Information Security Analyst, GR&C

📋 Description

• Conduct security and privacy risk assessments and security consulting engagements
• Assess information security of third-party vendors
• Maintain reporting and tracking for information security and privacy risks; remediate with risk owners
• Conduct periodic business continuity and disaster recovery testing
• Respond to customer and prospect security questions about CrashPlan’s products and security posture
• Support information security/privacy audits and initiatives (SOC2, ISO 27001, PCI-DSS, GDPR) incl. GRC platform

🎯 Requirements

• Bachelor’s degree in CS/IS/Cybersecurity or related field, or equivalent
• 3+ years professional experience in a similar role
• NIST 800-53, ISO 27001, SOC 2, GDPR, DPF experience
• Experience with third-party security, policy management, customer security
• Assurance and/or security awareness experience
• Experience conducting data privacy and security risk assessments

🎁 Benefits

• Medical, dental, vision benefits; 401k match
• Paid time off and flexible work options