Keyfactor, Inc.

Title: Security Compliance Analyst
Location: Barcelona, Spain
Job Function: Compliance
Employment Type: Full-Time
Industry: Enterprise Software
About the position 
We at Keyfactor are looking to hire a Security Compliance Analyst to join our fast-growing Cloud Operations and Compliance department. Security and Compliance works with all areas of the business, standing on the front lines to protect and enable fast, secure growth. The Security Compliance Analyst position will directly assist the Cloud Operations and Compliance Teams with the internal and external security and compliance responsibilities.
The position is based in Barcelona office with flexibility to work in hybrid setting when necessary. Applicants must hold Valid Right to Work in Spain to apply for this position.
RESONSIBILITIES
<ul>
<li>Participate in the collection of evidence for various audits and assessments (e.g., SOC, ISO27001, etc.)</li>
<li>Working with Keyfactor’s team members, suppliers, and business partners to ensure adherence to established Information Security policies</li>
<li>Communicating with the organization, including training, regarding information security policy implementations and technical measures</li>
<li>Consulting with all levels of the organization on information security control implementations and alignment with industry standards and best practices</li>
<li>Participate in internal risk assessments and audits</li>
<li>Responding in a timely manner to customers’ vendor risk assessments, information security questionnaires and evaluations</li>
</ul>
SKILLS AND QUALIFICATIONS
<ul>
<li>Fundamental technical troubleshooting and problem-solving skills</li>
<li>Formal industry and regulatory audit execution such as SOC 2, GDPR, CCPA, ISO 27001, PCI DSS, FedRAMP, and/or Sarbanes-Oxley</li>
<li>Information Security Policy composition, maintenance, and implementation experience</li>
<li>Executing risk management and treatment plans</li>
<li>Multi-tasking and prioritization involving complex technical and policy-related subjects</li>
<li>Currently maintains or is in the process of obtaining industry security certifications (e.g., CISSP, CEH, CISM, CISA, CIPT, etc.)</li>
<li>Basic systems administration capabilities (e.g., Windows Server, Active Directory user accounts, password management, security groups, etc.)</li>
</ul>
COMPENSATION
Salary will be commensurate with experience.
CULTURE, CAREER OPPORTUNITIES AND BENEFITS
We build teams that continually strive to get better than the day before. You will be challenged daily and given opportunities to grow personally and professionally. We balance autonomy and structure to create an entrepreneurial environment to spur creativity and new ideas. A few initiatives that make our culture special include:
<ul>
<li>Comprehensive benefit coverage</li>
<li>Dedicated employee focused ambassadors via Key Contributor &amp; Culture Committee</li>
<li>DIVERSE Commitment</li>
<li>Global Volunteer Day</li>
<li>Flexible time off</li>
<li>Monthly Cross Functional meetings</li>
<li>Monthly Leadership Development meetings</li>
<li>Monthly All Hands meetings – followed by group gatherings</li>
<li>Second Friday’s (the office is closed on the second Friday of every month)</li>
<li>The Keyfactor Alliance Program</li>
<li>Weekly Feedback Snapshot</li>
</ul>
OUR CORE VALUES
Our core values are extremely important to how we run our business and what we look for in every team member:
<ul>
<li>Trust is paramount – We deliver security software and solutions where trust is of the highest importance for our customers. We are honest and a trusted partner in every aspect of business.</li>
<li>Customers are core - We strategize, operate, and execute through a customer-centric view. We prioritize the security interests of our customers, and we act as if their data were our own.</li>
<li>Innovation never stops, it only accelerates - The speed of change is accelerating. We are committed, through investment and focus, to stay ahead of the innovation curve.</li>
<li>Deliver with agility - We thrive in high paced and continually changing environments. We navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
<li>Keyfactor is a proud equal opportunity employer. navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
</ul>

Keyfactor is a proud equal opportunity employer.

Barcelona

Security Compliance Analyst

Lob was built by technical co-founders with a vision to make the world programmable.
We offer two flagship APIs (print &amp; mail and address verification) that enable companies to send postal mail as effortlessly as sending emails. Lob is venture-backed by the most reputable investors in tech, and we are rapidly growing our team to shape the future of our company and meet the demands of a quickly growing customer base and dynamic product offerings.
As a proud Pledge 1% company, we’re committed to leveraging our product, partnerships, and people to drive positive social impact through <a href="http://www.lob.org" rel="noopener noreferrer nofollow ugc" target="_blank">Lob.org</a>, and are on a mission to make direct mail more sustainable.
We offer remote working opportunities, unless otherwise described in the job description, in AZ, CA, CO, DC, GA, IL, MA, MD, MI, MN, NC, NV, NY, OR, PA, TX, UT, and WA. You can also work onsite at our San Francisco headquarters.
If you are looking for a progressive, fun-spirited, and mentally stimulating environment, come join us at Lob!The Legal, Compliance and Security (LCS) team works across Lob to organize risk governance organizational structures, methodologies, and processes that are commensurate with industry best practice but tailored to Lob’s niche risk sensitivities. LCS capabilities allow Lob to manage security risk &amp; control programs that enable us to achieve company goals and better protect its customers and data in a responsible and proactive manner. We work with internal and external stakeholders to build and operate programs that last - including IT, Engineering, Product, Sales and Operations. 
We are growing our LCS team to further mature our compliance and security programs and ensure that the technical implementation of our internal controls is strong and well-managed. You will be responsible for maintaining and improving our common risk &amp; controls framework and building sustainable control assurance programs that keep the company aligned with our regulatory &amp; compliance obligations, policy requirements, and customer expectations. Your focus will be to ensure we have adequate internal controls in place, drive control adoption and maintenance, support control owner education and awareness, and manage roadmaps to resolve control gaps in a timely fashion.
<h3>As the Senior GRC and Security Analyst, you’ll…</h3>
<ul>
<li>Mature the company’s unified security risk and control framework and ensure its alignment against applicable laws, regulations, industry standards such as GDPR, CCPA, SOC, ISO, NIST Cyber Security Framework (CSF), PCI Data Security Standard, etc. as well as internal Information Security and IT policies &amp; standards</li>
<li>Support the LCS team and other stakeholders in integrating the unified security risk and control framework as part of their service capabilities to drive programmatic consistency</li>
<li>Support oversight and governance by building control assurance programs to proactively assess and report on the design, operating effectiveness, and sustainability of key controls</li>
<li>Lead efforts to address control implementation, remedy control gaps that address the root cause of control failures, drive control ownership and accountability, and build process and control documentation as needed</li>
<li>Be responsible for configuration and support of a wide range of security and networking technologies such as: IPS/IDS, SIEM, vulnerability scanners, identity and access management, access control, DLP, firewalls, endpoint security, email filtering, routers, switches, etc.</li>
<li>Working closely with various teams, to evaluate the current architecture and security related processes such as vulnerability management, patch management, endpoint security, cloud environment, etc. looking for ways to design and implement improvements</li>
<li>Assist in leading security incident response efforts to gather required evidence and remediate incidents</li>
<li>Manage Lob’s vulnerability management and patch management programs to include our bug bounty program, annual penetration tests, etc.</li>
<li>Be responsible for planning and managing security related projects</li>
</ul>

