Governance Risk and Compliance Analyst, ActionIQ
$137.3-152.5k
3+ days a week in office
Enterprise CX Hub
Job no longer available
Enterprise CX Hub
101-200 employees
Job no longer available
$137.3-152.5k
3+ days a week in office
101-200 employees
Company mission
To unlock the power of data and transform customer engagement to create authentic human connections.
Role
Who you are
- 5-8 years of Information security, Governance, Risk, and Compliance experience focusing on compliance assessments, risk assessments, and/or technology audits
- Bachelor's degree in Information Systems, Risk Management, Cybersecurity, or other related field
- Experienced performing information security audits or risk assessments
- Demonstrated advanced understanding of a broad range of technical concepts: logical access control, network security, encryption, data privacy, and application security
- Implementation experience of compliance frameworks such as SOC 2 Type II, GDPR, and industry frameworks such as NIST CSF and ISO 2700x
- Strong organizational skills with the ability to thrive in a fast-growing environment, leveraging best practices and approaching any problem as a team player with a can do attitude
- Knowledge of configuration management, change control/problem management integration, risk assessment and acceptance, exception management, and security baselines (e.g. CIS Baselines, NIST, vendor security technical implementation guides, etc.)
- Industry-recognized certifications are a plus: CRISC, CIPP, CDPSE, CISA, CISSP, or equivalent
What the job involves
- Work with the InfoSec leadership to ensure the enterprise-wide strategy and key initiatives are focused on the reduction of technology risk, governance, and compliance with policies and external regulatory compliance
- Conduct information security risk assessments, assess and document the design of controls and identify and report on gaps and opportunities in new and existing systems, processes, and technology
- Coordinate with external and internal auditors to expedite reviews and support the mitigation of relevant compliance concerns
- Address and fulfill client security requests, including questionnaires, by collaborating with relevant stakeholders to ensure the company with reducing its sales barriers
- Develop strategies for ensuring organizational compliance with SOC 2, HIPAA, Data Privacy, NIST, and other similar standards and regulations. Engage control owners and key stakeholders across the organization to collect and test evidence and assess compliance
- Collaborate to define Information Security requirements and develop/update associated policies
- Lead business continuity planning and exercises, as appropriate, and participate in disaster recovery
- Tactically operate the systems for: risk register management, vendor and software risk assessments, incident-related risk logging and mitigation, data subject access request workflows and management, management for the configuration of cookie compliance, enterprise policy management, and data mapping
- Lead the information security awareness programs to promote and foster the delivery of systems and services with security and privacy controls built-in
- Establish and foster relationships with the various areas of the business to build rapport and be viewed as a trusted partner to help teams deliver on their commitment to compliance with security and privacy policies and regulations
Our take
When businesses buy and sell third-party data, they face a range of regulations and restrictions that limit its usability. However, first-party data collected by companies for their own use presents a less restrictive approach to data collection and use.
ActionIQ helps companies directly collect, analyze, and utilize customer data in order to provide personalized marketing solutions. The company focuses on providing its services for mail, in-app, site, and paid media platforms, without using restrictive third-party data.
The startup has secured substantial funding and boasts a number of high-profile clients such as The New York Times, Shopify, and Pandora. It is continuing to research and develop its enterprise capabilities and customer advocacy and has been focused on obtaining strategic partnerships to push its growth goals.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Mar 2021
$68m
SERIES C
Jan 2020
$32m
SERIES C
Total funding: $145m
Company benefits
- 401(k) Plan: It's never too early to start saving. We provide a 401(k) plan to employees because we believe it should be easy for everyone to save and invest in their future.
- Hybrid Workplace: We operate in a hybrid model for our NYC based employees (in office: M, W, Th and remote: Tu, Fr) along with two remote seasons during the year where our employees can work from anywhere.
- Charitable Match: Employee donations of up to $500 per fiscal year will be matched.
- Person Focused Benefits: We offer benefits catered to the whole person, including top of the line healthcare coverage and additional wellness programs.
- Professional Development: We care about your professional interests and natural talents. You'll have the opportunity to explore, enhance and expand your skillset through conferences, workshops, experiential learning, cross-team collaboration and more.
- Generous PTO: We have a flexible PTO policy and encourage employees to take PTO to maintain work-life balance.
- Parental Leave: If you're a parent-to-be, congratulations! We've got you covered. We offer many options for taking paid time off to spend with the newest member of your family.
Company HQ
Flatiron District, New York, NY
Leadership
Tasso Argyros
(Co-Founder & CEO)Tasso founded Aster Data, which was acquired for 325M. Tasso's passion for empowering business users led him to start ActionIQ.
Nitay Joffe
(Co-Founder & CTO)After Nitay engineered Facebook's data infrastructure, they co-founded ActionIQ to explore his passion for databases, distributed systems, and big data.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job