Compliance Security Engineer, Lacework

• 5+ years of experience in Information Security in areas of compliance, audit, and risk; preferably at a startup
• Polished professionalism developed through consulting or engaging directly with customers, auditors, and third-parties
• Past experience in developing roadmap initiatives for certification efforts (e.g. GDPR, SOC 2, ISO 27001, PCI, HiTrust, FEDRAMP, etc.) and driving them through readiness and gap assessments, control implementation, and internal/third party audits
• Working knowledge of how compliance operates with cloud-native technology stacks
• Proficiency with common IaaS services/components and architectures
• Adept in documentation: create diagrams or necessary customer artifacts including policies, standards and procedures, and bring to light areas that need improvement
• Experience with responding to security questionnaires; conducting research, leading calls, and communicating with internal/external stakeholders using explicit technical details and professionalism
• Self-directed and motivated to foster creative problem solving as well as out of the box thinking
• Experience working remotely across many time zones and cultures
• Excellent written and verbal communication skills
• Security certification a plus - such as CISSP, CRISC, CISM, etc

Desirable

• Develop an in-depth understanding of the Lacework platform and the cloud technologies it’s built on
• Maintain and improve existing certifications and successfully obtain new ones. Develop roadmap initiatives based on global customer demands & Lacework’s growth strategy
• Prepare for and facilitate external audits associated with various security regulatory requirements
• Develop and maintain common control framework mappings to efficiently expand the compliance and auditing capabilities
• Establish and track key performance metrics as service level objectives (SLOs) of security related Field requests
• Drive projects, technical initiatives, and architectural/service improvements
• Work with Engineering teams to prioritize and track resolution of identified issues
• Always look for automation opportunities with continuous compliance as a constant objective. Become an expert at using Lacework and effectively showcase it’s use for our own compliance needs. Provide a feedback loop for product improvements
• Drive regular project reviews with leadership