Lob was built by technical co-founders with a vision to make the world programmable.
We offer two flagship APIs (print &amp; mail and address verification) that enable companies to send postal mail as effortlessly as sending emails. Lob is venture-backed by the most reputable investors in tech, and we are rapidly growing our team to shape the future of our company and meet the demands of a quickly growing customer base and dynamic product offerings.
As a proud Pledge 1% company, we’re committed to leveraging our product, partnerships, and people to drive positive social impact through <a href="http://www.lob.org" rel="noopener noreferrer nofollow ugc" target="_blank">Lob.org</a>, and are on a mission to make direct mail more sustainable.
We offer remote working opportunities, unless otherwise described in the job description, in AZ, CA, CO, DC, GA, IL, MA, MD, MI, MN, NC, NV, NY, OR, PA, TX, UT, and WA. You can also work onsite at our San Francisco headquarters.
If you are looking for a progressive, fun-spirited, and mentally stimulating environment, come join us at Lob!The Legal, Compliance and Security (LCS) team works across Lob to organize risk governance organizational structures, methodologies, and processes that are commensurate with industry best practice but tailored to Lob’s niche risk sensitivities. LCS capabilities allow Lob to manage security risk &amp; control programs that enable us to achieve company goals and better protect its customers and data in a responsible and proactive manner. We work with internal and external stakeholders to build and operate programs that last - including IT, Engineering, Product, Sales and Operations. 
We are growing our LCS team to further mature our compliance and security programs and ensure that the technical implementation of our internal controls is strong and well-managed. You will be responsible for maintaining and improving our common risk &amp; controls framework and building sustainable control assurance programs that keep the company aligned with our regulatory &amp; compliance obligations, policy requirements, and customer expectations. Your focus will be to ensure we have adequate internal controls in place, drive control adoption and maintenance, support control owner education and awareness, and manage roadmaps to resolve control gaps in a timely fashion.
<h3>As the Senior GRC and Security Analyst, you’ll…</h3>
<ul>
<li>Mature the company’s unified security risk and control framework and ensure its alignment against applicable laws, regulations, industry standards such as GDPR, CCPA, SOC, ISO, NIST Cyber Security Framework (CSF), PCI Data Security Standard, etc. as well as internal Information Security and IT policies &amp; standards</li>
<li>Support the LCS team and other stakeholders in integrating the unified security risk and control framework as part of their service capabilities to drive programmatic consistency</li>
<li>Support oversight and governance by building control assurance programs to proactively assess and report on the design, operating effectiveness, and sustainability of key controls</li>
<li>Lead efforts to address control implementation, remedy control gaps that address the root cause of control failures, drive control ownership and accountability, and build process and control documentation as needed</li>
<li>Be responsible for configuration and support of a wide range of security and networking technologies such as: IPS/IDS, SIEM, vulnerability scanners, identity and access management, access control, DLP, firewalls, endpoint security, email filtering, routers, switches, etc.</li>
<li>Working closely with various teams, to evaluate the current architecture and security related processes such as vulnerability management, patch management, endpoint security, cloud environment, etc. looking for ways to design and implement improvements</li>
<li>Assist in leading security incident response efforts to gather required evidence and remediate incidents</li>
<li>Manage Lob’s vulnerability management and patch management programs to include our bug bounty program, annual penetration tests, etc.</li>
<li>Be responsible for planning and managing security related projects</li>
</ul>

<h3>What will you bring to this role…</h3>
<ul>
<li>Minimum 8+ years of related work experience building or operating internal control programs to mitigate risks around security, confidentiality, integrity, availability, and privacy. </li>
<li>Prior technical security experience highly preferred</li>
<li>Strong experience with common industry audits and frameworks (SOC 2, ISO, HITRUST, etc) </li>
<li>Ability to work efficiently with minimal oversight/direction and collaborate effectively in cross functional projects</li>
<li>Have technical security-related knowledge of common risks, vulnerabilities, and threats and solid experience in escorting these issues through risk analysis / treatment / mitigation processes</li>
</ul>
&lt;#LI-REMOTE #LI-RW1We’re not just building a platform to make the world programmable. <a href="https://www.lob.com/blog/lobs-culture-values" rel="noopener noreferrer nofollow ugc" target="_blank">We’re also designing a great place to work</a>, and ​​a ground floor opportunity as an early member of the Lob team; you’ll directly shape the direction of our company.
Perks
<ul>
<li>Health benefits for you and your dependent(s)</li>
<li>Medical Flexible Spending Accounts (FSA)</li>
<li>Flexible vacation policy</li>
<li>Wellness program</li>
<li>Paid parental leave</li>
<li>401K</li>
<li>Paid volunteer time off to support the organizations you care most about</li>
<li>Commuter &amp; Parking benefits (includes monthly stipend) for those based out of our San Francisco office</li>
<li>Free lunch, snacks and dinner when working at our San Francisco office</li>
<li>Dog-friendly San Francisco office</li>
<li>Allowance for in-person team meetings (all flights and accommodations covered) for those not based out of our San Francisco office</li>
<li>Home-office setup and phone/internet stipend for those not based out of our San Francisco office</li>
</ul>
Our Commitment to Diversity
Lob is an equal opportunity employer and <a href="https://www.lob.com/blog/power-diversity-starts-data" rel="noopener noreferrer nofollow ugc" target="_blank">values diversity</a> of <a href="https://www.lob.com/blog/a-commitment-to-diversity" rel="noopener noreferrer nofollow ugc" target="_blank">backgrounds and perspectives</a> to cultivate an environment of understanding to have greater impact on our business and customers. We encourage under-represented groups to apply and do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or criminal history in accordance with local, state, and/or federal laws, including the <a href="https://sfgov.org/olse/sites/default/files/Document/FCO%20Art.%2049%20Official%20Notice%20to%20print%202017.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">San Francisco’s Fair Chance Ordinance</a>.

United States

Senior GRC and Security Analyst

Rubrik

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. 
Where can you make an impact?
Rubrik is seeking an Enterprise Security Engineer.  In this role, you will be responsible for ensuring that Rubrik's Corporate IT services are designed and implemented to the highest possible security standards.  You will partner with a variety of stakeholders across the business to achieve successful security outcomes in customer experience and productivity deliverables.
What you'll be doing:
<ul>
<li>Partner with all teams across Rubrik to create secure corporate infrastructure design and deployment architectures utilizing threat models and risk analysis documentation</li>
<li>Define organization policies for secure cloud design models within enterprise, hybrid, and public cloud environments including VMware, AWS, Azure and GCP</li>
<li>Work with development teams, operations, governance, and other stakeholders to draft security standards and implement monitoring, alerting, and governance</li>
<li>Design and implement standards across Identity (Okta), Endpoint (Windows, MacOS, Linux), Secrets Management (Vault, Lastpass) and Business Applications (Salesforce)</li>
<li>Support incident responders in analyzing applicable threats, vulnerabilities, controls and residual risks</li>
<li>Analyze and harden existing applications, infrastructure, automation, and deployment processes including CircleCI and Github</li>
<li>Coordinate with security researcher community for submitted vulnerabilities with issues and remediation of threats in both hybrid and public cloud environments</li>
</ul>
Experience you'll need:
<ul>
<li>Bachelor’s degree required; BS or MS in Computer Science, Information Technology, or a related field</li>
<li>6+ years experience in enterprise security, with hands on experience in administration and design across Windows, Mac, Okta and public cloud infrastructure</li>
<li>2+ years experience in VMWare and/or Network security modeling</li>
<li>Broad knowledge of enterprise attack vectors and exploits in both end-user and IT Apps</li>
<li>Subject matter expertise in business applications, endpoint and Identity management</li>
<li>Deep understanding of endpoint systems, corporate networking including wi-fi and IT application systems (Salesforce, Mulesoft, Lastpass, etc)</li>
<li>Programming experience in Python, Go or Java</li>
<li>Security expertise in at least one major public cloud provider (AWS, GCP, Azure) </li>
<li>Experience with deploying and securing Enterprise applications and environments at scale</li>
<li>Knowledge of regulatory guidelines and standards such as SOC2, ISO 27001, FedRAMP, etc.</li>
<li>Understanding of corporate security maturity model frameworks and how to apply them</li>
<li>Strong written and verbal communication skills</li>
</ul>About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Palo Alto

Sr Enterprise Security Engineer II

Amazon.com

Job summaryThis role is focused on ensuring that AWS is a visible leader in helping customers achieve safe, secure and private IoT deployments.IoT covers a broad range of technology domains, from smart-home devices to industrial machinery, but the unifying theme is that IoT runs outside the comfortable confines of the datacenter, at the boundary between the digital and physical worlds. Soon the majority of all digital data will come from connected devices, and customers will use that data to feed machine learning and process optimization that solves real-world problems that were previously intractable.Amazon Web Services' IoT organization provides foundational technologies for IoT so that customers can spend more time solving their real-world problems and less time dealing with the considerable challenges of connecting, managing and securing their devices. A big part of this challenge is helping customers deploy and manage IoT technologies in a way that meets their security, privacy and regulatory goals.We are seeking a Senior Security Engineering Manager to help us define, develop and deliver the technology that will make pervasive IoT safe, secure and private. This manager will work with diverse customer organizations in industries ranging from smart home to agriculture and manufacturing to deeply understand their security needs, then work with Security Engineers and AWS IoT product teams to develop the technology, tools and practices that meet them.Key job responsibilities• Build, develop and lead a team of security experts working across a broad range of technical domains from embedded systems to industrial IoT and ML• Deeply understand customer IoT implementations and design operational and technical frameworks to meet their security and regulatory goals• Lead your team to design and build technical solutions that make those frameworks cheaper and easier for customers to implement successfully• Coordinate and influence security roadmap across the AWS IoT organization, including our device-side embedded software and cloud servicesAbout the teamInclusive Team CultureHere at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and we host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences. Amazon’s culture of inclusion is reinforced within our 14 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.<h3>Basic Qualifications</h3>• 10+ years experience leading, managing and developing high performance security teams• 10+ years of hands-on experience of information security technologies such as security design review, threat modeling, risk analysis, security controls and processes such as passive network monitoring, endpoint detection and response, incident response, vulnerability management<h3>Preferred Qualifications</h3>• Strong information security risk-based prioritization abilities• Excellent verbal and written communication skills• Track record building inclusive and effective team environment and developing employees• Experience working with industrial and enterprise organizations and their regulatory environments• Familiarity with security standards and certification programs common in enterprise and industrial environments• Strong track record of inventing, evolving, improving and simplifying security practices and solutionsAmazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Seattle

Sr. Security Engineering Mgr, AWS IoT

Ninja Van

Ninja Van is a late-stage logtech startup that is disrupting a massive industry with innovation and cutting edge technology. Launched 2014 in Singapore, we have grown rapidly to become one of Southeast Asia's largest and fastest-growing express logistics companies. Since our inception, we’ve delivered to 100 million different customers across the region with added predictability, flexibility and convenience. Join us in our mission to connect shippers and shoppers across Southeast Asia to a world of new possibilities. More about us: - We process 250 million API requests and 3TB of data every day.- We deliver more than 1.5 million parcels every day.- 100% network coverage with 1000+ hubs and stations in 6 SEA markets (Singapore, Malaysia, Indonesia, Thailand, Vietnam and Philippines), reaching 500 million consumers.- 600,000 active shippers in all e-commerce segments, from the largest marketplaces to the individual social commerce sellers.- Raised more than US$500 million over five rounds.We are looking for world-class talent to join our crack team of engineers, product managers and designers. We want people who are passionate about creating software that makes a difference to the world. We like people who are brimming with ideas and who take initiative rather than wait to be told what to do. We prize team-first mentality, personal responsibility and tenacity to solve hard problems and meet deadlines. As part of a small and lean team, you will have a very direct impact on the success of the company. You need to have information security governance experience to conduct risk analysis, to identify potential risks and issues. You will be instrumental in driving security awareness, policy and process definition as well as risk management in the organization. 
<h3>Role and responsibilities</h3>
<ul>
<li>Manage IT Security Governance Projects, and track their progress across different BUs </li><li>Build knowledge and coach Business Units Info Security leads, to understand Info Security Governance processes, as well as ensure timely resolution of issues identified in audits and assessments. </li><li>Perform Third Party Security Assessments in time and with consistency across all assessments</li><li>Security Awareness program definition, management and delivery </li><li>InfoSec Metrics collection and definition.</li><li>InfoSec KRI collection and Definition</li><li>Manage IT Security Assessments and work with stakeholders to develop projects/plans to remediate issues</li><li>Define and keep updated the IT Security Audit Issues tracker. Track delivery of Issues identified to closure</li><li>Document and maintain internal SOPs and standards related to IT Security Governance. </li><li>Maintain InfoSec documentation and life cycle. Documents includes policies, standards, SOPs and runbooks.</li></ul>
<h3>Requirements</h3>
<ul>
<li>Minimum 5 years working experience in Information Security Management. </li><li>Degree from Information Technology or equivalent discipline. </li><li>Certification on CISSP / CRISC is preferred. </li><li>Regional experience in this role is preferred. </li><li>Experience in IT Security Consulting and/or IT Security Audit organisations will be a benefit</li><li>Knowledge of overall IT Security domains. </li><li>Ability to define, prioritize and execute processes in a precise and structured manner. </li><li>Excellent communication, presentation and influencing skills.</li></ul>Submit a job applicationBy applying to the job, you acknowledge that you have read, understood and agreed to our Privacy Policy Notice (the “Notice”) and consent to the collection, use and/or disclosure of your personal data by Ninja Logistics Pte Ltd (the “Company”) for the purposes set out in the Notice. In the event that your job application or personal data was received from any third party pursuant to the purposes set out in the Notice, you warrant that such third party has been duly authorised by you to disclose your personal data to us for the purposes set out in the the Notice.

Kuala Lumpur

GRC Specialist, Information Security

Backbase

The Job in short
As a Senior Cloud Security Engineer you’ll get a chance to contribute to building an enterprise-grade SaaS platform (Backbase as a Service) from scratch and maintaining it. As part of the BaaS team, you'll be expected to lay down the foundation of a highly secure, robust platform and related processes to ensure our software runs smoothly in production as well as making sure it complies with industry standards.
Meet the job
The Backbase as a Service tribe is continuously busy with improving their product with the motto "You build it, you run it". Striving to have the highest possible uptime, great performance and best in class levels of security. That's quite an ambition and you can't get there without an automation first approach. We pride ourselves on the fact that we don't do manual changes in production and that we automatically validate our environment before deploying.
As a Senior Cloud Security Engineer you will have a deep understanding of Cloud Security Infrastructure, cloud native technologies and desired state configuration, configuring security policies and securing data. You will support threat modeling sessions within the team, and have the ability to perform vulnerability testing, risk analysis and security assessments and support incident handling. Supporting internal and external pen tests. You will have a deep understanding of architecting for visibility, detection, mitigation and observability capabilities. Support security initiatives and work with different teams at various levels within our company to implement them. Participating in the Security Committees and guilds.
Your growth path within Backbase will allow you to grow from the function of Senior Cloud Security Engineer to a function as Principal Cloud Security Engineer in which you will be responsible for driving cross team initiatives and you will take on more responsibilities in the overall security roadmap of the product.

How about you
● Deep understanding of cloud security infrastructure, cloud native technologies and desired state configuration;● Experience with the following topics:○ Zero-Trust architecture;○ Defensible security architecture;○ Latest cloud security tools and practices;○ Security processes;■ Incident management;■ Vulnerability management;■ Threat modelling;■ Logging and monitoring (SIEM);○ Controls &amp; requirements from Standards like ISO 27001, SOC 2;○ Nice to have: Knowledge of relevant regulations such as GDPR and PCI-DSS;● You don't want to just report the problems but you want to fix them;● You have strong communication skills;● You are experienced with cloud environments and using desired state configuration to manage this (Terraform is preferred);● You have experience with Kubernetes;● 3 years in a similar role running workloads on public cloud;● Azure cloud certs are nice to have (Azure Administrator/Azure Solution Architect).

Amsterdam

Senior Cloud Security Engineer

Apply to Risk Analysis Cyber Security Jobs in companies remotely and near you. New Risk Analysis Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Senior GRC and Security Analyst at Lob	Remote Full Time Analyst Incident Response Audits
Sr Enterprise Security Engineer II at Rubrik	Full Time Analyst Windows Automation AWS
Sr. Security Engineering Mgr, AWS IoT at Amazon.com	Full Time Manager Incident Response AWS Cloud
GRC Specialist, Information Security at Ninja Van	Audits Cissp Crisc Golangvernance Privacy
Senior Cloud Security Engineer at Backbase	Automation Azure Cloud GDPR Iso 27001

Risk Analysis Cyber Security Jobs

0 Risk Analysis Cyber Security Jobs. Page 1 of 1

5 closed risk analysis cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Risk Analysis Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Risk Analysis Cyber Security Jobs

0 Risk Analysis Cyber Security Jobs. Page 1 of 1

5 closed risk analysis cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Risk Analysis Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter