Risk and Compliance Specialist, Confluent
Staff Governance, TPM
$176.9-203.4k
+ an annual bonus, and a competitive equity package
Data streaming platform
Job no longer available
Data streaming platform
1001+ employees
Job no longer available
$176.9-203.4k
+ an annual bonus, and a competitive equity package
1001+ employees
Company mission
To help every organization harness data in motion so they can compete and thrive in the modern world.
Role
Who you are
- 8+ years of relevant industry experience
- Strong knowledge of and experience in governance, security risk management, and compliance frameworks including related regulatory compliance requirements (e.g., SSAE18 (SOC 1 and 2), HITRUST, FedRAMP, PCI, ISO2700X, GDPR, ISAE 3400 and 3402,
- ISO 27001, HIPAA, CSA, CIS, NIST, C5, and other regulatory standards)
- Current Security CISSP, CISA, CISM, or equivalent certification completed or currently in progress
- Strong knowledge of and experience in all facets of integrated security governance, risk, and compliance management
- Experience in running long-term, complex security programs that deliver iterative improvements and risk reduction
- Strong security engineering fundamentals background in infrastructure security controls in GCP, AWS, Azure, and/or web application security
- Strong communication, interpersonal and leadership skills to work with both engineering and other non-technical stakeholders
- Bachelor's degree in Computer Science, a related field, or equivalent practical experience
What the job involves
- As the Staff Governance, Risk, and Compliance Specialist in the Trust & Security organization you will play a critical role in fulfilling the vision to secure Confluent’s platform and cloud offerings through a combination of technical expertise, policy governance, security risk management, customer assurance, third party risk management, certification compliance, and excellent program management skills
- You should be experienced in creating and maintaining a risk register, facilitating security control discussions with internal and external stakeholders, customers, performing risk assessments, developing metrics programs and senior management as well as corporate governance reporting, i.e. audit committee and board of directors
- Lead the adoption of a common risk and control framework
- Lead efforts to improve and operate our risk register and issue management programs by managing risk registration activities to ensure security risks are centrally and consistently cataloged
- Issue and action management to ensure steady progress is made towards a resolution that addresses the root cause(s) and prevents issue recurrence
- Producing insights from our aggregated risks to highlight relevant risk trends or behaviors, and delivering periodic reporting to measure our risk posture and enable escalations where necessary
- Periodically re-validating the accuracy of our risk registerPerform third-party risk assessments to maintain oversight of third-party vendors
- Lead the adoption of a common risk and control framework
- Develop and/or deliver regular risk metrics and reporting to Infosec / Staff leadership and management committees such as the Security Committee or Board Risk Committee
- Build and maintain strong cross-functional relationships across the organization to help with expectation setting, training, and awareness, and promote consistency and improvement in our processes
- Advise and collaborate with SMEs, including Audit & Compliance teams, to ensure adequate security controls are in place to manage risk and are aligned with leading best practices
- Keep up with relevant regulations, emerging threats, forecasts, policies, and best practices, and maintain a mindset of constant innovation to consider possibilities in advancing our risk management framework
- Lead implementation and operation of Governance Risk and Compliance (GRC) tooling to further improve and automate our GRC processes
- Evaluate the effectiveness of information security controls and performance by developing, monitoring, gathering, and analyzing information security and compliance metrics for management
- Harness synergies from security-related workflows such as security incident response, vulnerability management, and threat intelligence to build more informed risk intelligence that drives more purposeful action or recommendations
Our take
Confluent is a commercial company built on top of the open-source Apache Kafka project. Confluent and Kafka have developed a streaming data technology that processes massive amounts of information in real-time. The streaming database technology was developed at LinkedIn as a way of moving massive amounts of messages. The company decided to open-source that tech in 2011, and Confluent launched as the commercial arm in 2014.
While the base open-source component remains available for free download, it doesn’t include the additional tooling the company has built to make it easier for enterprises to use Kafka. Confluent's value add is in those additional tools, including a cloud version of the product and a marketplace for sharing extensions to the platform.
Confluent expanded strategic partnerships with Microsoft and acquired Immerok, and in 2023 expanded its cloud platform. 2024 saw further product expansions with the launch of the Confluent Migration Accelerator, all exemplifying how the company is living up to its name by rocket-boosting the benefits of Apache Kafka integration for companies.
Now, it looks like IBM is eyeing the company for acquisition and Confluent looks to be a natural fit. Long positioned as the real-time backbone behind modern application, Confluent would gain global scale and an even deeper enterprise reach under iBM, while cementing its role at the center of AI-driven architectures. For COnfluent, the deal would marka shift from fast-growing independent disruptor to foundational infrastructure player powering the next wave of enterprise AI.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Apr 2020
$250m
SERIES E
Jan 2019
$125m
SERIES D
Total funding: $455.9m
Company HQ
Old Mountain View, Mountain View, CA
Leadership
Jay Kreps
(Co-Founder & CEO)Prior to co-founding Confluent in 2014, Jay spent 7 years at LinkedIn, holding various roles including Principal Engineer and Principal Staff Engineer.
Share this job
View 21 more jobs at Confluent