<h3>What will you bring to this role…</h3>
<ul>
<li>Minimum 8+ years of related work experience building or operating internal control programs to mitigate risks around security, confidentiality, integrity, availability, and privacy. </li>
<li>Prior technical security experience highly preferred</li>
<li>Strong experience with common industry audits and frameworks (SOC 2, ISO, HITRUST, etc) </li>
<li>Ability to work efficiently with minimal oversight/direction and collaborate effectively in cross functional projects</li>
<li>Have technical security-related knowledge of common risks, vulnerabilities, and threats and solid experience in escorting these issues through risk analysis / treatment / mitigation processes</li>
</ul>
&lt;#LI-REMOTE #LI-RW1We’re not just building a platform to make the world programmable. <a href="https://www.lob.com/blog/lobs-culture-values" rel="noopener noreferrer nofollow ugc" target="_blank">We’re also designing a great place to work</a>, and ​​a ground floor opportunity as an early member of the Lob team; you’ll directly shape the direction of our company.
Perks
<ul>
<li>Health benefits for you and your dependent(s)</li>
<li>Medical Flexible Spending Accounts (FSA)</li>
<li>Flexible vacation policy</li>
<li>Wellness program</li>
<li>Paid parental leave</li>
<li>401K</li>
<li>Paid volunteer time off to support the organizations you care most about</li>
<li>Commuter &amp; Parking benefits (includes monthly stipend) for those based out of our San Francisco office</li>
<li>Free lunch, snacks and dinner when working at our San Francisco office</li>
<li>Dog-friendly San Francisco office</li>
<li>Allowance for in-person team meetings (all flights and accommodations covered) for those not based out of our San Francisco office</li>
<li>Home-office setup and phone/internet stipend for those not based out of our San Francisco office</li>
</ul>
Our Commitment to Diversity
Lob is an equal opportunity employer and <a href="https://www.lob.com/blog/power-diversity-starts-data" rel="noopener noreferrer nofollow ugc" target="_blank">values diversity</a> of <a href="https://www.lob.com/blog/a-commitment-to-diversity" rel="noopener noreferrer nofollow ugc" target="_blank">backgrounds and perspectives</a> to cultivate an environment of understanding to have greater impact on our business and customers. We encourage under-represented groups to apply and do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or criminal history in accordance with local, state, and/or federal laws, including the <a href="https://sfgov.org/olse/sites/default/files/Document/FCO%20Art.%2049%20Official%20Notice%20to%20print%202017.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">San Francisco’s Fair Chance Ordinance</a>.

United States

Senior GRC and Security Analyst

Avertium

Avertium is the security partner that companies turn to for end-to-end Cybersecurity solutions that attack the chaos of the cybersecurity landscape with context. By fusing together human expertise and a business-first mindset with the right combination of technology and threat intelligence, Avertium delivers a more comprehensive, more programmatic approach to cybersecurity - one that drives action on the ground and influence in the boardroom. That's why over 1,200 mid-market and enterprise-level organizations across 15 industries turn to Avertium when they want to be more efficient, more effective, and more resilient when waging today's cyber war. Show no weakness.®The DFIR Consultant will contribute to Avertium’s DFIR practice, implement and execute best practices for incident handling, investigation and reporting, continuously develop the skills and expertise required to achieve customer objectives, and work with customers and other partners to respond to incidents, identify root causes, recommend solutions, and recover compromised environments.
<h3>Responsibilities:</h3>
<ul>
<li>Lead incident response engagements. Understand client requirements, coordinate the incident response team and liaising with client’s business stakeholders and technical teams.</li><li>Liaise with client third parties including legal, insurance and service providers, and provide guidance and subject matter expert advice to customer</li><li>Advise clients on business, technical, regulatory and reputation risk.</li><li>Advise clients on strategies to contain incidents and limit business impact of cyber incidents</li><li>Advise other incident response team members on strategies and techniques to accomplish client objective</li><li>Collect technical evidence from clients’ environments to prepare for forensic investigations</li><li>Conduct forensic investigations to determine the scope and impact of cyber incidents</li><li>Determine root cause of incidents using available evidence and analytical tools</li><li>Determine scope of data access and exfiltration</li><li>Provide recommendations and guidance to successfully evict threat actors from customer environments</li><li>Gather intelligence on threat actors to inform recommended containment, remediation and recovery actions</li><li>Develop threat intelligence reports and briefings in support of Avertium’s CTI and MSS groups</li><li>Manage the recovery of clients’ IT infrastructure during and after cyber attacks</li><li>Brief clients’ management, IT teams and third parties during and after cyber attacks</li><li>Prepare and deliver post-incident reports to client teams</li><li>Conduct threat hunts within EDR and SIEM tools for managed detection and response customers</li><li>Support team members in deeply technical investigations, provides guidance, and practical advice</li><li>Provides thought leadership on the design, and implementation of new detection strategies</li><li>Stays relevant with cyber security threats, counter measures and associated technologies</li><li>Participate in an on-call rotation to provide 24X7X365 client incident coverage</li><li>Identify opportunities to position additive professional and managed services to clients</li></ul>
<h3>Qualifications for Success:</h3>
<ul>
<li>Minimum of Bachelor's Degree in computer science, telecommunications management, electrical engineering, or a related field or have 5+ years of experience with broad background in Cyber Security specifically relating to digital forensics and response.</li><li>Minimum of 3 years of direct experience in digital forensics and incident response</li><li>Dynamic team member able to manage multiple projects simultaneously</li><li>Highly capable communicator able to relate technical concepts to business stakeholders</li><li>Advanced cyber certifications including GCIH, CISSP, CISA, CEH, ECIH and/or technology-specific certifications such as MCSE, CCNA are preferred</li><li>Skills:</li><li>Conversant in many areas of cyber security and learns new concepts quickly</li><li>Proven subject matter ability in relevant areas, such as incident response, intrusion analysis, incident handling, malware analysis (including network attack vectors and YARA RegEx), web security or security engineering</li><li>Strong working knowledge of common security tools, such as a SIEM, AV, scanners, proxies, WAF (policies rules, process and workflow), netflow, IDS or forensics tools</li><li>Strong interpersonal and leadership skills when building credibility as a peer as well as in presenting analytical data effectively to varied (including executive) audiences</li><li>Strong understanding of the cyber kill chain, attacker tactics, techniques, and procedures, and the MITRE ATT&amp;CK Framework</li><li>Strong understanding of cloud technologies and related security best practices. Experience handling security incidents in the cloud.</li><li>Firm understanding of endpoint and network-based security solutions, including EDR, firewalls, proxies and email security gateways</li><li>A solid grasp of networking and core Internet protocols (e.g. TCP/IP, DNS, SMTP, HTTP, SMB, and distributed networks)</li><li>Proficient in network forensics including PCAP analysis, network security, and IDS/IPS analysis</li><li>Able to recognize common attack vectors such as recon scans, botnet, malware, command and control activity (C2), worms, trojans, and viruses</li><li>Experience with common operating systems, such as Linux, both from a forensic and threat hunting point of view.</li><li>Strong understanding of relevant laws and regulations (e.g. HIPAA, CCPA, GDPR, PCI, etc) as related to cyber incident handling and remediation</li><li>#LI-CS1</li></ul>In addition to a career in the challenging world of cyber security, Avertium offers competitive salaries, full benefits, unlimited paid time off, participation in 401(k), and opportunities for professional growth and development. We offer the opportunity to work with cutting-edge security technologies in a stimulating work environment.Avertium provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Digital Forensics &amp; Incident Response Consultant | Remote, USA

Chainalysis

Like the brakes on a car, the Security team’s mission is to enable Chainalysis to accelerate with confidence. Our Vision is to build an environment where Information Security risks are identified, understood, and led to an acceptable level across Chainalysis. We have the tools, resources, and expertise to make optimal decisions for business success.
We're looking for Senior Product Security Engineers who are instinctively driven to improve the environment around them whether that be infrastructure, systems, or methodologies. Curiosity and an instinct to search for ways to reduce the likelihood and impact of a breach of confidentiality, integrity or availability are key.  We measure their success by the ability to secure and empower the organization to build, deploy, and maintain secure services and products while creating a positive impact on our security posture and culture. 
In one year you’ll know you were successful if you’ve…
<ul>
<li>Developed a Product Security program that collaborated with partners, has clearly scoped projects, made data driven decisions, and emulate a positive security culture</li>
<li>Completed a vulnerability management program with a defined methodology and low friction implementation</li>
<li>Enhanced security architecture review process through the technical expertise and threat modeling to provide practical guidance</li>
<li>Conducted regular penetration tests, application and cloud security assessments to identify configuration drift, misconfigurations, multi-step chained vulnerabilities</li>
<li>Collected and prepared metrics to identify trends, opportunities of improvement, and executive summaries</li>
<li>Liaised and partnered with leadership and engineers to increase the adoption of security throughout and earlier in the software development lifecycle</li>
<li>Lead, support and grow a product security team through coaching, mentorship, cross-collaborating training </li>
</ul>
A background like this helps: 
<ul>
<li>Strong fundamental knowledge and experience in assessing, building, auditing, and securing solutions for a wide range of technologies.</li>
<li>Experience scoping and completing large cross-functional projects</li>
<li>Proven success in building strategic partnerships across multiple teams within an organization</li>
<li>Confident in navigating ambiguity and evolving, innovative technologies including Web3 </li>
<li>Experience building out Product Security programs in fast moving environments</li>
<li>Collaborating with cross-functional partners to build comprehensive solutions</li>
<li>Background securing cloud-native environments and SaaS technologies</li>
<li>Demonstrated domain expertise across multiple disciplines (Development, On-Prem &amp; Cloud Solutions, CI/CD pipelines, Application Security, Vulnerability Management)</li>
<li>Mentor with the ability to explain the “why” behind decisions and technical concepts</li>
</ul>At Chainalysis, we help government agencies, cryptocurrency businesses, and financial institutions track and investigate illicit activity on the blockchain, allowing them to engage confidently with cryptocurrency. We take care of our people with great benefits, professional development opportunities, and fun.
You belong here. 
At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. Some of the ways we’re ensuring we keep learning are an internal Diversity Committee, Days of Reflection throughout the year including International Women’s Day, Juneteenth, Harvey Milk Day, and International Migrant’s Day, and a commitment to continue revisiting and reevaluating our diversity culture. 
We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. Additionally, if you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more <a href="https://go.chainalysis.com/rs/503-FAP-074/images/Interview%20Accommodations%20Request.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>. We can’t wait to meet you.  
Applying from the EU? Please review our <a href="https://go.chainalysis.com/rs/503-FAP-074/images/GDPR%20Notice.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Candidate GDPR Notice.</a>

