to target different levels of information (e.g., RCSA vs. a service level assessment).</li>
<li>Experience with risk registers and helping prioritize security related work.</li>
<li>Can implement a solution (design), operational plan, and roadmap to achieve goals.</li>
<li>Experience implementing agile use cases in a GRC technology solution.</li>
<li>Executive presence: can represent a vision and build consensus across a variety of partners.</li>
<li>Knows how to estimate work effort and incubate skill sets to achieve team goals.</li>
<li>Has advanced knowledge of common security risks, vulnerabilities, and threats and can escort these issues through triage / risk treatment conversations.</li>
<li>Validated understanding of relevant information security frameworks, including related regulatory compliance requirements, such as ISO 27001/2 (including ISO 27017 &amp; 18), FedRAMP, SOC 2 Trust Services Criteria, CIS Top 20, PCI DSS, NIST CSF / 800-53, HIPAA.</li>
<li>Strong knowledge of audit and risk management methodologies, such as SOX, COBIT, NIST RMF / 800-37 / 800-30.</li>
<li>Strong understanding of risk quantification principles and experiencing implementing FAIR-like approach for quantifying and reporting risks.</li>
<li>Hands-on experience with data analytics and business intelligence dashboarding tools (e.g., Power BI) and with agile project management tools (e.g., Jira).</li>
<li>Detail-oriented and able to understand the bigger picture by using your technical expertise and problem solving abilities to prioritize and manage blocking issues.</li>
<li>Ability to ramp up quickly and learn new technologies with minimal lag time.</li>
<li>Able to discuss issues at technical and business levels with audiences of various backgrounds.</li>
<li>Experience in a high growth business environment is a plus.</li>
<li>Bachelor’s degree in Security, Computer Science, Management Information Systems or related field preferred.</li>
<li>SaaS and data management industry experience is a plus.</li>
<li>Professional certifications in Information Security or Risk Management (e.g., CISA, CISM, CRISC, CGEIT, CSX-P, CISSP, CCSK) is a plus.</li>
</ul>About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Bangalore

Sr Information Security Analyst  - Risk Management

CareRev

CareRev is bringing the future of work to Healthcare! CareRev's mission is to build a sustainable future for healthcare professionals. CareRev is a modern marketplace platform offering professionals the freedom to choose how and when they work, tools and training to develop their careers, and personalized growth opportunities.We are growing our security team at CareRev! As a key member of the security team, you'll collaborate across the organization streamlining procurement and vendor risk management to build awareness, understanding, and mitigation of risk while building trust with cross-divisional stakeholders. You will work within the security team and facilitate discussions with third party vendors, enhance processes and controls for new vendor procurement, and draft materials for reporting to leadership and management committees.
You will also work with the security and broader engineering team to lead, create, and document scalable processes for risk assessment and decision making, additionally supporting CareRev’s own internal and external security documentation. You will be an instrumental contributor and leader in building a scalable security program for our growing organization. Depending on the skills and interest of the successful candidate, this role has the opportunity to grow additional cybersecurity skills sets as we continue developing our security team.
What We're Looking for
While you should have many of these skills, not all are required.
<ul>
<li>Able to communicate relevant information clearly and concisely, both verbally and in writing</li>
<li>Experience in 3rd party management, audit, oversight, internal controls, operational risk management and mitigation</li>
<li>Independent judgment with strong analytical and risk assessment skills</li>
<li>Proven track record of building effective working relationships with internal and external business partners and senior leaders</li>
<li>Project management skills with ability to work independently and with a team, prioritize and manage multiple projects and succeed in a fast-paced, heavy workload environment</li>
<li>Demonstrated success in introducing process improvements and automation for security / operational risk management teams</li>
<li>Knowledge of relevant information security control frameworks, such as ISO 27002, SOC 2 Trust Services Criteria, PCI DSS, NIST Cyber Security Framework (CSF) / 800-53, CIS Critical Security Controls</li>
<li>A critical problem solver, detailed oriented, and highly motivated self-starter with a passion for constant learning &amp; improvement</li>
<li>A bias for action and ability to work efficiently with minimal oversight/direction and collaborate effectively in cross functional projects</li>
<li>Experience and interest in other aspects/bodies of cybersecurity work (e.g. vulnerability management, cloud security) a plus</li>
<li>Knowledge of/familiarity with AWS, Heroku, and kubernetes are all a plus</li>
<li>Certifications are not required, but CompTIA Security+, CASP+, CISM, or PMP could be helpful</li>
<li>Programming background is plus</li>
</ul>
What you’ll do:
<ul>
<li>Assess the security posture of 3rd parties as a part of the onboarding process for new tools and services (organization-wide) with a view on technology and security risk</li>
<li>Oversee, monitor, assess, and report on third-party risk</li>
<li>Lead/create and maintain security process documentation (e.g. documenting organizational standards for risk decision making)</li>
<li>Review and maintain security policy documents in preparation for annual audits</li>
<li>Provide consultative support and collaborate with business partners and external stakeholders to identify enhancement opportunities to strengthen third party management processes and controls</li>
<li>Communicate efficiently about risk review results to concerning businesses and key partners as per plan</li>
<li>Continuously iterate on improvement opportunities to optimize GRC processes across the organization and relevant stakeholders to maximize efficiency and scalability</li>
<li>Execute ad-hoc projects as needed (we’re working as a team for each one of us to grow and develop our skills in areas of interest and company need)</li>
</ul>Reasons to Consider Us:
<ul>
<li>100% remote company</li>
<li>Comprehensive medical, dental, and vision benefits</li>
<li>Short term disability 100% covered by CareRev</li>
<li>Life insurance covered by CareRev</li>
<li>Paid parental leave</li>
<li>Generous paid holidays &amp; unlimited PTO</li>
<li>401K and company match</li>
<li>Office equipment stipend</li>
<li>Learning reimbursement program</li>
</ul>
Physical Requirements: 
<ul>
<li>Prolonged periods of sitting and/or standing at a desk</li>
<li>Prolonged periods of working on a computer</li>
<li>Repeating motions that may include the wrists, hands and/or fingers</li>
<li>Ability to lift up to 15 pounds of work equipment</li>
<li>Ability to set up home office to include desk and chair</li>
</ul>
CareRev is committed to the full inclusion of all qualified individuals. In keeping with our commitment, we will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please discuss with your Recruiter.
We are an equal opportunity employer and will not discriminate against any employee or applicant for employment in an unlawful manner. We celebrate diversity and are committed to creating an inclusive environment for all individuals. CareRev treats all employees and job applicants based on merit, qualifications, and competence without regard to any qualified individuals' sex, race, color, religion, national origin, ancestry, gender (including pregnancy, breastfeeding, or related medical condition), sexual orientation, gender identity, gender expression, age, physical or mental disability, medical condition, genetic characteristic or information, marital status, military, and veteran status, or any other characteristic protected by state or federal law. CareRev also considers qualified applicants with criminal histories consistent with applicable local, state, and federal law.
If you are an applicant in Washington State, Colorado or New York City and have compensation questions, please contact us directly at <a href="mailto:compensation@carerev.com" rel="noopener noreferrer nofollow ugc" target="_blank">compensation@carerev.com</a>. Include in the email request: your Full Name, Job Name, and the City and State in which you reside. Please allow 48 business hours for a response. All other applicants: PLEASE NOTE, this email is not for candidates to apply to jobs directly. Resumes sent via this email address are not in our Applicant Tracking System, and therefore can not be included in our recruiting process. Please Apply following the steps below.

United States

Cybersecurity Risk Analyst

Wise

Wise is one the fastest growing companies in Europe and we’re on a mission: to make money without borders the new normal. We’ve got 13 million customers across the globe and we’re growing. Fast.
Current banking systems don't let us send, spend or receive money across borders easily. Or quickly. Or cheaply. 
So, we’re building a new one.
And, we’re looking for a Security Engineer with focus on SOC to join our Security Operations team in Tallinn, who is responsible for the global security features of the Wise products.  
For our customers, using Wise should feel as simple as sending a text message. Yet behind our app and website lies a complex, one-of-a-kind engine of currencies and routes that’s being designed, built and powered by our talented teams in cities around the world. With new capabilities being built every day, there’s still a lot to figure out, and we can’t do it alone. This role is a unique opportunity to have an impact on<a href="https://wise.jobs/what-we-do/" rel="noopener noreferrer nofollow ugc" target="_blank"> Wise’s mission</a>, grow as a product leader and help save millions more people money.  
The Security Operations Team is responsible for technical security concerns, security incident response lifecycle and AppSec across the company. We work together with product teams to minimise the amount of vulnerabilities introduced into Wise products. And we act as the first line of defence for attacks aimed against us internally or externally. 
Here’s how you’ll be contributing to the Engineering Team:
<ul>
<li>Help us detect, analyse and mitigate attacks or abuses across the company. You’ll be acting as a 2nd line Security Engineer in SOC.</li>
<li>You will be improving and developing Wise security monitoring solutions and helping relevant teams to solve problematic vectors. </li>
<li>Together with Engineering and Platform teams you will find new ways to keep our customers and Wise safe from malicious intent while staying invisible for good customers.</li>
</ul>
Is this you?
<ul>
<li>Are passionate about Cybersecurity and Incident Response</li>
<li>Have worked within a production environment and understand the importance of CI</li>
<li>You’re passionate about defending web attacks and abuse</li>
<li>You like to deal with complicated security incidents</li>
<li>Are passionate about working with data - extracting information from large sets of data and finding patterns or abnormal activity</li>
<li>Have automated your detections and mitigations in Python/Go/Java</li>
<li>You have worked with different SIEM-s and understand what happens under the hood</li>
<li>Know how to secure infrastructure in AWS and have done this before</li>
<li>A good understanding of Linux and understand how to secure it</li>
<li>You understand the value of WAF and how to maintain it</li>
<li>An understanding of what it takes to secure Docker and Kubernetes</li>
<li>Experience in securing networks or hardening OS</li>
<li>Previously working experience with vulnerability scanning solutions and understanding the difference</li>
<li>Knowledge of security standards (PCI DSS, ISO, SOC)</li>
<li>A good understanding of identity and access management and experience implementing least privilege with RBAC policies</li>
<li>On-call on a rotation basis isn't new to you and work at night if needed, but would prefer to automate the workflow</li>
</ul>
Some extra skills that would be great:
<ul>
<li>Infrastructure pentesting experience</li>
<li>Knowledge of apparmor, seccomp, eBPF</li>
<li>Experience working with IDS solutions</li>
<li>Have an understanding of the concept of microservice architectures</li>
<li>A  basic understanding of statistics and Machine Learning</li>
<li>You understand what a runbook is and can define it for simple IR purposes</li>
<li>A good understanding of Windows internals and can work with Powershell</li>
</ul>
Interested? Find out more:
<a href="https://wise.jobs/2019/12/05/how-we-work-a-practical-guide/" rel="noopener noreferrer nofollow ugc" target="_blank">How we work – a practical guide</a>
<a href="https://www.youtube.com/watch?v=mh74o4zp7n8" rel="noopener noreferrer nofollow ugc" target="_blank">Wise Vlogs: Omar, Engineering Lead</a>
<a href="https://medium.com/transferwise-engineering" rel="noopener noreferrer nofollow ugc" target="_blank">Engineering team blog</a>
<a href="https://medium.com/transferwise-engineering/scaling-our-infrastructure-at-transferwise-how-we-make-it-work-a4c7a1bd5b8e" rel="noopener noreferrer nofollow ugc" target="_blank">Scaling our Infrastructure; how we make it work</a>





What you get back:
<ul>
<li> RSU's in a growing company</li>
<li> An annual self-development budget</li>
<li> Pet friendly offices</li>
<li> Lots of fun group activities like yoga, running and boardgame nights</li>
<li> Relocation and visa expenses covered</li>
<li> A paid 6-week sabbatical leave after four years</li>
</ul>
Find out more about our benefits in our <a href="https://www.wise.jobs/2020/07/02/benefits-in-our-tallinn-office/" rel="noopener noreferrer nofollow ugc" target="_blank">Tallinn</a> office.
 
We’re people without borders — without judgement or prejudice, too. We want to work with the best people, no matter their background. So if you’re passionate about learning new things and keen to join our mission, you’ll fit right in.
 
Also, where and what you studied isn't important to us. If you’ve got great experience, the right skills for the role and you’re great at articulating your thinking, we’d like to hear from you.
 
#LI-GC1

Tallinn

Security Engineer - SOC

Ledger

We're making the world of digital assets accessible and secure for everyone. Join the mission. Founded in 2014, Ledger is the global platform for digital assets and Web3. Over 15% of the world’s crypto assets are secured through our Ledger Nanos. Headquartered in Paris and Vierzon, with offices in the UK, US, Switzerland and Singapore, Ledger has a team of more than 700 professionals developing a variety of products and services to enable individuals and companies to securely buy, store, swap, grow and manage crypto assets – including the Ledger hardware wallets line with more than 5 millions units already sold in 180 countries. At Ledger, we embody the values that make us unique: Pragmatism, Audacity, Commitment, Trust and Transparency. Have a look at our Origins video <a href="https://www.youtube.com/watch?v=Etqa_ECbz3M" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. As a IT Security Vulnerability Manager you will be responsible for the operation, reporting and day to day deliver of IT Security Vulnerability Management / Patch Management services within Ledger.
<h3>Your Mission</h3>
<ul>
<li>Accountability for the delivery and ongoing support and maintenance of the Vulnerability Management Suite,</li><li>Ensure Out of hours support of infrastructure security technologies,</li><li>Support of project deliveries within the time frames agreed with the project to incorporate into vulnerability management operational services,</li><li>Creation and maintenance of technology documentation for support and engagement,</li><li>Contribute to a strong team ethic and spirit to deliver timely, fit for purpose security deliverables against business requirements,</li><li>Act as a specialist champion to further the direction and strategy set by the IT Security Team,</li><li>Work closely with the IT Security Senior Management Team members to continuously improve the services operated,</li><li>Act as a Vulnerability management champion and work closely with all relevant teams ensuring timely creation and resolution of reported items. This will include scheduling work with the engineering teams for the expansion of vulnerability services and then ensuring those are incorporated into the regular operational service.</li></ul>
<h3>What we’re looking for</h3>
<ul>
<li>Education in a relevant technical subject to at least masters degree level (MSc Information Technology or similar)</li><li>At least 5 years’ experience in IT Security and thereby able to demonstrate a high level of technical ability in implementation, design and review roles</li><li>High technical knowledge of security across multiple technologies and a current understanding of their effective operation of security technologies - with particular focus on Vulnerability Management tooling.</li><li>Familiar with industry standard methods, and security practices.</li><li>Familiar with current techniques and toolsets</li><li>Worked with industry standard processes relating to service, change management and governance, such as ITIL incident and change management, Prince, Patch Management, Data Centre processes, PCI DSS and COBIT / COSO based controls.</li><li>Broad and demonstrable experience of working with a diverse set of stakeholders, applying technology capability for business benefit.</li></ul>
<h3>What’s in it for you?</h3>
<ul>
<li>Equity: Employees are the foundation of our success, and we award stock options so you can share in that success as we grow. </li><li>Flexibility: A hybrid work policy.</li><li>Social: Annual company outing for Ledgerdary Days, plus frequent social events, snacks and drinks.</li><li>Medical: Comprehensive health insurance policy offering extensive medical, dental and vision care coverage. </li><li>Well-being: Personal development, coaching &amp; fitness with our dedicated partners.</li><li>Vacation: Five weeks of paid leave per year, in addition to national holidays and rest &amp; relaxation (RTT) days.</li><li>High tech: Access to high performance office equipment and gadgets, including Apple products. </li><li>Transport: Ledger reimburses part of your preferred means of transportation .</li><li>Discounts: Employee discount on all our products.</li></ul>We are an equal opportunity employer for all without any distinction of gender, ethnicity, religion, sexual orientation, social status, disability or age.

Paris

IT Security Vulnerability Management

Apply to Pci Dss Cyber Security Jobs in companies remotely and near you. New Pci Dss Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Compliance Analyst at Keyfactor, Inc.	Full Time CISM Audit Analyst Consulting
Sr Information Security Analyst - Risk Management at Rubrik	Full Time CISM Audit Analyst Manager
Cybersecurity Risk Analyst at CareRev	Remote Full Time CISM Comptia Audit
Security Engineer - SOC at Wise	Full Time Incident Response Windows AWS Banking
IT Security Vulnerability Management at Ledger	Manager Cobit Crypto Golangvernance PCI

Pci Dss Cyber Security Jobs

0 Pci Dss Cyber Security Jobs. Page 1 of 1

5 closed pci dss cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Pci Dss Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Pci Dss Cyber Security Jobs

0 Pci Dss Cyber Security Jobs. Page 1 of 1

5 closed pci dss cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Pci Dss Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter