Information Security Manager, Lacework
Data driven cloud-native application protection platform
Job no longer available
Data driven cloud-native application protection platform
501-1000 employees
Job no longer available
501-1000 employees
Company mission
To be the security platform for the cloud.
Role
Who you are
- 3+ years of experience as a people manager within Information Security in areas of compliance, audit, privacy and risk; preferably at a startup
- Polished professionalism developed through consulting or engaging directly with customers, auditors, and/or third-parties
- Past experience in developing roadmap initiatives for certification efforts (e.g. GDPR, SOC2 type II, ISO 27001/17/18, PCI, HiTrust, FEDRAMP, etc.) and driving them through readiness and gap assessments, control implementation, and internal & external third party audits
- Proficiency in how compliance operates with cloud-native technology stacks
- Comfortable and experienced in a customer-facing role, ability to effectively communicate technical information at varying levels, understanding of the vendor risk assessment process (inbound), experts in polished collateral development (briefs, papers, standards) for external consumption
- Ability to prioritize in a fast-changing environment; Ability to partner with and lead others not reporting directly to you
- Experience and knowledge of cloud infrastructures (AWS, GCP, Azure)
- General knowledge of applicable data privacy practices and laws (e.g. GDPR, CCPA, PIPEDA)
- Experience writing modular and auditable policies, procedures, control objectives, and standards
- Experience managing teams remotely across many time zones and cultures
- Excellent written and verbal communication skills
- Security certification is a plus - such as CISSP, CRISC, CISM, etc
What the job involves
- Build a team of highly skilled security, compliance, risk and privacy practitioners
- Provide leadership and direction for innovative improvements to the security posture of Lacework
- Understand the company's vision and develop a strategy and documented plan for the team to reach its short-term and long-term goals
- Serve as an escalation path for information security, privacy, and GRC issues
- Develop an in-depth understanding of the Lacework platform and the cloud technologies it’s built on
- Maintain and improve existing certifications and successfully obtain new ones. Develop roadmap initiatives based on global customer demands & Lacework’s growth strategy
- Prepare for and facilitate external audits associated with various security, regulatory requirements
- Develop and maintain common control framework mappings to efficiently expand the compliance and auditing capabilities
- Develop robust risk management programs that provide broad risk visibility (risk register) and are data driven
- Work with cross-functional teams to prioritize and track mitigation and resolution of identified risks; drive process improvements for risk reduction
- Always look for automation opportunities with continuous compliance as a constant objective. Become an expert at using Lacework and effectively showcase its use for our own compliance needs. Provide a feedback loop for product improvements
- Effective management and presentation of project reviews with leadership
Our take
Lacework is a cloud security startup that simplifies cloud security, reduces incident noise, and cuts down on the number of interfaces that businesses need to use. It helps businesses reduce their expenses and the time spent manually tracking issues.
Lacework offers a full package of cloud security services for its customers, covering security for infrastructure as code, scanning for vulnerabilities in build-time and run time, runtime security for cloud-native environments, and configuration and compliance.
The company faces competition from businesses like Threat Stack, Prisma Cloud, and Aqua Platform. However, as more companies move online and the need for secure cloud-native services continues to grow, Lacework has ample opportunity to see continued growth as the leading CNAPP solution.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-6% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Nov 2021
$1.3bn
SERIES D
Jan 2021
$525m
SERIES D
Total funding: $1.9bn
Company benefits
- Competitive medical, dental, and vision plans
- Employer contribution to health savings account (HSA)
- Flexible Spending Accounts (FSAs)
- Employee Assistance Program
- Flexible vacation time
- Parental leave for birthing and non-birthing parents
- Recharge days
- Paid holidays
- 401(k) for eligible employees & competitive global retirement plans
- Life insurance for eligible employees
- Short term disability
- Long term disability
- Flexible health and mental wellness stipend
- Home internet & cell phone stipend
- Commuter benefits
Leadership
Vikram Kapoor
(CTO)Studied Computer Science at Indian Institute of Technology, and University of Minnesota. Worked as a Senior Software Engineer at Valicert Inc; Kuokoa Networks; and Pillar Data Systems. Worked for over 6 years at Oracle Corporation in Development Management. Was Senior Director of Engineering at Bromium. Was Entrepreneur in Residence at Sutter Hill Ventures.
Share this job