Staff Info Security Engineer
Core
Lead private sector compliance initiatives and support security initiatives by engaging process owners in the design, documentation, implementation, monitoring of controls, and demonstrating them to external auditors.
Role type
Staff Security Compliance Analyst (GRC)
Builds
Common controls framework for Okta and compliance assessments (ISMAP, SOC2, ISO 27001)
Domain
Cloud Security / Governance, Risk, and Compliance (GRC)
Deliverable
dashboards & analysis
Required skills
Project management, Technical implementation of ISMAP/SOC2/ISO controls, Security frameworks knowledge (NIST, FedRAMP, ISO 27001, SOC2), Gap analysis, Controls testing, Remediation planning, Documentation development, Risk assessment
Preferred skills
Future standards/regulations foresight, Independent work, Team collaboration
Technologies
Salesforce, Okta, ServiceNow, JIRA
Responsibilities
Participate in Security Compliance Assessments, Facilitate ISMAP compliance assessment, Interpret requirements across compliance frameworks, Collaborate to manage common controls framework, Schedule compliance walkthroughs, Ensure consistent operations and communications, Ensure visibility into key compliance projects through reporting, Analyze gaps between current status and future needs, Perform controls testing, Work with process owners on audit results and remediation, Develop security documentation, Assess security impact on system changes, Identify improvement opportunities
Seniority
Staff, hands-on IC
