BitSight

Cyber Security Senior Advisor (TPRM)

PEAK6

Apex Fintech Solutions (AFS) powers innovation and the future of digital wealth management by processing millions of transactions daily, to simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech solutions enables us to support clients such as Stash, Betterment, SoFi, and WeBull, and more than 20 million of our clients' customers. 
Collectively, AFS creates an environment in which companies with the biggest ideas in fintech are empowered to change the world. We are based in Dallas, TX and also have offices in Austin, New York, Chicago, Los Angeles, Portland, and Belfast. 
If you are seeking a fast-paced and entrepreneurial environment where you'll have the opportunity to make an immediate impact, and you have the guts to change everything, this is the place for you. 
AFS has received a number of prestigious industry awards, including:
<ul>
<li>2021, 2020, 2019, and 2018 Best Wealth Management Company - presented by Fintech Breakthrough Awards</li>
<li>2021 Most Innovative Companies - presented by Fast Company</li>
<li>2021 Best API &amp; Best Trading Technology - presented by Global Fintech Awards</li>
</ul>


The GRC Analyst (Privacy) will support the strategic priorities and mitigation of confidential and privacyrisks at Apex Fintech Solutions. The position will provide support and establish tools and services forexisting and future global privacy legislation (e.g. GDPR, CCPA). This role will provide consistent visionand strategy for data privacy across the organization and ensure alignment with federal, regulatory andinternational privacy requirements. The GRC Analyst (Privacy) will work both independently andcollaboratively to support the firm and client engagements (security program assessments), and developand continuously improve security program capabilities (e.g. risk assessment, vendor risk, and datasecurity). The analyst will also support the Data Security practice in the delivery of data security projects,including implementation of data classification, data management, and data leak preventioncapabilities.
This role will operate within the hours of 10:00 - 18:30 from Monday to Friday. 
Primary Responsibilities:- Collect, review, and research data privacy requirements and translating them into actionableitems for delivery.- Comprehend Privacy Rights and Legislation and how it impacts the firm and individual teams.- Conduct privacy assessments, identify gaps, provide remediation guidance, and execute/seethrough implementation of plans.- Develop and support privacy training materials and communications to train employees.- Be a point of contact/subject matter expert should a privacy incident occur.- Assist with annual reviews of privacy processes to validate and ensure ongoing compliance.- Maintain privacy policy and procedures.- Assist in managing data privacy initiatives and program.- Deliver strategy, risk and compliance, and data security projects.- Develop and promote privacy-related awareness and organizational communications
Qualifications :- Bachelor’s degree in computer science, business, or related field- 3+ years’ Privacy-specific experience with privacy laws and regulations i.e., CCPA, LGPD, GDPR- 3+ years’ experience in compliance or risk management or cybersecurity role- Self-motivated to work independently and collaboratively, growth mindset- Strong organizational and communication skills (verbally and orally)- Ability to handle multiple priorities on tight deadlines without compromising quality.- Demonstrate experience managing data privacy initiatives in a global organization- Information privacy certification(s) i.e., CIPP/US, CIPP/E- Knowledge of industry security frameworks such as NIST, ISO, and COBIT- Demonstrate experience managing data privacy initiatives in a global organization
Culture &amp; Core Values
<ul>
<li>InfoSec team is comprised of independent thinkers and doers who can positively impact our clients and shape Apex Clearing.</li>
<li>We strive to build and maintain a collaborative environment and engaging work—guided by Open and Honest Communication; Teamwork and Collaboration; Involving Everyone; Leaders Who Serve; and Personal Accountability</li>
</ul>
Life at PEAK6 
We want you to like coming to work so we work really hard to make your job fun and different from any other.  
We offer: 
<ul>
<li>28 days annual leave plus 10 NI national holidays</li>
<li>Pension matched up to 7% </li>
<li>Private health insurance for medical and dental </li>
<li>Life Insurance</li>
<li>Discounted gym membership</li>
<li>Great work/life balance and flexible working hours </li>
<li>Monthly catered lunches </li>
<li>Unlimited drinks and snacks </li>
<li>Quarterly hackathons</li>
<li>Poker tournaments </li>
<li>Charitable matching gift program</li>
</ul>



Apex currently requires all employees as a condition of employment to either be fully vaccinated for COVID-19 or submit to regular testing. The CDC defines "fully vaccinated" as two weeks after the second dose for Pfizer and Moderna, and two weeks after the single dose of Johnson &amp; Johnson. Apex will also require proof of vaccination and/or testing. Apex will also consider requests for exemption from these requirements as a reasonable accommodation for medical reasons or sincerely held religious beliefs. *Please note this requirement is ONLY for US Offices.

Security Analyst (Privacy)

Span.IO, Inc.

Our Mission  
SPAN develops products that accelerate the rapid adoption of renewable energy in the home. The flagship SPAN Smart Panel is the first true evolution for the traditional home electric panel, harnessing enhanced technology for metering, monitoring, and control. An expanded product suite of intelligent, integrated solutions radically lowers the cost and complexity of energy upgrades–including solar, batteries and EVs–empowering homeowners to be active, resilient and informed players in the energy market. 
The Role
The Information Security Intern will proactively work with internal stakeholders to identify security risks and implement practices that meet standards for information security. 
Responsibilities
The primary responsibility of the Information Security Intern include:
<ul>
<li>Application Security - Perform manual and automated security testing. </li>
<li>Cloud Security - Help with securing the production environment hosted in AWS.</li>
<li>IoT Security - Help secure firmware and hardware for an IoT product</li>
<li>Security Controls Development - Assist with the development of security controls and associated control procedures.</li>
<li>Security/Compliance Project Management - Assist with security and compliance project management activities on as needed basis.</li>
</ul>
<h3>About You</h3>
Required Qualifications:
<ol>
<li>Bachelor or Masters students pursuing a degree in business, information systems management, information security or computer science </li>
<li>Basic understanding of networking, operating systems, access control, databases, and application types</li>
<li>Basic understanding of Network Security (e.g. firewalls, IDS/IPS etc.) and Application Security (e.g. OWASP Top 10)</li>
<li>Basic understanding of compliance standards e.g. ISO 27001, SOX, PCI DSS, HIPAA, FISMA/FedRAMP, SOC1 (SSAE16), SOC2 and EU Privacy regulations</li>
<li>Security certifications like CISSP, CISA, CISM, CIPP, GIAC, OSCP are preferred but not required.</li>
<li>Excellent written and oral communication skills</li>
</ol>
<h3>Life at SPAN</h3>
SPAN embraces diversity and equal opportunity in a serious way. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. 
Headquartered in San Francisco’s vibrant SoMa neighborhood, we are an eclectic group of creative thinkers who value open communication, teamwork, and a ‘make it happen’ approach to addressing complex challenges. 
Our CEO, Arch Rao⁠—former head of the Tesla Powerwall team⁠—fosters an energetic and collaborative environment, with a strong emphasis on maintaining work-life-balance across the organization.
We’re hiring talented individuals who are driven by success and are passionate about shaping the future of renewable energy. If that sounds like you, we’d love for you to consider joining the rapidly growing team at SPAN.
The Perks:
⚡ Competitive compensation + equity grants at a well-funded, venture-backed company
⚡ Comprehensive benefits (including medical; dental, vision, life and disability insurance)
⚡ Comfortable, sunny office space located near BART and Caltrain public transit
⚡ Strong focus on team building and company culture (events, meet-ups, clubs)
⚡ Flexible hours and unlimited PTO
Our Mission &amp; Values:
At SPAN, we believe that powering your home with clean energy should be a simple and delightful experience that is at its essence human-centered and technology-forward.
Our core values include:
<ul>
<li>Making home energy more accessible, intuitive, and convenient.</li>
<li>Enabling homes and vehicles to be powered by the sun.</li>
<li>Building resilient homes with reliable power.</li>
<li>All-electric everything.</li>
<li>A more flexible &amp; distributed grid.</li>
</ul>
Interested in joining our team? Submit an application today and we’ll be in touch with next steps!

San Francisco

Information Security Internship

Torc Robotics

About the Company
At Torc, we have always believed that autonomous vehicle technology will transform how we travel, move freight, and do business.
A leader in autonomous driving since 2007, Torc has spent over a decade commercializing our solutions with experienced partners. <a href="https://torc.ai/daimler-testing-automated-trucks-public/" rel="noopener noreferrer nofollow ugc" target="_blank">Now a part of the Daimler family</a>, we are focused solely on developing software for automated trucks to transform how the world moves freight.
Join us and catapult your career with the company that helped pioneer autonomous technology, and the first AV software company with the vision to partner directly with a truck manufacturer.What you’ll do: 
The Data Compliance Specialist will be responsible for supporting and maintaining a comprehensive GRC program which includes information security, privacy, and data compliance measures. Duties include policy/procedure development, risk and IT control assessment, privacy and compliance evaluation, and third-party vendor assessments through contract review/enforcement. As a key member of IT Security team, must be comfortable representing Torc’s technical risks and constraints with employees, partners, and suppliers at various leadership levels. Additional responsibilities include:
<ul>
<li>Supporting policy, procedure, and work instruction development for IT Security and the broader IT organization.</li>
<li>Collaborating within IT Security and with Legal personnel to develop comprehensive risk management through IT control assessments, vulnerability assessments, compliance evaluations, and incident response.</li>
<li>Supporting the organization in (a) informing, advising, and training employees/partners on their responsibilities to protect personal and confidential data, (b) identifying, analyzing, and mitigating data compliance risks, (c) monitoring compliance with corporate policies related to data protection, and (d) cooperating with supervisory authorities and regulatory enforcement entities.</li>
<li>Collaborating within IT Security and with Legal personnel to measure compliance with privacy regulations such as GDPR, and CCPA.</li>
<li>Supporting privacy program projects, including data mapping activities, processing data subject access requests (DSAR), performing updates to privacy policies, and development and delivery of privacy training.</li>
<li>Producing operational and informational documentation for relevant IT Security systems and provides user support or training as necessary.</li>
<li>Supporting the day-to-day operations of IT Security systems, performs analysis and remediation (as instructed) of system alerts and notifications.</li>
</ul>
What you’ll need to Succeed: 
<ul>
<li>Minimum of 4years' experience in a similar role strongly preferred.</li>
<li>Bachelor’s degree in Computer Science, Information Technology, or related field of study plus 5+ years of experience, OR Associates degree in a technical field plus 7+ years of experience, OR 10+ years of experience in an equivalent role. Master’s degree in a Cyber Security, Forensics, or similar field a plus.</li>
<li>Ideal candidate would have one or more certifications related to data protection, privacy, or compliance(e.g., ISO/IEC 27001, GRISC, CGRC-IT, CIA, CISSP, CIPP).</li>
<li>U.S. Citizenship is required.</li>
<li>Solid understanding of network and information security fundamentals, and familiarity with GDPR, CCPA, or similar data protection standards.</li>
<li>Recent work experience where data privacy was a part of the job’s responsibilities or tasks.</li>
</ul>
Perks of Being a Full-time Torc’r
Torc cares about our team members and we strive to provide benefits and resources to support their health, work/life balance, and future. Our culture is collaborative, energetic, and team focused. Torc offers:  
<ul>
<li>A competitive compensation package that includes a bonus component and stock options</li>
<li>100% paid medical, dental, and vision premiums for full-time employees  </li>
<li>401K plan with a 6% employer match</li>
<li>Flexibility in schedule and generous paid vacation (available immediately after start date)</li>
<li>Company-wide holiday office closures</li>
<li>AD+D and Life Insurance  </li>
</ul>
#IND

Blacksburg

United States

Data Compliance Specialist

Gympass

GET TO KNOW US
We simplify wellness so you can find everything in one place. Gympass is a corporate wellness platform that connects you to thousands of fitness &amp; wellness partners, all with one simple monthly membership. Founded in 2012 and headquartered in NYC, we have a growing global team in 11 offices around the world. At Gympass, you not only have the opportunity to build a career in a fast-paced global environment - but you'll make wellbeing universal, so everyone can be happy and healthy.
WHAT MAKES A GYMPASSER?
We are passionate about our mission! Whatever your job title is, here you can make a global impact and change people’s lives. At Gympass, we collaborate, set high achievable goal expectations, and focus on the end result.  It's a challenging, evolving environment that allows you to learn and grow. You will face a disruptive and emerging business model that will push you in several areas, with no boundaries for creation and collaboration.
THE OPPORTUNITY
We are looking for a team member to help us on customer's cybersecurity compliance assessmets focus on replying to their audit questionnaires, help the Infosec Team, IT and Infrastructure Teams to drive the strategy to improve our security architecture, and find how to improve the way we work to deliver an amazing product that our customers can trust. 
We are all in the cloud and use software engineering principles to solve large-scale production challenges.
YOUR IMPACT
<ul>
<li>You can write great documentation and knowledge base to support the Sales Team during customers' Security Assessments.</li>
<li>You have worked cross-functionally with Engineering, Product, IT, Legal, Infrastructure and operational teams to drive security control implementation for the organization.</li>
<li>You have worked on Implementation of  security compliance requirements.</li>
<li>You have worked along with security teams on compliance standards and validations</li>
<li>You have helped mature company's overall security policy and governance architecture</li>
<li>You have provided input into the overall security compliance strategy</li>
<li>You have  helped the security and engineering teams as a subject matter expert for the security compliance and have identified gaps both on the product or infrastructure side.</li>
</ul>
.
 WHO YOU ARE
<ul>
<li>Fluent in English</li>
<li>Graduated on Cybersecurity, Systems Development, IT Management or related areas.</li>
<li>Professional working experience in Security Compliance or related Cybersecurity areas.</li>
<li>Experience working with one or more of the following security standards and frameworks: SOC 2, ISO 27001, PCI DSS, NIST 800-53</li>
<li>Experience with cloud security architectures and technologies (preferably AWS)</li>
<li>Ability to work efficiently and independently in a fast-paced, innovative environment</li>
<li>Ability to work closely with sales teams and internal stakeholders and articulate technical concepts</li>
<li>Experience in auditing of networks, operating system, and application securityThe knowledge below is considered a plus: </li>
<li>Professional work experience in security audits (ISO27001, PCI-DSS, SOC2) </li>
<li>Knowledge in cybersecurity routines such as vulnerability management, penetration tests, disaster recovery tests, change management, and etc. </li>
<li>Certification in cybersecurity (CISSP, CIPP, CIPM, CIPT, CompTIA Security+, CEH, and etc) </li>
<li>Knowledge in cybersecurity tools such as Security Rating Platforms, Vulnerability Scanners, Antivirus, Firewalls and etc. </li>
</ul>
WHAT WE OFFER YOU 
We're a wellness company that is committed to the health and well-being of our employees. Our flexible program allows you to customize your benefits, according to your needs! Our benefits include:
WELLNESS: Health, dental, and life insurance.
FLEXIBLE WORK: Choose when and where you work. For most, this will be a hybrid office/remote structure but can vary depending on the needs of the role and employee preferences. We offer all employees a home office stipend and a monthly flexible work allowance to help cover the costs of working from home.
GYMPASS DISCOUNT: We believe in our mission and encourage our employees and their families to find their passion too. Access onsite gyms and fitness studios, digital fitness programs, and online wellness resources for meditation, nutrition, mental health support, and more.
PAID TIME OFF: We know how important it is that our employees take time away from work to recharge. 
BR: Vacations after 6 months and 3 days off per year + 1 day off for each year of tenure (up to 5 additional days) + extra day off for your birthday.
PAID PARENTAL LEAVE: Welcoming a new child is one of the most special moments in your life and we want our employees to take the time to be present and enjoy their growing family.
BR: 100% paid parental leave of 6 weeks to all new parents, of both biological and adopted children, regardless of gender and parent's relationship with the co-parent, Also extended maternity leave under local legislation 
CAREER GROWTH: Outstanding opportunities for personal and career growth. That means we maintain a growth mindset in everything we do and invest deeply in employee development.  
CULTURE: An exciting and supportive atmosphere with ambitious people from around the world! 
FLEXIBLE WORK: We give our employees some flexibility to adjust their working hours, letting them adjust their starting time within a range of 3 hours. 
And to get a glimpse of Life at Gympass...follow us on<a href="https://www.instagram.com/gympasscareers/" rel="noopener noreferrer nofollow ugc" target="_blank"> Instagram</a> @gympasscareers and<a href="https://www.linkedin.com/company/gympass/?viewAsMember=true" rel="noopener noreferrer nofollow ugc" target="_blank"> LinkedIn</a>! 
Belonging @ Gympass
Gympass is committed to creating a diverse work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. 
Questions on how we treat your personal data? See our <a href="https://lifeatgympass.wpengine.com/?p=105" rel="noopener noreferrer nofollow ugc" target="_blank">Job Applicant Privacy Notice</a>.

São Paulo

Security Compliance Analyst 4 | DOTS

Coalfire

About Coalfire Coalfire is on a mission to make the world a safer place by solving our clients’ toughest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Denver, Colorado with offices across the U.S. and U.K., and we support clients around the world.  But that’s not who we are – that’s just what we do.  We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.    And we’re growing fast.  We’re looking for a Consultant to support our Strategy, Privacy and Risk Team - open to remote locations in the US. Position Summary The Strategy, Privacy, Risk Advisory (SPR) Consultant will work as part of a team assessing the security, privacy and risk of client firms to best provide advice on cybersecurity programs, industry requirements and standards, and support remediation activities. This role will have a strong understanding of framework requirements, and the ability to perform assessments and lead interviews. They will develop plans, policies, and reports for clients.  They will work closely with Project Managers, Directors and other Delivery team members to effectively manage project timelines and deliverables.    We’re growing rapidly and are currently seeking a Consultant to support our Strategy, Privacy, Risk Advisory business.
<h3>What You'll Do</h3>
<ul>
<li>Support and guide information risk and security discussions with technical and non-technical groups</li><li>Identify enterprise information security, privacy and compliance related problems and challenges; research and develop technical solutions to rectify them</li><li>Participate in design and operationalization of tactical response and recovery activities in the event of an information security breach</li><li>Provide guidance on the administration and maintenance of security systems infrastructure, applications, devices, tools and software services</li><li>Perform information risk, security and related compliance assessments, including testing of related controls</li><li>Develop and operationalize enterprise information security programs and related components</li><li>Assess cyber-related policy, procedures, legislation, and implementation directives</li><li>Assess and remediate compliance with industry regulations and frameworks across multiple industries that are relevant to cybersecurity (e.g. NIST CSF, PCI, SOX 404, HIPAA, ISO, FEDRAMP, GLB, CCPA, GDPR)</li></ul>
<h3>What You'll Bring</h3>
<ul>
<li>At least 2 (2+) years working experience in cyber security, GRC, and cyber related risk management</li><li>Knowledge and awareness of the latest information risk, security and privacy innovations, trends, challenges and solutions</li><li>Exposure to industry acclaimed information governance, risk and security standards/frameworks and professional practices (NIST, ISO, CIS Critical Security Controls, ISSA, etc.)</li><li>Knowledge of the typical enterprise risk and security operational practices</li><li>Knowledge of information security related solutions, tools and utilities</li><li>Bachelor’s degree in Business Administration, Computer Science, Information Systems, Engineering or related field, or equivalent combination of education and experience</li></ul>
<h3>Bonus Points</h3>
<ul>
<li>CISM, CCSK, CIPP, CISA, CGEIT, or CRISC certification(s)</li><li> Consulting experience or security experience in an industry segment (finance, healthcare, energy, technology, etc.) Cyber Incident Response Experience</li><li>AWS, Azure, Google Cloud Platform certification(s) and experience</li></ul>Why You’ll Want to Join UsAt Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office. Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like flexible time off, certificationand training reimbursement, and comprehensive insurance options. At Coalfire, equal opportunity and pay equity is integral to the way we do business. A reasonable estimate of the compensation range for this role is $64,<a href="http://000.00" rel="noopener noreferrer nofollow ugc" target="_blank">000.00</a> to $112,000based on national salary averages. The actual salary offer to the successful candidate will be based on job-related education, geographic location, training, licensure and certifications and other factors. You may also be eligible to participatein annual incentive, commission, and/or recognition programs.#LI-remote#LI-GB1

Consultant Strategy, Privacy, and Risk Advisory

Apply to CIPP Cyber Security Jobs in companies remotely and near you. New CIPP Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Security Analyst (Privacy) at PEAK6	Full Time Analyst CCPA CIPP Cobit
Information Security Internship at Span.IO, Inc.	Internship CISM Application Security AWS CIPP
Data Compliance Specialist at Torc Robotics	Remote Full Time Incident Response Contract C
Security Compliance Analyst 4 \| DOTS at Gympass	Remote Full Time Comptia Audit Analyst
Consultant Strategy, Privacy, and Risk Advisory at Coalfire	AWS Azure CCPA CIPP CISA

CIPP Cyber Security Jobs

0 CIPP Cyber Security Jobs. Page 1 of 1

5 closed cipp cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

CIPP Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

CIPP Cyber Security Jobs

0 CIPP Cyber Security Jobs. Page 1 of 1

5 closed cipp cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

CIPP Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter