GRC Analyst, JupiterOne

Salary not provided

SQL

Junior and Mid level

Remote from US

Cybersecurity asset management solutions

Job no longer available

Cybersecurity asset management solutions

21-100 employees

B2BPrivacySaaSCyber SecurityCloud Computing

Job no longer available

Salary not provided

SQL

Junior and Mid level

Remote from US

21-100 employees

B2BPrivacySaaSCyber SecurityCloud Computing

Company mission

To deliver knowledge, transparency, and confidence to every digital operation in every organization, large or small.

Job

Company

Role

Who you are

Strong knowledge of compliance frameworks like SOC2, CCM, NIST 800-53, NIST 800-171, ISO 27002 or similar
Proven experience leading FedRAMP certification efforts from start to finish
Ability to convert compliance standards into actionable policies and validate framework coverage
Skilled at communicating high level compliance and assurance concepts to senior leadership, as well as to engineering and development teams
Knowledge of GitHub and the git process of code management
Experience with query languages, such as SQL or other query language
Effective communication skills, including the ability to effectively convey urgency and priority of effort

What the job involves

We are looking for a GRC Analyst to join our security team and help us ensure our software solutions remain compliant with the standards to which we adhere
Coordinate and oversee policy reviews with key stakeholders, ensuring documents remain relevant and actionable
Regularly review and update policies, ensuring adherence to industry standards and organizational needs
Enforce timelines for vulnerability management, risk register resolution, and periodic compliance reviews
Maintain and refine issue logs, as well as J1QL evidence queries, to support compliance initiatives
Complete security questionnaires efficiently, developing reusable and repeatable processes
Proactively forecast compliance needs and develop roadmaps aligned with customer and regulatory expectations
Research industry compliance regulations and policies to ensure JupiterOne remains ahead of evolving standards

Our take

Cyber security can be highly complex for many businesses, especially with attackers becoming ever-more sophisticated. JupiterOne helps to alleviate this problem with its innovative cyber asset attack surface management (CAASM) platform.

JupiterOne's platform offers visibility and security, allowing users to protect and monitor their cyber assets. The platform collects and monitors everything from code to cloud resources, and monitors them automatically. This approach allows businesses to make better data-driven decisions.

JupiterOne has received widespread recognition, and its work has garnered multiple awards. Its potential and scalability in the sector is clear, and it continues to launch new features - for example features that help clients deal with AI-driven risk.

Kirsty

Company Specialist at Welcome to the Jungle

Insights

Top investors

Glassdoor (3.7)

Company

Funding (last 2 of 3 rounds)

Jun 2022

$70m

SERIES C

May 2021

$30m

SERIES B

Total funding: $119m

Company benefits

Medical, Dental, Vision Insurance etc
Flexible PTO
Maternity & Paternity Paid Leave
Reimbursement for Gym Memberships and/or Fitness Equipment
Wellness Program Offerings
401(k), Life Insurance, Short and Long Term Disability
Paid Holidays, including JupiterOne Day on July 21st
Generous Employee Referral Program

Company HQ

Morrisville, NC

Leadership

Erkang Zheng

(Chair, Chief Innovator & Founder)

Previously worked as Head of Software Security at Fidelity Investments, and was CISO at LifeOmic. Is a Member of the Forbes Technology Council.

Share this job