By submitting this application, I consent to and authorize Chainalysis to contact my former employers, and any and all other persons and organizations for information bearing upon my qualifications for employment.  I further authorize the listed employers, schools and personal references to give Chainalysis (without further notice to me) any and all information about my previous employment and education, along with other pertinent information they may have, and hereby waive any actions which I may have against either party(ies) for providing a reference.  I understand any future employment will be contingent on the Company receiving satisfactory employment references.

Chainalysis COVID-19 Policy - USA
All employees are required to have or obtain a COVID-19 vaccination as a condition of employment at Chainalysis, unless an exemption has been approved. All employees shall be required to report their vaccine status. All new employees shall be required to provide proof of their vaccination status prior to the start of their employment.  
Chainalysis COVID-19 Policy - EMEAAs an employer, Chainalysis is obliged to ensure a healthy and safe working environment. This means that we must try to prevent the coronavirus from spreading inside the workplace and all employees are obliged to follow the local regulations issued by the relevant health authorities.  
<ul>
<li>To help support a safe work environment, we encourage all employees in EMEA to get fully vaccinated against COVID-19.</li>
<li>Employees will not be required to attend an event or in-person customer meeting. </li>
<li>Employees in the EU and the UK are allowed to travel internationally for internal meetings to any country deemed “green or amber” by the EU and the UK authorities. All attendees for Chainalysis in-person events or meetings will be required to adhere to the following guidelines:  
<ul>
<li>International travel will only be permitted if you receive approval from both your manager and Executive Leader</li>
<li>You must familiarize yourself and comply with any screening/safety protocols imposed by the entity/individual hosting the in-person meeting or event</li>
<li>You must comply with any and all safety guidelines and travel restrictions established by applicable law  </li>
<li>If you are in close or proximate contact with others at the event/customer site and test positive for COVID-19, you must immediately notify the People Team and avoid contact with others for 10 days</li>
</ul>
</li>
</ul>
Chainalysis COVID-19 Policy - APACWith circumstances changing on a regular basis and parts of our APAC team going in and out of mandatory lockdown, APAC will continue to follow country legislation and guidelines.

New York

California

Washington

Senior Product Security Engineer

Amazon.com

Job summaryThe AWS Global Professional Services Security &amp; Infrastructure team works with our largest enterprise customers to operationalize the shared responsibility model as they migrate to the cloud. Are you a Governance, Risk, and Compliance leader who can address the challenges of migrating systems and workloads to the cloud? Are you skilled at helping Healthcare &amp; Life Sciences (HCLS) customers address their enterprise risk management and HCLS regulatory requirements using highly scalable computing architectures? AWS offers a cloud platform with a global reach and we are looking for a passionate and experienced professional to help the expansion of the Professional Services HCLS Compliance Team and enforce healthcare regulatory compliance requirements. This role will help enable our customers in moving their workloads and regulated data into the cloud by addressing specific risk, regulatory, and compliance requirements. The ideal candidate should be an innovative security/compliance professional who has the ability to handle a wide range of compliance requirements, is willing to dive in to the details, can translate those requirements into scalable solutions, and is able to communicate at all levels within an organization. Responsibilities include: <ul><li>Expertise – Lead teams that include Amazonians, partners, and customers to enhance healthcare regulatory compliance programs</li><li>Solutions - Define and deliver innovative compliance and risk management approaches to customers that help the customer understand how to move sensitive workloads onto the cloud faster.</li><li>Delivery – Engagements will require working to resolve security assurance questions and to understand how to manage risk and achieve compliance while operating in the AWS Cloud through deep dive discussions, strategic presentations/recommendations, and hands on demonstrations of automating compliance in the AWS environment.</li><li>Insights - Work with AWS engineering, support and business teams to convey partner and customer feedback as input to AWS technology roadmaps.</li></ul>Inclusive Team CultureHere at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have thirteen employee-led affinity groups, reaching 85,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.Work/Life BalanceOur team puts a high value on work-life harmony. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here. We are a customer-obsessed organization—leaders start with the customer and work backwards. They work vigorously to earn and keep customer trust. As such, this is a customer facing role in a hybrid delivery model. Project engagements include remote delivery methods and onsite engagement that will include travel to customer locations as needed.Mentorship &amp; Career GrowthOur team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship. We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.This is a customer facing role. You will be required to travel to client locations and deliver professional services when needed.<h3>Basic Qualifications</h3>• 10+ years experience in IT security, compliance and risk management, data privacy, or security controls• 5+ years in IT security leadership role leading successful security initiatives • Experience advising customers on architectures meeting industry standards such as HIPAA, HITRUST, ISO 27001, GDPR, and NIST/DoD frameworks • Experience with enterprise risk management methods and techniques to drive successful outcomes in a global enterprise environment • Bachelor's Degree in Computer Science, Information Systems Management, Information Security or equivalent experience required <h3>Preferred Qualifications</h3>• Experience in performing security assessments and information system audits of network, operating systems, application security, as well as auditing IT processes • Clear understanding of Agile, CI/CD, DevOps approach and how they impact risk management and compliance • Demonstrated ability to think strategically about business, product, and technical challenges • Experience building enterprise governance, risk, and compliance programs or driving the program's evolution to meet new regulatory requirements • Proven background in clearly writing complex technical documents that can be presented across a varied enterprise corporate audience • CISSP, CISA, CISM, or HITRUST Practitioner certification is preferredThe pay for this position in Colorado starts at $153,550 (yr); however, base pay offered may vary depending on job-related knowledge, skills, and experience. A sign-on bonus and restricted stock units may be provided as part of the compensation package, in addition to a full range of medical, financial, and/or other benefits, dependent on the position offered. This information is provided per the Colorado Equal Pay Act. Base pay information is based on market location. Applicants should apply via Amazon's internal or external careers site.Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.Pursuant to the Los Angeles Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Security Consultant - HIPAA, AWS HIPAA Compliance Program

Apply to GDPR Cyber Security Jobs in companies remotely and near you. New GDPR Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Compliance Analyst at Keyfactor, Inc.	Full Time CISM Audit Analyst Consulting
Senior GRC and Security Analyst at Lob	Remote Full Time Analyst Incident Response Audits
Digital Forensics & Incident Response Consultant \| Remote, USA at Avertium	Remote Full Time Forensic Consultant Incident Response
Senior Product Security Engineer at Chainalysis	Remote Full Time Manager Application Security Auditing
Security Consultant - HIPAA, AWS HIPAA Compliance Program at Amazon.com	Remote Full Time CISM Consultant DOD

GDPR Cyber Security Jobs

0 GDPR Cyber Security Jobs. Page 1 of 1

5 closed gdpr cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

GDPR Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

GDPR Cyber Security Jobs

0 GDPR Cyber Security Jobs. Page 1 of 1

5 closed gdpr cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

GDPR Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter