Security Analyst, Shakepay

• Great communicator both written and oral with a strong attention to detail
• Successfully owned and authored Security audits and reports (SOC2 Type 2, ISO 27001, PCI, HIPAA, GDPR, etc.)
• Strong experience in managing enterprise risk and mitigation efforts through effective control maintenance and reporting
• Hands-on technical experience with the IT and Security controls and processes which you will own
• The ability to delegate tasks while maintaining a sense of ownership to the overarching goal
• Fluency in English is required due to the percentage of English-speaking customers and the nature of our platform, which is available to all Canadians

Desirable

• As the Security Analyst in Governance, Risk & Compliance you will be responsible for partnering with the entire Shakepay organization, including Security, Risk, Compliance, and Legal to mitigate and manage risk at Shakepay. This role will build, implement, maintain and report on Security policies, controls, and all other documentation
• In collaboration with all departments at Shakepay, this role will be responsible for managing all of Security’s audit requirements and controls for SOC2, ISO 27001, and PCI as well as be the internal point of contact for Regulatory and Compliance related requests and tasks
• Promote Shakepay’s Security First culture and risk management as a value proposition for our customers
• Lead and coordinate audit-related tasks and vendor relationships for our annual SOC2 Type 2 audit
• Develop and maintain policies and controls in support of operational and compliance goals to align with industry frameworks such as NIST, PCI, ISO, etc
• Perform risk assessments, internal audits, and additional tests across teams at Shakepay to ensure systems and processes remain in compliance with in-scope security, regulatory, and compliance controls
• Design and implement a suite of GRC tooling and automations to reduce resources necessary to monitor controls, data collection, and other audit and governance tasks
• Internal point of contact for cross-functional teams for Security related requests
• Own Shakepay’s internal vendor management process to ensure high confidence in our partners and vendors