Principal InfoSec & Compliance Analyst, Solo.io

• The ideal candidate will have hands-on security compliance experience in a cloud native environment, as well as excellent customer facing and technical documentation skills
• 3+ years of experience in information security, governance, risk, and compliance roles
• Successful track record of obtaining SOC2 and ISO27001 compliance
• 5+ years of SOC analyst or security compliance management experience in a cloud native environment
• 2+ years of software development / DevOps or related experience
• 3+ years of SaaS and Cloud technical hands on experience
• Experienced in authoring and implementing information security programs and policy frameworks
• Deep understanding and experience implementing controls for security standards and frameworks (NIST, ISO 27001/27002, OWASP, SOC 2, PCI DSS)
• Strong program management and organizational skills
• Strong communication and collaboration skills to build relationships with internal stakeholders across the organization, at the leadership level and with customers
• Cybersecurity certifications (SSCP, CompTIA Security, etc)

Desirable

• The Infosec and Compliance Analyst plays a pivotal role securing Solo’s infrastructure, data and software
• This person is responsible for helping Solo.io define, establish and manage our corporate security strategy
• This is a hands-on role helping Solo build and define the security compliance mechanisms for our products and services
• It involves working with all departments at Solo.io to identify areas relevant to each department for compliance purposes, providing expert guidance
• In addition, this person will help implement and document applicable policies and processes
• The person in this role will work directly with auditors leading our security compliance
• They may also work with our customers and prospects to understand security requirements, respond to security related inquiries and help Solo establish security commitments between both parties
• Lead and own internal cybersecurity audits to ensure operational environments stay compliant and secure
• Develop security policy documents and provide expert guidance on cybersecurity topics and policies
• Define and build security strategy and training for the company and for different teams, working internally with stakeholders and department leaders to establish security standards and processes
• Establish and maintain a security compliance plan across the company, including, but not limited to SOC 2 and ISO27001 compliance. This requires extensive project management and organizational skills
• As needed, own communication with customers regarding security compliance and generate responses to security questionnaires
• Manage compliance with relevant data privacy and information security laws and regulations, including, but not limited to GDPR, CCPA
• Lead incident response plan and cross functional team
• Experience establishing and maintaining security compliance program for SaaS offering