Collibra

<h3>Joining Collibra’s Chief Security Office team:</h3>
<ul>
<li>This is an opportunity to work with the growing Security team at Collibra.  </li>
<li>We engage externally with large, enterprise companies on promoting Collibra’s security posture.</li>
<li>Engage internally with key stakeholders in Product and Engineering in maturing and refining the security of our product.</li>
<li>We blend technical acuity, security evangelism, program management with business savvy to close deals quickly.</li>
<li>We are the champion for our Customer’s voice in driving innovation and ideas for better security.</li>
</ul>
<h3>Field Security Analysts at Collibra are responsible for:</h3>
<ul>
<li>Collaborate with the Field in answering Customer’s technical and security questions in pre-sales and sales cycles.</li>
<li>Develop, promote and support processes that streamline the sales cycle as it involves security.</li>
<li>Work with Legal in contract management reviewing and redlining Security terms and conditions.</li>
<li>Maintain Field Security content management, knowledge base of security responses and supporting documentation: white papers, technical diagrams and other product security documents for the field to use.</li>
<li>Build and enhance the public facing Collibra’s Trust Center to showcase commitment to trust and transparency.</li>
</ul>
<h3>You Have:</h3>
<ul>
<li>3-5 years of consistent track record working in security.</li>
<li>Understanding of technical areas of the security field such as SDLC, DR and BCP, Incident Response and vulnerability management.</li>
<li>Experience working with a SaaS company and cloud providers, AWS, GCP and or Azure.</li>
<li>Should be familiar with the SOC 1 &amp; 2,  ISO 27001, PCI and FedRAMP certifications to be able to understand and articulate the value of the controls within the different domains.</li>
</ul>
<h3>You Are:</h3>
<ul>
<li>Adaptable and ready to learn new security technologies.</li>
<li>Able to articulate security concepts well both verbally and in writing and to speak to technical and non-technical audiences.</li>
<li>Attentive to detail and organized.</li>
<li>Dependability: meet commitments, work independently, accept accountability, handle change, set personal standards and have the ability to stay focused.</li>
</ul>
<h3>Reporting to Collibra’s Director of Field Security, Field Security Analyst’s measures of success are:</h3>
<ul>
<li>Within your first month, you will be able to speak to the Collibra Product and the security around it.</li>
<li>Within your third month, you will be able to interact with Customers and have detailed sessions around Collibra’s security.</li>
<li>Within your sixth month, you will be able to write white papers and articles that enhance Collibra's security collateral.</li>
</ul>
<h3>Benefits at Collibra:</h3>
<p>We strive to provide all Collibrians with competitive and cost-efficient benefits that are aligned to our company values. As a high-growth company, our goal is to offer flexibility and choice with our benefits programs to support the evolving needs of our changing workforce. The specific offerings will differ slightly by region but our {<strong>Be}well </strong>benefit programs encompass the following strategic pillars:</p>
<ul>
<li><strong>{Be}Healthy: </strong>Healthcare for yourself and eligible dependents (inclusive of partners/domestic partners), mental health resources and care, tax-advantaged accounts, income protection, discount programs and more! Additionally, we encourage employees to treat their whole self by offering a bi-monthly calendar of events and programming dedicated to our {Be}well initiatives which focus on wellbeing areas including emotional, professional &amp; social, financial, physical, allyship &amp; belonging and giving back.</li>
<li><strong>{Be}With Family: </strong>We offer multiple types of leave so that you can spend time with loved ones, including parental leave, caregiver leave and our annual family day. These are all complementary to our culture in which we value output over hours!</li>
<li><strong>{Be}Kind: </strong>Collibra For Good, Unconscious Bias &amp; Allyship training, Diversity Equity and Inclusion (DEI) Strategy, Environmental Social Governance (ESG) strategy, racial equity awareness programs and Collibra-led fundraisers.</li>
<li><strong>{Be}Unplugged: </strong>Our paid time off programs include vacation, holidays, sick time and compassionate/bereavement leave. We also offer remote-friendly meditation sessions and cooking lessons – all of which you’re actively encouraged to use!</li>
<li><strong>{Be}Informed: </strong>Competitive compensation, bonus potential, private company equity, merit reviews and promotion cycles, company pension, discounts programs, access to LinkedIn Learning, employee referral program, employee rewards &amp; recognition, development programs and more!</li>
<li><strong>{Be}Together: </strong>Community and belonging with our Employee Resource Groups (ERGs) and personal interest groups, ERG-driven events, speaker series, and celebrations, a dedicated DEI council, the virtual Collibra cafe, trivia, bingo games and much more! </li>
</ul>
<p><em>When in-person (office) life resumes, we look forward to more snacks, catered lunches, team offsites and social events (think holiday gift exchange, fundraising events, happy hours, celebrations and more)!</em></p>
<p><strong>Equal Opportunity:</strong></p>
<p>At Collibra, we’re proud to be an equal opportunity employer – which ties directly to our core value, “open, direct, and kind.” We realize the key to creating a company with a world-class culture and employee experience comes from who we hire and creating a workplace that celebrates everyone. </p>
<p>With this, we proudly consider qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sexual orientation, pregnancy, sex, gender identity, gender expression, genetic information, physical or mental disability, HIV status, registered domestic partner status, caregiver status, marital status, veteran or military status, citizenship status or any other legally protected category.</p>
<p>#LI-DL1</p>

United Kingdom

Field Security Analyst

Paper

<p>Driven by the mission to democratize education, Paper is the largest provider of educational support, supporting millions of students through partnerships with thousands of school districts. Paper helps deliver true educational equity through their category leading Educational Support System (ESS) that offers virtual access to 24/7 tutors and essay reviewers. Founded in 2014, Paper philosophically believes that all students should be given the tools and resources to reach their academic potential, independent of socio-economic status, geography, language or other barriers. We are headquartered in Montreal, Quebec with remote employees across the US and Canada. Paper is proud to have been named by GSV as one of the <a href="https://medium.com/bubblin-from-a2apple/gsv-edtech-150-the-most-transformational-growth-companies-in-digital-learning-7fed1bd52957" rel="noopener noreferrer nofollow ugc" target="_blank">most transformational growth companies in digital learning</a>.</p><p>Reporting to our Vice President of Technology, the Director of Information Security will ensure a security posture across the entire organization that efficiently protects our customers, employees, and the business. This individual will lead the team that defines and implements our company-wide information security program.</p>
<p><strong>Responsibilities:</strong></p>
<ul>
<li>Own Paper’s information security program, supporting strategic business objectives such as incident response, risk assessment, data protection, physical security, and security training.</li>
<li>Maintain and revise corporate policies, controls, and procedures that govern Paper’s global security program.</li>
<li>Coordinate with internal stakeholders to drive compliance with policies and standards to help ensure consistent application of security practices across the organization.</li>
<li>Develop and manage corporate-wide control activities, such as vulnerability and penetration tests, and incident response test exercises.</li>
<li>Be a tireless champion of compliance across the team, asking hard questions and proactively helping define reasonable compliance and business strategy balanced solutions.</li>
<li>Lead application and cloud security on our platform, ensuring we continue to build and maintain a secure platform that protects our users' data.</li>
<li>Serve as a subject matter expert on cybersecurity, compliance certifications, and applicable security regulations.</li>
<li>Lead our pursuit of compliance certifications and regulatory assessments.</li>
<li>Develop metrics to gauge the effectiveness of our security program.</li>
<li>Advise senior management on the state of the security program.</li>
<li>Collaborate closely with the engineering team to ensure that the highest levels of information security are maintained.</li>
<li>Stay abreast of the latest information security technology and ensure Paper is using the best tooling to support the information security program.</li>
<li>Effectively communicate Paper’s security program with external parties such as customers and auditors.</li>
<li>Uphold and embody Paper’s mission, vision, and values.</li>
</ul>
<p><strong>Qualifications:</strong></p>
<ul>
<li>Deep knowledge of information security governance, risk and compliance frameworks, regulations, and industry standards (including SOC 1 &amp; 2, ISO 27001), and a strong understanding of how they apply to SaaS organizations and products.</li>
<li>Experience leading teams and influencing activities across functions without formal authority to deliver results.</li>
<li>Comfort with working in large, remote teams.</li>
<li>Experience responding to customer and prospect vendor security requests / questionnaires.</li>
<li>Ability to communicate effectively, both orally and in writing, technical and non-technical content to all organization levels.</li>
<li>Strong project management and organizational skills.</li>
<li>Strong problem solving and troubleshooting skills.</li>
</ul>
<p><strong>Job perks:</strong></p>
<ul>
<li>Work with a dynamic team that provides support whenever you get stuck.</li>
<li>Remote first environment.</li>
<li>Bi-annual company-wide meetups.</li>
<li>Opportunity for career development with a fast-growing company.</li>
<li>A unique opportunity to make an impact by making education more equitable.</li>
<li>Stipend to help support the growth of your home office.</li>
<li>24/7 access to Paper for family members K-12.</li>
</ul>
<p>#LI-ST01 #LI-hybrid</p><p><strong>About Paper</strong></p>
<p>Paper offers an exciting, dynamic, inclusive work environment putting excellence at the center of everything we do. Our mission is woven into the fabric of our culture, challenging our team to build meaningful and creative solutions. </p>
<p>We thrive when we collaborate with each other, and use integrity and selflessness to align our business decisions with our mission. We approach every challenge with positivity, achieving the outcome we want regardless of what gets in the way. Our tenacity propels our hyper-growth, where trust is key and we all strive to make an impact every day.</p>
<p>We believe that diverse teams build better products. Paper does not and will not discriminate on the basis of race, color, religion, gender, gender orientation, gender expression, age, national origin, disability, marital status, sexual orientation, or military status in any of its activities or operations.</p>
<p>Nobody checks every box, but the Paper team is built by passionate and innovative people who share our mission for democratizing education. If you don’t think you meet all of the requirements above but are still interested in the job, please apply.</p>
<p>PS. Equity is our mission! We make sure to treat all candidates equally: If you are interested please apply through our job board - our amazing talent team will reach out! Our team isn't able to pass on any calls/ emails our way - and this makes sure that the candidate experience is smooth and fair to everyone.</p>

United States

Canada

Director of Information Security

Palantir Technologies

A World-Changing Company At Palantir, we’re passionate about building software that solves problems. We partner with the most important institutions in the world to transform how they use data and technology. Our software has been used to stop terrorist attacks, discover new medicines, gain an edge in global financial markets, and more. If these types of projects excite you, we'd love for you to join us.The RoleAs a member of Palantir's Technical Compliance team, you will develop a deep understanding of Palantir's control environment, infrastructure, and products. You will work with engineers, security, clients, and auditors to navigate and manage compliance frameworks (e.g., ISO/SOC/NIST) in order to provide practical guidance on technical documentation, operational concerns, and sustainable processes that will allow us to continue to grow quickly &amp; efficiently while also maintaining our current compliance obligations. We are looking for a technically experienced and innovative security, compliance, and audit professional that understands IT processes, has strong communications skills, and can manage complex cross organizational projects. 
<h3>Core Responsibilities</h3>
<ul>
<li>Support internal and external security assessments of new and existing Palantir services and infrastructure including operational, regulatory, and contractual requirements  (e.g. SOC 2, ISO 27001, ISO 9001). </li><li>Develop and maintain a technical understanding of Palantir’s control implementations and articulate these to various audiences, including internal and external auditors. </li><li>Partner with engineers and various internal teams to interpret and map compliance requirements to controls implementations. </li><li>Improve and automate controls and documentation for internal systems, processes, and policies. </li><li>Guide technical and operational decision-making towards future product offerings and efficient organizational processes.</li></ul>
<h3>What We Value</h3>
<ul>
<li>2+ years of experience performing and running audits, certification programs or control assessments.</li><li>Big 4 experience or compliance risk advisory experience preferred.</li><li>CISA, CIA, CISSP or other related certifications a plus.</li><li>Strong knowledge of and experience in security risk management and with frameworks including related regulatory compliance requirements (e.g. SOC 1/2, ISO 27001, PCI, HITRUST) required.</li><li>Experience assessing security, compliance, and privacy controls across a variety of technical and organizational environments. </li><li>Familiarity with distributed applications on cloud infrastructure and a broad range of technical concepts relevant to cloud computing environments including logical access controls, agile development, information security, network security, privacy, etc.</li><li>Ability to clearly communicate compliance requirements to engineering teams and the ability to interpret technical implementations and communicate them to to external auditors.</li><li>Comfortable planning, executing, and delivering on multiple long-term projects with external dependencies in tandem.</li></ul>Palantir is committed to promoting a culture of diversity, equity, and inclusion and is proud to be an Equal Employment Opportunity and Affirmative Action employer. We believe that all Palantirians share the responsibility of upholding our commitment to these values and encourage candidates from a wide range of backgrounds, perspectives, and lived experiences to join us in solving the world’s hardest problems. Palantir does not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Palantir is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. Please see the United States Department of Labor’s <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO poster</a> and <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO poster supplement</a> for additional information.Palantir is committed to making the job application process accessible to everyone. If you are living with a disability (visible or not visible) and need to request a reasonable accommodation for any part of the application or hiring process, please <a href="mailto:accommodations@palantir.com" rel="noopener noreferrer nofollow ugc" target="_blank">reach out</a> and let us know how we can help.

New York

Risk and Compliance Analyst

Domo

<p>We are Domosapiens- uniquely skilled, passionate data lovers anchored in a culture of connectivity. We are transforming the way business is managed by putting real-time data into the hands of every decision maker across organizations. Diversity is valued here because homogenized teams create echo chambers; and nobody benefits from that. The insight garnered from diverse backgrounds, perspectives and lived experiences results in pioneering innovations across the organization and better experiences for our customers. The more diverse our talent, the more impactful the Domosphere becomes.  </p>
<p><strong>Position Summary</strong></p>
<p>The Senior Analyst, Cybersecurity Risk and Compliance is a key member of Domo’s Information Security, Risk and Compliance team responsible for evaluating and supporting initiatives covering information security, policy, risk management, data classification, vendor management, privacy, audit, and awareness. This position assists other members of the Information Security and Compliance team with identifying and assessing potential information security risks, recommending mitigations and helping the risk owners drive the implementation of mitigations to reduce the risk to an acceptable level. In addition, this position assists with performing security assessments and monitoring and tracking compliance status; developing and improving processes, procedures, standards and guidance; providing guidance on security control implementation; and defining and implementing process improvement and maturity initiatives. The position will also be responsible for assisting in developing policies and procedures and evaluating risks and controls to support the company’s Federal Information Security Management Act (FISMA) Security Accreditation (FedRAMP), ISO 27001, ISO 27018, SOC 1, SOC 2, HIPAA, HITRUST and other regulatory and compliance initiatives. Success in this role requires a good understanding of information security best practices, strong security knowledge, ability to understand and communicate risk and controls, organization, planning, good communication and writing skills.</p>
<p><strong>Key Responsibilities</strong></p>
<ul>
<li>Lead the risk-based approach to help develop security strategy and lead and execute various risk-driven tasks based on those strategies;</li>
<li>Perform and/or facilitate information security risk assessments, report on findings and recommend mitigations;</li>
<li>Lead the program to effectively and efficiently analyze security risks using real-world security data and systems automation;</li>
<li>Lead and analyze the security of new or existing applications, product features, software, or specialized utility programs and provide risk recommendations;</li>
<li>Manage remediation of identified risks and vulnerabilities; identify those within the organization responsible for remediation tasks and negotiate dates for remediation to be complete;</li>
<li>Manage the tracking progress on remediation of identified risks and vulnerabilities and provide appropriate reporting to all constituents;</li>
<li>Support our Sec Ops, Sec Engineering, and Compliance teams to develop risk/vulnerability assessment programs to aid in the identification and mitigation of security risks and document specific security issues, propose resolution options, and interpret matters from the perspective of involved stakeholders;</li>
<li>Gather relevant information from internal and external assessments and/or audits of information technology systems and processes, interpret results, and develop and communicate recommendations to management;</li>
<li>Develop, build and maintain the controls matrix, in alignment with multiple compliance frameworks, including SOC 1 &amp; SOC 2, ISO 27001, ISO 27018, FedRAMP, HITRUST, and HIPAA;</li>
<li>Lead establishing rules for risk analyses and security assessments which includes addressing controls defined by FIPS 199, NIST SP800-37, NIST SP800-53, NIST SP800-171 for both business operations and technical implementations throughout the company.</li>
</ul>
<p><strong>Job Requirements</strong></p>
<ul>
<li>Bachelors degree in Computer Science, Information Technology or related field or equivalent job experience;</li>
<li>Minimum of 5 years experience in security risk management, compliance, audit, and information security;</li>
<li>CISSP, CISM, CISA, CCSA or equivalent certification preferred;</li>
<li>Familiarity with enterprise-level compliance tools such as ServiceNow, Archer, IBM GRC or other industry equivalent software;</li>
<li>Knowledge and experience in FedRAMP, NIST SP 800-53 Rev 4, NIST SP 800-37, FISMA, NIST RMF, NIST FIPS 199, ISO 27001, ISO 27018, SSAE 18, HIPAA and HITRUST;</li>
<li>Experience in cloud-based environments for production applications, including Amazon Web Services, Microsoft Azure, GCP or other large scale cloud deployment;</li>
<li>Understanding of risks and controls as they pertain to firewalls, IDS/IPS systems, malware controls, URL filtering tools, anti-spam systems, BYOD controls, DLP, VPN, web application firewalls, endpoint security controls, OS hardening, multi-factor authentication, encryption key management, mobile device management, wireless security, full disk encryption, database security controls, containers, and network segmentation;</li>
<li>Good advisory skills; able to get acknowledgement and commitment on assessment results and proposed mitigations across stakeholders with different interests;</li>
<li>Strong analytical skills;</li>
<li>Relationship builder; able to create and maintain a trusted network on all levels;</li>
<li>Good communication, influencing and negotiating skills.</li>
</ul>
<p><strong>Domo is an equal opportunity employer.</strong>  </p>

American Fork

Senior Analyst, Cybersecurity Risk and Compliance

Guidewire Software

Guidewire is looking for a Director of Technical Program Management within its Information Security organization to lead execution of critical security programs aligned with Guidewire’s security maturity strategy. This role will report to and work closely with the Head of Security Strategy and Programs. You will be driving key security initiatives in collaboration with Product, Engineering, and Enterprise teams/stakeholders while mentoring a team of Technical Program Managers. The ideal candidate understands security risks, software product and platform context, process efficiency and can effectively communicate with technical and non-technical audiences. 
<h3>Responsibilities</h3>
<ul>
<li>Manage complex and cloud-scale technical security programs to meet Guidewire’s business objectives </li><li>Define and lead roadmap execution for critical security functions and programs </li><li>Develop strong partnerships and feedback loops with leaders and stakeholders across the organization </li><li>Lead with data and promote a culture of metrics driven decision-making </li><li>Be a thought leader to drive strategic change and help advance our security maturity </li><li>Mentor and grow the existing security program management team </li><li>Communicate effectively verbally and in written form, both internal and external to Guidewire </li></ul>
<h3>Requirements</h3>
<ul>
<li>You are a pragmatic security expert and hands-on technical leader </li><li>You understand emerging and tried and tested security technology and how it applies to both cloud products and an enterprise environment </li><li>You evangelize proactive security within the organization and educate and influence stakeholders in building a secure environment </li><li>You enjoy working on hard problems with no clear answers and can instantly design, scope, and iterate to create prototypes to demonstrate value </li><li>You have experience managing security programs for a cloud company and its practical applications </li><li>You understand the value of efficient processes and constantly look to improve them for productive scaling </li><li>You are a people focused leader who helps your team to grow and to do the best work of their careers </li><li>You are data driven, analytical, and can turn information into action </li></ul>
<h3>Qualifications</h3>
<ul>
<li>B.S. degree in Computer Science, Engineering, or other relevant technical fields </li><li>10+ years of experience managing complex, cloud-scale technical security programs for an enterprise </li><li>Experience with cloud platform and SaaS security required </li><li>Experience with SOC 1, SOC 2, ISO 27001, PCI, or equivalent required </li><li>Experience with implementing modern Secure Product Development frameworks and practices </li><li>Demonstrated high level communication skills in both private and public settings </li><li>Familiarity with application of the NIST Cyber Security Framework towards security program maturity </li><li>Strong business acumen with excellent organizational, problem-solving, influencing without authority, and negotiating skills. Excellent day-to-day operating management skills  </li></ul>#Li Remote#programmanangement #infosec #guidewire #saas #propertyandcasualtyinsurance #insuretech #aws #machinelearning #artificialintelligence #informationsecurity #cyber #cybersecurity #pentesting #nistAbout GuidewireGuidewire is the platform P&amp;C insurers trust to engage, innovate, and grow efficiently.Guidewire combines core, data, digital, analytics, and AI to deliver our platform as a cloud service. More than 400 insurers, including the largest and most complex in  the world, run on Guidewire.As a partner to our customers, we continually evolve to enable their success. We are proud of our unparalleled implementation track record with 1000+ successful projects, supported by the largest R&amp;D team and partner ecosystem in the industry. Our Marketplace provides hundreds of add-ons that accelerate integration, localization, and innovation.Guidewire Software, Inc. is proud to be an equal opportunity and affirmative action employer. We are committed to an inclusive workplace, and believe that a diversity of perspectives, abilities, and cultures is a key to our success. Qualified applicants will receive consideration without regard to race, color, ancestry, religion, sex, national origin, citizenship, marital status, age, sexual orientation, gender identity, gender expression, veteran status, or disability. All offers are contingent upon passing a criminal history and other background checks where it's applicable to the position.Disability Accommodations and Guidewire’s Appeals Process. Guidewire provides accommodations to the hiring process to create a fair opportunity for candidates with disabilities to contend for open positions. Accommodation requests should be directed to (650) 356-4940 or <a href="mailto:Accommodations@guidewire.com" rel="noopener noreferrer nofollow ugc" target="_blank">Accommodations@guidewire.com</a>. If things do not go as hoped, we invite you to use our appeals process. Guidewire promises to independently review any denied accommodation and any decision not to offer you the position. The appeals process is the same in either case. Within five business days of receiving a notice of denial of an accommodation, or receiving a notice of your non-selection for a vacancy, call (650) 356-4940 or e-mail <a href="mailto:Accomodations@guidewire.com" rel="noopener noreferrer nofollow ugc" target="_blank">Accommodations@guidewire.com</a> to make an appeal. Guidewire will assign a new decision-maker to review the request and/or hiring decision, who will then notify you in writing of a decision within 10 business days.

Director – Technical Program Management, Information Security - US, Remote Option

Apply to Soc 1 Cyber Security Jobs in companies remotely and near you. New Soc 1 Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Field Security Analyst at Collibra	AWS Azure Cloud Fedramp GCP
Director of Information Security at Paper	Golangvernance Incident Response Iso 27001 Risk Assessment SAAS
Risk and Compliance Analyst at Palantir Technologies	Agile Audits CIA CISA Cissp
Senior Analyst, Cybersecurity Risk and Compliance at Domo	Audits Automation Azure CISA CISM
Director – Technical Program Management, Information Security - US, Remote Option at Guidewire Software	Analytics AWS C Golang Iso 27001

Soc 1 Cyber Security Jobs

0 Soc 1 Cyber Security Jobs. Page 1 of 1

5 closed soc 1 cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Soc 1 Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Soc 1 Cyber Security Jobs

0 Soc 1 Cyber Security Jobs. Page 1 of 1

5 closed soc 1 cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Soc 1 Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter