Keyfactor, Inc.

Title: Security Compliance Analyst
Location: Barcelona, Spain
Job Function: Compliance
Employment Type: Full-Time
Industry: Enterprise Software
About the position 
We at Keyfactor are looking to hire a Security Compliance Analyst to join our fast-growing Cloud Operations and Compliance department. Security and Compliance works with all areas of the business, standing on the front lines to protect and enable fast, secure growth. The Security Compliance Analyst position will directly assist the Cloud Operations and Compliance Teams with the internal and external security and compliance responsibilities.
The position is based in Barcelona office with flexibility to work in hybrid setting when necessary. Applicants must hold Valid Right to Work in Spain to apply for this position.
RESONSIBILITIES
<ul>
<li>Participate in the collection of evidence for various audits and assessments (e.g., SOC, ISO27001, etc.)</li>
<li>Working with Keyfactor’s team members, suppliers, and business partners to ensure adherence to established Information Security policies</li>
<li>Communicating with the organization, including training, regarding information security policy implementations and technical measures</li>
<li>Consulting with all levels of the organization on information security control implementations and alignment with industry standards and best practices</li>
<li>Participate in internal risk assessments and audits</li>
<li>Responding in a timely manner to customers’ vendor risk assessments, information security questionnaires and evaluations</li>
</ul>
SKILLS AND QUALIFICATIONS
<ul>
<li>Fundamental technical troubleshooting and problem-solving skills</li>
<li>Formal industry and regulatory audit execution such as SOC 2, GDPR, CCPA, ISO 27001, PCI DSS, FedRAMP, and/or Sarbanes-Oxley</li>
<li>Information Security Policy composition, maintenance, and implementation experience</li>
<li>Executing risk management and treatment plans</li>
<li>Multi-tasking and prioritization involving complex technical and policy-related subjects</li>
<li>Currently maintains or is in the process of obtaining industry security certifications (e.g., CISSP, CEH, CISM, CISA, CIPT, etc.)</li>
<li>Basic systems administration capabilities (e.g., Windows Server, Active Directory user accounts, password management, security groups, etc.)</li>
</ul>
COMPENSATION
Salary will be commensurate with experience.
CULTURE, CAREER OPPORTUNITIES AND BENEFITS
We build teams that continually strive to get better than the day before. You will be challenged daily and given opportunities to grow personally and professionally. We balance autonomy and structure to create an entrepreneurial environment to spur creativity and new ideas. A few initiatives that make our culture special include:
<ul>
<li>Comprehensive benefit coverage</li>
<li>Dedicated employee focused ambassadors via Key Contributor &amp; Culture Committee</li>
<li>DIVERSE Commitment</li>
<li>Global Volunteer Day</li>
<li>Flexible time off</li>
<li>Monthly Cross Functional meetings</li>
<li>Monthly Leadership Development meetings</li>
<li>Monthly All Hands meetings – followed by group gatherings</li>
<li>Second Friday’s (the office is closed on the second Friday of every month)</li>
<li>The Keyfactor Alliance Program</li>
<li>Weekly Feedback Snapshot</li>
</ul>
OUR CORE VALUES
Our core values are extremely important to how we run our business and what we look for in every team member:
<ul>
<li>Trust is paramount – We deliver security software and solutions where trust is of the highest importance for our customers. We are honest and a trusted partner in every aspect of business.</li>
<li>Customers are core - We strategize, operate, and execute through a customer-centric view. We prioritize the security interests of our customers, and we act as if their data were our own.</li>
<li>Innovation never stops, it only accelerates - The speed of change is accelerating. We are committed, through investment and focus, to stay ahead of the innovation curve.</li>
<li>Deliver with agility - We thrive in high paced and continually changing environments. We navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
<li>Keyfactor is a proud equal opportunity employer. navigate through newly added variables, adjust accordingly, while driving towards our strategic goals.</li>
<li>Teams make “it” happen - Vision and goals are not individually achievable - They require teamwork. We pride ourselves in operating as a cohesive team, creating promoters and partners, and winning as one.</li>
</ul>

Keyfactor is a proud equal opportunity employer.

Barcelona

Security Compliance Analyst

Lob was built by technical co-founders with a vision to make the world programmable.
We offer two flagship APIs (print &amp; mail and address verification) that enable companies to send postal mail as effortlessly as sending emails. Lob is venture-backed by the most reputable investors in tech, and we are rapidly growing our team to shape the future of our company and meet the demands of a quickly growing customer base and dynamic product offerings.
As a proud Pledge 1% company, we’re committed to leveraging our product, partnerships, and people to drive positive social impact through <a href="http://www.lob.org" rel="noopener noreferrer nofollow ugc" target="_blank">Lob.org</a>, and are on a mission to make direct mail more sustainable.
We offer remote working opportunities, unless otherwise described in the job description, in AZ, CA, CO, DC, GA, IL, MA, MD, MI, MN, NC, NV, NY, OR, PA, TX, UT, and WA. You can also work onsite at our San Francisco headquarters.
If you are looking for a progressive, fun-spirited, and mentally stimulating environment, come join us at Lob!The Legal, Compliance and Security (LCS) team works across Lob to organize risk governance organizational structures, methodologies, and processes that are commensurate with industry best practice but tailored to Lob’s niche risk sensitivities. LCS capabilities allow Lob to manage security risk &amp; control programs that enable us to achieve company goals and better protect its customers and data in a responsible and proactive manner. We work with internal and external stakeholders to build and operate programs that last - including IT, Engineering, Product, Sales and Operations. 
We are growing our LCS team to further mature our compliance and security programs and ensure that the technical implementation of our internal controls is strong and well-managed. You will be responsible for maintaining and improving our common risk &amp; controls framework and building sustainable control assurance programs that keep the company aligned with our regulatory &amp; compliance obligations, policy requirements, and customer expectations. Your focus will be to ensure we have adequate internal controls in place, drive control adoption and maintenance, support control owner education and awareness, and manage roadmaps to resolve control gaps in a timely fashion.
<h3>As the Senior GRC and Security Analyst, you’ll…</h3>
<ul>
<li>Mature the company’s unified security risk and control framework and ensure its alignment against applicable laws, regulations, industry standards such as GDPR, CCPA, SOC, ISO, NIST Cyber Security Framework (CSF), PCI Data Security Standard, etc. as well as internal Information Security and IT policies &amp; standards</li>
<li>Support the LCS team and other stakeholders in integrating the unified security risk and control framework as part of their service capabilities to drive programmatic consistency</li>
<li>Support oversight and governance by building control assurance programs to proactively assess and report on the design, operating effectiveness, and sustainability of key controls</li>
<li>Lead efforts to address control implementation, remedy control gaps that address the root cause of control failures, drive control ownership and accountability, and build process and control documentation as needed</li>
<li>Be responsible for configuration and support of a wide range of security and networking technologies such as: IPS/IDS, SIEM, vulnerability scanners, identity and access management, access control, DLP, firewalls, endpoint security, email filtering, routers, switches, etc.</li>
<li>Working closely with various teams, to evaluate the current architecture and security related processes such as vulnerability management, patch management, endpoint security, cloud environment, etc. looking for ways to design and implement improvements</li>
<li>Assist in leading security incident response efforts to gather required evidence and remediate incidents</li>
<li>Manage Lob’s vulnerability management and patch management programs to include our bug bounty program, annual penetration tests, etc.</li>
<li>Be responsible for planning and managing security related projects</li>
</ul>

<h3>What will you bring to this role…</h3>
<ul>
<li>Minimum 8+ years of related work experience building or operating internal control programs to mitigate risks around security, confidentiality, integrity, availability, and privacy. </li>
<li>Prior technical security experience highly preferred</li>
<li>Strong experience with common industry audits and frameworks (SOC 2, ISO, HITRUST, etc) </li>
<li>Ability to work efficiently with minimal oversight/direction and collaborate effectively in cross functional projects</li>
<li>Have technical security-related knowledge of common risks, vulnerabilities, and threats and solid experience in escorting these issues through risk analysis / treatment / mitigation processes</li>
</ul>
&lt;#LI-REMOTE #LI-RW1We’re not just building a platform to make the world programmable. <a href="https://www.lob.com/blog/lobs-culture-values" rel="noopener noreferrer nofollow ugc" target="_blank">We’re also designing a great place to work</a>, and ​​a ground floor opportunity as an early member of the Lob team; you’ll directly shape the direction of our company.
Perks
<ul>
<li>Health benefits for you and your dependent(s)</li>
<li>Medical Flexible Spending Accounts (FSA)</li>
<li>Flexible vacation policy</li>
<li>Wellness program</li>
<li>Paid parental leave</li>
<li>401K</li>
<li>Paid volunteer time off to support the organizations you care most about</li>
<li>Commuter &amp; Parking benefits (includes monthly stipend) for those based out of our San Francisco office</li>
<li>Free lunch, snacks and dinner when working at our San Francisco office</li>
<li>Dog-friendly San Francisco office</li>
<li>Allowance for in-person team meetings (all flights and accommodations covered) for those not based out of our San Francisco office</li>
<li>Home-office setup and phone/internet stipend for those not based out of our San Francisco office</li>
</ul>
Our Commitment to Diversity
Lob is an equal opportunity employer and <a href="https://www.lob.com/blog/power-diversity-starts-data" rel="noopener noreferrer nofollow ugc" target="_blank">values diversity</a> of <a href="https://www.lob.com/blog/a-commitment-to-diversity" rel="noopener noreferrer nofollow ugc" target="_blank">backgrounds and perspectives</a> to cultivate an environment of understanding to have greater impact on our business and customers. We encourage under-represented groups to apply and do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or criminal history in accordance with local, state, and/or federal laws, including the <a href="https://sfgov.org/olse/sites/default/files/Document/FCO%20Art.%2049%20Official%20Notice%20to%20print%202017.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">San Francisco’s Fair Chance Ordinance</a>.

United States

Senior GRC and Security Analyst

Kin + Carta

At Kin + Carta, we’ve got opportunities to offer you — for growth, for leadership, for big, world-changing impact and for, dare we say it, fun. We are a global workforce that is committed to building a world that works better for everyone. And that starts with our Kin. That’s why we’re proud of: 
<ul>
<li><a href="https://www.kinandcarta.com/en-us/careers/life-at-kin-and-carta/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">The life we create within our virtual walls, every day</a></li>
<li><a href="https://www.kinandcarta.com/en-us/insights/2022/05/why-work-for-a-b-corp/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">Being B Corp certified</a></li>
<li><a href="https://www.kinandcarta.com/en-us/insights/2022/04/2022-womens-choice-award/?utm_source=website&amp;utm_medium=retargeting&amp;utm_campaign=EmployerBrand&amp;utm_content=job_description" rel="noopener noreferrer nofollow ugc" target="_blank">Our honor as a “Best Company to Work For” by Women's Choice Award</a></li>
</ul>
<h3>The role</h3>
The ideal Americas Information Security Officer for Kin + Carta is innovative, passionate about global information security with both policy and technical experience. This person looks to continually learn, and enjoys sharing expertise. Strong verbal and written communication are a must. Experience working with HITRUST, or Nessus is a plus.

<h3>Role responsibilities</h3>
<ul>
<li>Pursue infosec excellence for the region with the continuous development and management of K+C InfoSec standards to ensure compliance for HITRUST, PCI-DSS, ISO 27001 and other required controls.</li>
<li>Perform internal audits on information security in line with international standards, which includes but not restricted to HITRUST</li>
<li>Security assess new and current suppliers - plan, organize and review Digital implementations, tools, APIs and platforms. </li>
<li>Support the completion of stakeholder infoSec schedules for RFPs, MSAs, delivery and project teams, by resolving project queries and approval of security requirements </li>
<li>Contribute to the InfoSec Risk Register and collaborate on treatment of risks tailored to the needs of the region. Manage and track mitigations, remediations and compensating controls.</li>
<li>Completing Information Security assessments from external parties in a timely manner</li>
<li>Contribute to the performance and improvement of the ISMS</li>
<li>Establish and review monitoring and logging process and standards </li>
<li>Designing, delivering and monitoring InfoSec training and awareness</li>
<li>Reviewer and approver of ISMS documentation </li>
<li>Collaborate with K+C and CDS, providing information security consultancy, strategy and implementation planning along with the prioritization of the highest impact projects </li>
<li>Joint responsibility with the Digital Defense team for all BAU tickets and tasks and recording time and tag allocation.</li>
</ul>

<h3>Minimum qualifications</h3>
We want all new hires to succeed in their roles at Kin + Carta. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Minimum Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply.
<ul>
<li>Experience in a security role with the emphasis on risk, policy and governance</li>
<li>ISMS Documentation Development</li>
<li>A working understanding of security frameworks or methodologies, HITRUST and/or ISO27001, NIST, CIS</li>
<li>Exposure to Enterprise Security tools AV, Vulnerability, IAM, SSO.</li>
<li>Continuous improvement with activities that stretch you beyond your job role, an opportunist who finds the positive side of a challenge.</li>
<li>Critical thinking skills with a mindset that considers solutions prior to presenting challenges</li>
</ul>

<h3>Preferred qualifications</h3>
<ul>
<li>BS in Computer Science, or a related field</li>
<li>Certified CSF Practitioner or training towards</li>
<li>CompTIA Security+ Certification </li>
<li>Microsoft Certified Cybersecurity</li>
<li>CISSP, CISM or equivalent training</li>
<li>Experience working with international security standards  </li>
</ul>

<h3>About Kin + Carta</h3>
Kin + Carta is a global digital transformation consultancy committed to working alongside our clients to build a world that works better #ForEveryone. Our 2,000 curious minds make creative connections between people, data and technology to create connected outcomes across the full lifecycle of the product and platform ecosystems.
We’re makers, builders and creators by nature, and we come to work every day to build experiences for some of the world’s most influential companies. We help businesses accelerate their digital roadmap, rapidly innovate, modernize their systems, enable their teams and optimize for continued growth. 
We are a technology business with trust and human connection at its heart. <a href="https://www.kinandcarta.com/en-us/social-responsibility/" rel="noopener noreferrer nofollow ugc" target="_blank">As a Certified B Corp</a>, our triple bottom line focus on people, the planet and profit is at the core of everything we do.
We welcome our Kin to show up as their authentic selves every day. Because this is so important to us, Kin + Carta is proud to be an equal opportunity employer. To read further about our commitment to Inclusion, Diversity, Equity and Awareness, check out the <a href="https://www.kinandcarta.com/en-us/idea/" rel="noopener noreferrer nofollow ugc" target="_blank">IDEA page</a> on our website. 
If you need accommodations at any point in the application or interview process, please let us know.

Americas Information Security Officer

Rubrik

Company Description
Rubrik is one of the fastest growing companies in Silicon Valley, revolutionizing data protection and management in the emerging multi-cloud world. We are the leader in cloud data management, delivering a single platform to manage and protect data in the cloud, at the edge, and on-premises. Enterprises choose Rubrik to simplify backup and recovery, accelerate cloud adoption, enable automation at scale, and secure against cyberthreats. Rubrik has raised over $553 million in venture funding, most recently at a valuation of $3.3 billion. We’ve been recognized as a Forbes Cloud 100 Company five years in a row and as a LinkedIn Top 10 startup. 
Information Security - Who We Are
The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our systems, provides awareness education to teams on security best practices for data protection, and ensures data sharing relationships with third parties in order to securely protect Rubrik information.
What You’ll Do
We are looking for an Information Security Program Manager (Risk Management) to be a part of our security risk management team, which focuses on building and supporting a security risk oversight function. Help us elevate and accelerate the maturity of our risk management and compliance capabilities by leading prioritized activities related to our security risk management strategy. The successful candidate will need to build and maintain strong cross-functional relationships across the company. To achieve this you must have excellent leadership, communication, and decision making skills.
Responsibilities:
<ul>
<li>Gather security risk data, perform risk ranking qualitative and quantitative analysis.</li>
<li>Analyze security risks using real-world security data and systems automation.</li>
<li>Frequently document and communicate security risks, collaborating with a range of stakeholders from individual contributors to senior leadership levels.</li>
<li>Contribute to security program development by identifying new or emerging opportunities to apply security principles and technologies.</li>
<li>Analyze the security of new or existing applications, software, or specialized utility programs and provide risk recommendation.</li>
<li>Support strategic and technical initiatives, perform Operational Risk Assessments, manage Risk Acceptance activities, develop risk posture and remediation recommendations.</li>
<li>Monitor and evaluate security measures to protect against reasonably anticipated threats or hazards to the privacy, security or integrity of protected information.</li>
<li>Be an integral member of the risk and compliance team to build and maintain strong cross-functional relationships across the company to aid in achieving consensus, expectation setting, training and awareness, and promote consistency and improvement in our processes.</li>
<li>Contribute to the production and improvement of the content, quality, and timing of security governance, risk and compliance analysis and reporting.</li>
<li>Own and drive activities related to the remediation of technical security and compliance risks with cross-functional teams, including, but not limited to, leading meetings, working to assign, track work items, and producing reports.</li>
</ul>
Preferred Qualifications:
<ul>
<li>8+ years of related work experience in Information Security Governance, Risk and Compliance (GRC) or relevant Compliance roles in the tech industry.</li>
<li>Have driven several security and/or operational risk processes within a company with a modern risk oversight function.</li>
<li>Experience supervising the design and operation of risk &amp; control assessments to target different levels of information (e.g., RCSA vs. a service level assessment).</li>
<li>Experience with risk registers and helping prioritize security related work.</li>
<li>Can implement a solution (design), operational plan, and roadmap to achieve goals.</li>
<li>Experience implementing agile use cases in a GRC technology solution.</li>
<li>Executive presence: can represent a vision and build consensus across a variety of partners.</li>
<li>Knows how to estimate work effort and incubate skill sets to achieve team goals.</li>
<li>Has advanced knowledge of common security risks, vulnerabilities, and threats and can escort these issues through triage / risk treatment conversations.</li>
<li>Validated understanding of relevant information security frameworks, including related regulatory compliance requirements, such as ISO 27001/2 (including ISO 27017 &amp; 18), FedRAMP, SOC 2 Trust Services Criteria, CIS Top 20, PCI DSS, NIST CSF / 800-53, HIPAA.</li>
<li>Strong knowledge of audit and risk management methodologies, such as SOX, COBIT, NIST RMF / 800-37 / 800-30.</li>
<li>Strong understanding of risk quantification principles and experiencing implementing FAIR-like approach for quantifying and reporting risks.</li>
<li>Hands-on experience with data analytics and business intelligence dashboarding tools (e.g., Power BI) and with agile project management tools (e.g., Jira).</li>
<li>Detail-oriented and able to understand the bigger picture by using your technical expertise and problem solving abilities to prioritize and manage blocking issues.</li>
<li>Ability to ramp up quickly and learn new technologies with minimal lag time.</li>
<li>Able to discuss issues at technical and business levels with audiences of various backgrounds.</li>
<li>Experience in a high growth business environment is a plus.</li>
<li>Bachelor’s degree in Security, Computer Science, Management Information Systems or related field preferred.</li>
<li>SaaS and data management industry experience is a plus.</li>
<li>Professional certifications in Information Security or Risk Management (e.g., CISA, CISM, CRISC, CGEIT, CSX-P, CISSP, CCSK) is a plus.</li>
</ul>About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Bangalore

Sr Information Security Analyst  - Risk Management

Avertium

Avertium is the security partner that companies turn to for end-to-end Cybersecurity solutions that attack the chaos of the cybersecurity landscape with context. By fusing together human expertise and a business-first mindset with the right combination of technology and threat intelligence, Avertium delivers a more comprehensive, more programmatic approach to cybersecurity - one that drives action on the ground and influence in the boardroom. That's why over 1,200 mid-market and enterprise-level organizations across 15 industries turn to Avertium when they want to be more efficient, more effective, and more resilient when waging today's cyber war. Show no weakness.®The DFIR Consultant will contribute to Avertium’s DFIR practice, implement and execute best practices for incident handling, investigation and reporting, continuously develop the skills and expertise required to achieve customer objectives, and work with customers and other partners to respond to incidents, identify root causes, recommend solutions, and recover compromised environments.
<h3>Responsibilities:</h3>
<ul>
<li>Lead incident response engagements. Understand client requirements, coordinate the incident response team and liaising with client’s business stakeholders and technical teams.</li><li>Liaise with client third parties including legal, insurance and service providers, and provide guidance and subject matter expert advice to customer</li><li>Advise clients on business, technical, regulatory and reputation risk.</li><li>Advise clients on strategies to contain incidents and limit business impact of cyber incidents</li><li>Advise other incident response team members on strategies and techniques to accomplish client objective</li><li>Collect technical evidence from clients’ environments to prepare for forensic investigations</li><li>Conduct forensic investigations to determine the scope and impact of cyber incidents</li><li>Determine root cause of incidents using available evidence and analytical tools</li><li>Determine scope of data access and exfiltration</li><li>Provide recommendations and guidance to successfully evict threat actors from customer environments</li><li>Gather intelligence on threat actors to inform recommended containment, remediation and recovery actions</li><li>Develop threat intelligence reports and briefings in support of Avertium’s CTI and MSS groups</li><li>Manage the recovery of clients’ IT infrastructure during and after cyber attacks</li><li>Brief clients’ management, IT teams and third parties during and after cyber attacks</li><li>Prepare and deliver post-incident reports to client teams</li><li>Conduct threat hunts within EDR and SIEM tools for managed detection and response customers</li><li>Support team members in deeply technical investigations, provides guidance, and practical advice</li><li>Provides thought leadership on the design, and implementation of new detection strategies</li><li>Stays relevant with cyber security threats, counter measures and associated technologies</li><li>Participate in an on-call rotation to provide 24X7X365 client incident coverage</li><li>Identify opportunities to position additive professional and managed services to clients</li></ul>
<h3>Qualifications for Success:</h3>
<ul>
<li>Minimum of Bachelor's Degree in computer science, telecommunications management, electrical engineering, or a related field or have 5+ years of experience with broad background in Cyber Security specifically relating to digital forensics and response.</li><li>Minimum of 3 years of direct experience in digital forensics and incident response</li><li>Dynamic team member able to manage multiple projects simultaneously</li><li>Highly capable communicator able to relate technical concepts to business stakeholders</li><li>Advanced cyber certifications including GCIH, CISSP, CISA, CEH, ECIH and/or technology-specific certifications such as MCSE, CCNA are preferred</li><li>Skills:</li><li>Conversant in many areas of cyber security and learns new concepts quickly</li><li>Proven subject matter ability in relevant areas, such as incident response, intrusion analysis, incident handling, malware analysis (including network attack vectors and YARA RegEx), web security or security engineering</li><li>Strong working knowledge of common security tools, such as a SIEM, AV, scanners, proxies, WAF (policies rules, process and workflow), netflow, IDS or forensics tools</li><li>Strong interpersonal and leadership skills when building credibility as a peer as well as in presenting analytical data effectively to varied (including executive) audiences</li><li>Strong understanding of the cyber kill chain, attacker tactics, techniques, and procedures, and the MITRE ATT&amp;CK Framework</li><li>Strong understanding of cloud technologies and related security best practices. Experience handling security incidents in the cloud.</li><li>Firm understanding of endpoint and network-based security solutions, including EDR, firewalls, proxies and email security gateways</li><li>A solid grasp of networking and core Internet protocols (e.g. TCP/IP, DNS, SMTP, HTTP, SMB, and distributed networks)</li><li>Proficient in network forensics including PCAP analysis, network security, and IDS/IPS analysis</li><li>Able to recognize common attack vectors such as recon scans, botnet, malware, command and control activity (C2), worms, trojans, and viruses</li><li>Experience with common operating systems, such as Linux, both from a forensic and threat hunting point of view.</li><li>Strong understanding of relevant laws and regulations (e.g. HIPAA, CCPA, GDPR, PCI, etc) as related to cyber incident handling and remediation</li><li>#LI-CS1</li></ul>In addition to a career in the challenging world of cyber security, Avertium offers competitive salaries, full benefits, unlimited paid time off, participation in 401(k), and opportunities for professional growth and development. We offer the opportunity to work with cutting-edge security technologies in a stimulating work environment.Avertium provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Digital Forensics &amp; Incident Response Consultant | Remote, USA

Apply to PCI Cyber Security Jobs in companies remotely and near you. New PCI Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Compliance Analyst at Keyfactor, Inc.	Full Time CISM Audit Analyst Consulting
Senior GRC and Security Analyst at Lob	Remote Full Time Analyst Incident Response Audits
Americas Information Security Officer at Kin + Carta	Remote Full Time CISM Comptia Audits
Sr Information Security Analyst - Risk Management at Rubrik	Full Time CISM Audit Analyst Manager
Digital Forensics & Incident Response Consultant \| Remote, USA at Avertium	Remote Full Time Forensic Consultant Incident Response

PCI Cyber Security Jobs

0 PCI Cyber Security Jobs. Page 1 of 1

5 closed pci cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

PCI Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

PCI Cyber Security Jobs

0 PCI Cyber Security Jobs. Page 1 of 1

5 closed pci cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

PCI Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter