Senior Security Compliance Specialist, PagerDuty

• 4+ years of Security risk or compliance experience in a tech environment, with credible experience and demonstrable success managing regulatory and client audits in at least one of the following compliance programs: ISO27001, FedRAMP, SOC2
• Background of implementing a Security Risk program
• Experience with security training and education program administration
• Experience redlining security language for legal agreements
• Ability to work on various priorities simultaneously, with a strong bias towards action. Leveraging great written and verbal communication skills to facilitate great stakeholder management and client experience for internal and external customers

Desirable

• As our Senior Security Risk & Compliance Specialist you will drive, design, and coordinate our Security Compliance Program to ensure customer trust, and fuel PagerDuty’s expansion into global enterprise markets
• You will partner across organizational teams as a Security Compliance SME, coordinating with business and technical stakeholders to meet the demands of our global market
• Support the Customer Trust programs, including maintaining current and accurate customer documentation to support security responses to customer questions and customer audits; partnering with internal and external stakeholders for the Third Party Risk Program around vendor on-boarding, and vendor risk assessments
• Knowledge of compliance and regulatory frameworks and processes, including aligning policies to regulatory and business requirements; help teams design controls, automation, and reports to meet compliance requirements
• Administration of both general and program specific internal security education and awareness programs
• Oversees information security risk assessments, directing the development and operational effectiveness of IT security controls, along with risk tracking and management
• Monitor investigations and documentation of cybersecurity compliance issues and incidents. Review information security risk findings and non-compliance with business leaders and propose solutions to mitigate risks