Senior Security Compliance Analyst, Instabase

• Security Assessment Expertise: You have experience working with various stakeholders to review and help improve their current processes through assessments or other tools
• Pragmatic and business-oriented: You care about business impact and prioritize projects accordingly — you understand the risks and balance the right security investments with the right bottom line outcomes
• Empathetic communication: You communicate nuanced ideas clearly, whether you’re explaining compliance requirements in writing or brainstorming in real time. When building consensus, you engage thoughtfully with other perspectives and compromise when needed
• Team player: For you, work isn't a solo endeavor. You enjoy collaborating cross-functionally to accomplish shared goals, and you care about learning, growing, and helping others to do the same

Desirable

• The Senior Security Compliance Analyst is a business enabler and is responsible for supporting and executing critical portions of the compliance function
• As a technical leader of the function, you will ensure that the regulatory roadmap supports business, sales and revenue objectives while maintaining alliance with existing information security standards
• You will work closely with security, legal, engineering, product and other business units to ensure regulatory control requirements are translated into Instabase-structured language that is informed by the organization’s current security practices and standards
• We are not a check-box security organization and as such you will have the opportunity to participate in control requirements and remediation initiatives that result in pragmatic solutions for Instabase and its customers
• Helping mature and scale our compliance programs based on industry best practices for (some or all of) the following functions including Audit Management, Risk Management, Third-party Assurance, Sales Enablement, Policy Management, etc
• Working cross-functionally to retain SOC 2 Type II, HIPAA, and other certifications that exhibit assurance internally and externally
• Driving control automation and supporting process improvements in the compliance portfolio
• Supporting staff training around Security, Compliance, and Privacy
• Implementing and managing continuous controls assessments and remediation monitoring
• Establish/Maintain processes and procedures that support audit and compliance management as daily operational functions vs. a disruptive event
• In close partnership with control owners, translate control remediation opportunities into business-enabling processes and standards
• Understanding what it takes to improve current Information security policies, procedures, and standards, for processes, applications, and infrastructure
• Provide transparency and status reporting through the use of meaningful and actionable scorecards and relevant operational metrics and OKRs/KPIs