Senior Analyst, Kajabi

• 3+ years of privacy experience (privacy by design, privacy regulations, for example)
• 3+ years of information security experience
• Extensive knowledge of GRC best practices for SaaS organizations
• Successful delivery of compliance for a SaaS product to one or more security standards (SOC 2, ISO 27001, and NIST 800, for example)
• Strong knowledge of security standards and US and EU privacy laws (HIPAA, CCPA and GDPR)
• Experience delivering on multi-stakeholder projects
• Familiarity with SaaS architectures, software development, and deployment to cloud providers

Desirable

• We are looking for a Senior Analyst to join our growing team to work across the company.
• As a Senior Analyst you would ensure the proactive security and privacy of Kajabi's products, services and personnel
• Perform internal reviews of privacy and security controls and policies
• Must collect, review, schedule and remediate internal security controls for compliance
• Develop techniques, procedures and utilities for improving risk assessments
• Coordinate development, implementation, and administration of security policies, practices, standards and programs
• Coordinate and develop effective security awareness programs
• Coordinate and project manage solutions for security posture
• Creating, testing and implementing business continuity, disaster recovery and incident response plans
• Conduct fraud, abuse and threat investigations, as necessary
• Provide support for data inventories and mapping
• Manage regular review of company data privacy policies and procedures and recommends improvements
• Assist in conducting data privacy risk and impact assessments and work with Product Managers, Engineers to ensure Privacy By Design
• Support the management of data subject requests, and incident and breach management
• Assist in the development of annual data privacy training materials and business unit specific training and manages employee compliance with required training
• Work with the Manager of Information Security & Privacy to ensure that all practices of the Information Security and Privacy program are intelligence and risk driven
• Support general Information Security & Privacy initiatives as they arise