IT Auditor, Couchbase
More information about location
Enterprise-class, multicloud to edge NoSQL database
Open for applications
Enterprise-class, multicloud to edge NoSQL database
501-1000 employees
Open for applications
More information about location
501-1000 employees
Company mission
Couchbase's mission is to provide an enterprise-class, multi cloud-to-edge database that offers the robust capabilities required for business-critical applications on a highly scalable and available platform.
Role
Who you are
- Bachelor's degree from an accredited college or university, or equivalent experience
- 5+ years of internal and external audit planning and execution experience preferably in a well known auditing firm
- Able to explain control requirements to control owners who might be non-technical or at management level
- Proven expertise in conducting root cause analyses and implementing effective corrective actions
- Excellent verbal and written communication skills, with a strong focus on attention to detail and quality of work
- Independant, energetic, self-starter with keen initiative and a focus on continuous improvement of GRC processes
- Strong relationship-building, interpersonal skills, and aptitude for working in a team environment
- Critical thinking and strong analytical skills with the ability to analyze and interpret results into actionable recommendations
- Certification in Internal Auditing (e.g., CIA, CISA) or Information Security (e.g., CISSP, CISM) is preferred
- Experience with GRC automation and management tools
- Required: Strong hands-on experience implementing information security standards (such as ISO 27001, NIST, SOC 2, HIPAA, and PCI-DSS)
- Required: ISO 27001 Lead auditor certification
- Desirable: Experience implementing HITRUST and FedRAMP
- Experience in developing policy, process, and procedure documents
- Business Continuity Planning certification from an accredited institution is an asset
What the job involves
- As a key member of our Governance, Risk, and Compliance (GRC) team, the Internal Auditor plays a crucial role in safeguarding our assets, ensuring compliance, and driving continuous improvement to support the company's ambitious expansion
- You'll have the opportunity to learn new skills, grow your career, and work alongside a team of the smartest, most passionate people in the industry
- Oversee the execution of the Information Security Management System (ISMS) audit process, including planning, conducting, and reporting on annual and ad-hoc audits
- Collaborate with both internal stakeholders and external auditors to ensure smooth and frictionless audits
- Collaborate with cross-functional teams to gain exposure to various aspects of the business, broadening your skillset and unlocking opportunities for professional development
- Issue and oversee the resolution of non-conformities identified during audits, providing recommendations to improve the control posture and align ISMS policies with industry best practices
- Administer and manage the GRC tool to effectively and efficiently run the audits. Map controls across various frameworks to optimize and automate the audit process to achieve productivity gains
- Assist with the development and delivery of security awareness and training programs for internal teams, fostering a culture of security and compliance
- Review supplier security questionnaires and conduct third-party risk assessments for new systems and services to ensure compliance with relevant standards
- Participate in the management of security incidents, including root cause analysis, corrective actions, and final report reviews
- Plan, design, execute, report, and communicate phishing campaigns to improve organizational resilience
- Conduct annual risk assessments and maintain the information security risk register, providing strategic insights to the GRC team
- Demonstrate strong multi-tasking and time management skills to effectively prioritize and deliver on multiple assignments and deadlines
- Review and document information security standards, controls, processes, internal and external audit outcomes for continuous improvement of Couchbase Compliance program
- Provide regular and timely status reports on ongoing projects and Information Security Management System (ISMS) activities, ensuring effective communication and progress tracking
Our take
Critical functions for digital business such as compute and storage have become cheaper by orders of magnitude with the advent of cloud computing. However, these businesses still face the challenge of architecting their services under this paradigm. Couchbase’s NoSQL database makes taking advantage of these features possible.
The cloud vendor's major bets on Kubernetes, mobile, and of course, NoSQL have paid off. Many of the world’s largest companies have come to consider this software as mission-critical and Couchbase has benefitted from this as exemplified by its IPO in 2021.
The biggest challenge for Couchbase is that it is playing in a large but competitive market, with the likes of DataStax and the publically traded MongoDB, and all the major cloud vendors vying for similar customers in the NoSQL space. However, Couchbase continues to grow post-IPO and serves influential clients including Mariott International, Amadeus, and LinkedIn.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 8 rounds)
May 2020
$105m
SERIES G
Mar 2016
$30m
SERIES F
Total funding: $251m
Company benefits
- Competitive salaries, traditional and Roth 401(k) with employer contributions (US), employee stock options, retirement planning, and ongoing pay reviews
- A sense of purpose in your work and shared passions with your teammates. Join an impact initiative group and experience the amazing feeling of Couchbase’s can-do culture
- Flexible time off, internal learning, and development opportunities, accreditations, boot camps, conferences, and a trust-based culture
- Couchbase Cares promotes philanthropy, inclusion and belonging, worldwide Couchbase celebrations, and sustainability and green teams that impact our local communities
- Full medical, dental, vision, and life insurance coverage, paid parental leave, and a Flexible Spending Account for the things you care about most
- Beautiful offices, free food, the tech you need, and a great setup whether you are office-based using an adjustable desk or receive a stipend for home-based work
- Work from home opportunities
Company values
- Be a Good Human, Always - Be authentic, assume and act with positive intent, even in tough times
- Act With Uncompromising Integrity, Period - Do the right thing every time, be honest and transparent
- Serve Your Family, As Defined by You - Put your family first and let the company work for you in times of need
- Attack Hard Problems, Driven by Customer Outcomes - Be courageous and innovative. Satisfy unmet, underserved needs delivering technical excellence and honesty
- Play to Win, Together - Put in work, be proud of it and be a great teammate for your colleagues
- Make Tomorrow Better Than Today, Start Now - Execute with intensity and urgency, knowing you have an impact
Company HQ
Santa Clara, CA
Articles
Leadership
Matt Cain
(President & CEO, not founder)Worked recently as President of Worldwide Field Operations for Veritas Technologies. Before that, as Chief Product Officer for Veritas’ $2.5B business Also previously held a variety of senior leadership positions at Symantec Corporation and Cisco Systems and earned an MBA from Stanford.
Share this job
View 11 more jobs at Couchbase