Manager of Product Compliance, Ivanti
Salary not provided
Senior and Expert level
Remote in US
IT service and asset management software
Be an early applicant
IT service and asset management software
1001+ employees
B2BBig dataSaaSCyber SecurityAutomationCloud Computing
Be an early applicant
Salary not provided
Senior and Expert level
Remote in US
1001+ employees
B2BBig dataSaaSCyber SecurityAutomationCloud Computing
Company mission
To be a global technology leader enabling organisations to thrive in the Everywhere Workplace.
Role
Who you are
- Extensive professional experience in a similar role
- Experience with communicating effectively and efficiently across diverse teams, through verbal and written exchanges
- Project management experience, leading and organizing a team to complete a project within a specific time frame and budget
- Confident in delegating tasks and consistent in tracking and monitoring progress
- Industry certifications preferred (PMP, CISSP, CISM, CGEIT)
- You Should be Knowledgeable In:
- Frameworks such as: NIST SP 800 Series, FISMA, ISO 15408, and ISO27001, and those indicated above
- Leveraging technical and program management skills to plan, track, collaborate and report on regulated program deliverables
- Tracking and driving remediation of control deficiencies and gaps identified internally and externally
- Audit Program metrics and KPIs
- Program / project management
- Technical aptitude and fundamental understanding in software development
What the job involves
- As part of the Compliance and Audit team, you will lead the execution of multiple functions and support daily activities of the program, included but not limited to: development, implementation, documentation/maintenance of policies and procedures, monitoring program compliance, investigation and tracking of incidents and breaches and insuring compliance with federal laws
- Facilitate and manage Ivanti’s Audit Team, consisting of 10+ different frameworks for a total of 40+ different audits or certifications, as Audit Manager. Frameworks include:
- ISO 27001, 17 & 18
- SOC2
- PCAOB Integrated Financial Audit
- NIAP & BSI Common Criteria
- FIPS 140-2 & 3
- DoDIN APL (DISAs JITC, STIGs, etc.)
- UK Cyber Essentials
- CCN
- FedRamp
- Develop and implement audit methodology, processes, and templates
- Identify, track, and report on critical KPIs to leadership, including budget to actuals, deficiencies, quality and accuracy, and program improvement
- Support and ensure quality of audit reports that identify technical and procedural findings, and provide recommended remediation strategies/solutions
- Provide guidance on laws, regulations, policies, standards, or procedures to management, personnel, or clients
- Develop processes with the external audit group on how to share information regarding the continuous monitoring program and its impact on security control assessment
- Support audit team in becoming product and audit SMEs
- Review existing and proposed policies with stakeholders
- Review or conduct audits of information technology (IT) programs and projects
- Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc
- Review, conduct, or participate in audits of cyber programs and projects
- Provide leadership in the planning, design and evaluation of privacy and security related projects
- Appoint and guide a team of IT security experts
- Prepare a plan of action and milestones based on the findings and recommendations of a security assessment report excluding any remediation actions taken
- The primary focus of this position in Information Security is: to develop and implement a consistent, predictable, and repeatable audit processes, demonstrated through tracking key metrics; ensure quality and accuracy of artifacts delivered to third-party assessors; transform the audit program to a vehicle for early identification and remediation of potential weaknesses; and reduce impact to key stakeholders and control owners
- Successfully manage and lead an audit program ensuring compliance with regulatory requirements, compliance standards, internal policies, and mandates
- Lead and manage a team of auditors, assigning tasks, setting priorities, and providing guidance through the audit process
- Continuously evaluate and enhance audit methodologies, processes, and tools to ensure effectiveness and efficiency
- Support the development of security policies, training material, and other core documents
- Coordinate and manage onsite assessments with external stakeholders
- Manage a global team, with team members from varying geographical regions (flexible scheduling availability)
- Coordinate with third-party auditors/assessors in managing audit program and treatment of potential deficiencies
- Assess and forecast manpower requirements to meet organizational objectives
- Monitor and assess the potential impact of emerging technologies on laws, regulations, and/or policies
- Interpret and apply laws, regulations, policies, and guidance relevant to organization cyber objectives
- Coordinate with senior leadership of an organization to facilitate the sharing of risk-related information among authorizing officials and other senior leaders within the organization
- Advise authorizing officials, chief information officers, senior information security officers, and the senior accountable official for risk management/risk executive (function), on a range of security-related issues (e.g. establishing system boundaries; assessing the severity of weaknesses and deficiencies in the system; plans of action and milestones; risk mitigation approaches; security alerts; and potential adverse effects of identified vulnerabilities)
- Coordinate their security-related activities with security architects, senior information security officers, system owners, common control providers, and system security officers
- Facilitate and support Audit Team in conducting comprehensive assessment of the management, operational, and technical security controls and control enhancements employed within or inherited by a system to determine the effectiveness of the controls (i.e., the extent to which the security controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system)
- Provide an assessment of the severity of weaknesses or deficiencies discovered in the system and its environment of operation and recommend corrective actions to address identified vulnerabilities
- Communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means
- Work independently and have the ability to prioritize conflicting demands from multiple business clients in an extremely fast-paced environment
- Work across departments and business units to implement organization’s audit principles and programs
Our take
Ivanti, a well-established leader in IT and asset management solutions, has evolved significantly since its founding as LAN Systems in 1985. After merging with HEAT Software in 2017 to become Ivanti, the company continued to grow by acquiring smaller firms and expanding its reach and product offering.
Today, Ivanti is known for its flagship product, the Ivanti Neurons IT Platform, which uses machine learning to proactively detect and resolve IT issues. In addition, the company provides a range of cybersecurity solutions, including VPNs and real-time security surveillance, to help businesses safeguard their networks.
Despite facing challenges, including a data breach involving its subsidiary companies MobileIron and Pulse Secure, Ivanti has taken proactive steps to enhance security. In response to vulnerabilities that allowed hackers to exploit VPN systems, Ivanti has strengthened its security with zero trust models and Unified Endpoint Management tools to better protect its customers.
Steph
Company Specialist at Welcome to the Jungle
Insights
Top investors
Few candidates hear
back within 2 weeks
Company
Funding (2 rounds)
Jan 2005
$35m
SERIES B
Jan 2000
$5.6m
SERIES A
Total funding: $40.6m
Company values
- Locking Arms: Teamwork is insintrict to what we do and why we do it. We are accountable to each other - and support one another. We provide opportunities to grow, learn, add value and thrive - while also achieving new levels of performance. We treat all with appreciation, dignity, and respect
- Fight the Good Fight: The technology world is battling cyberterrorism. We wake up every day with a commitment to enable, prepare, and protect our customers so they can drive their own business success. When our customers, our governments, and our people are protected from threats - we win
- Champions for Our Customers: We anticipate our customers' needs, we are highly responsive, and we deliver innovative solutions that exceed their expectations
- Outcomes Matter Most: We start with the end goal in mind - for our customers, employees, partners and investors. With performance-driven attitudes - our victory is reaching target outcomes
Company HQ
South Jordan, UT
Articles
Leadership
Jeff Abbott
(CEO)Initially joined Ivanti as the President in 2020 before becoming the CEO in 2021. Prior to this, they were the Executive Vice President at Infor for 11 years.
Share this job
View 10 more jobs at Ivanti