Rubrik

The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. 
Where can you make an impact?
Rubrik is seeking an Enterprise Security Engineer.  In this role, you will be responsible for ensuring that Rubrik's Corporate IT services are designed and implemented to the highest possible security standards.  You will partner with a variety of stakeholders across the business to achieve successful security outcomes in customer experience and productivity deliverables.
What you'll be doing:
<ul>
<li>Partner with all teams across Rubrik to create secure corporate infrastructure design and deployment architectures utilizing threat models and risk analysis documentation</li>
<li>Define organization policies for secure cloud design models within enterprise, hybrid, and public cloud environments including VMware, AWS, Azure and GCP</li>
<li>Work with development teams, operations, governance, and other stakeholders to draft security standards and implement monitoring, alerting, and governance</li>
<li>Design and implement standards across Identity (Okta), Endpoint (Windows, MacOS, Linux), Secrets Management (Vault, Lastpass) and Business Applications (Salesforce)</li>
<li>Support incident responders in analyzing applicable threats, vulnerabilities, controls and residual risks</li>
<li>Analyze and harden existing applications, infrastructure, automation, and deployment processes including CircleCI and Github</li>
<li>Coordinate with security researcher community for submitted vulnerabilities with issues and remediation of threats in both hybrid and public cloud environments</li>
</ul>
Experience you'll need:
<ul>
<li>Bachelor’s degree required; BS or MS in Computer Science, Information Technology, or a related field</li>
<li>6+ years experience in enterprise security, with hands on experience in administration and design across Windows, Mac, Okta and public cloud infrastructure</li>
<li>2+ years experience in VMWare and/or Network security modeling</li>
<li>Broad knowledge of enterprise attack vectors and exploits in both end-user and IT Apps</li>
<li>Subject matter expertise in business applications, endpoint and Identity management</li>
<li>Deep understanding of endpoint systems, corporate networking including wi-fi and IT application systems (Salesforce, Mulesoft, Lastpass, etc)</li>
<li>Programming experience in Python, Go or Java</li>
<li>Security expertise in at least one major public cloud provider (AWS, GCP, Azure) </li>
<li>Experience with deploying and securing Enterprise applications and environments at scale</li>
<li>Knowledge of regulatory guidelines and standards such as SOC2, ISO 27001, FedRAMP, etc.</li>
<li>Understanding of corporate security maturity model frameworks and how to apply them</li>
<li>Strong written and verbal communication skills</li>
</ul>About Rubrik:
Rubrik, the Zero Trust Data Security Company™, delivers data security and operational resilience for enterprises. Rubrik’s big idea is to provide data security and data protection on a single platform, including Zero Trust Data Protection, Ransomware Investigation, Incident Containment, Sensitive Data Discovery, and Orchestrated Application Recovery. This means your data is ready so you can recover the data you need, and avoid paying a ransom. Because when you secure your data, you secure your applications, and you secure your business.
We are <a href="https://www.rubrik.com/lp/analyst-reports/gartner-mq" rel="noopener noreferrer nofollow ugc" target="_blank">a leader in data security</a>, have been recognized as as a Forbes Cloud 100 Company, named as a LinkedIn Top 10 Startup and are proud to have earned Great Place to Work® Certification™. There has never been a more exciting time to join Rubrik, and our future is even brighter. The work you do will help propel our next chapter of growth as you do the best work of your career.
<a href="https://www.linkedin.com/company/rubrik-inc/mycompany/verification/" rel="noopener noreferrer nofollow ugc" target="_blank">Linkedin</a> | <a href="https://twitter.com/rubrikinc" rel="noopener noreferrer nofollow ugc" target="_blank">Twitter</a> | <a href="https://www.instagram.com/lifeatrubrik/" rel="noopener noreferrer nofollow ugc" target="_blank">Instagram</a> | <a href="https://www.rubrik.com" rel="noopener noreferrer nofollow ugc" target="_blank">Rubrik.com </a>| 
Diversity, Equity &amp; Inclusion @ Rubrik: 
At Rubrik we are committed to building and sustaining a culture where people of all backgrounds are valued, know they belong, and believe they can succeed here.
Rubrik's goal is to hire and promote the best person for the job, no matter their background. In doing so, Rubrik is committed to correcting systemic processes and cultural norms that have prevented equal representation. This means we review our current efforts with the intent to offer fair hiring, promotion, and compensation opportunities to people from historically underrepresented communities, and strive to create a company culture where all employees feel they can bring their authentic selves to work and be successful.
Our DEI strategy focuses on three core areas of our business and culture:
<ul>
<li>Our Company: Build a diverse company that provides equitable access to growth and success for all employees globally. </li>
<li>Our Culture: Create an inclusive environment where authenticity thrives and people of all backgrounds feel like they belong.</li>
<li>Our Communities: Expand our commitment to diversity, equity, &amp; inclusion within and beyond our company walls to invest in future generations of underrepresented talent and bring innovation to our clients.</li>
</ul>
<h5>Equal Opportunity Employer/Veterans/Disabled: Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.</h5>
<h5>Rubrik provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, Rubrik complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training. </h5>
<h5>Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please contact us at hr@rubrik.com if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.</h5>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO IS THE LAW - POSTER SUPPLEMENT</a>
<a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_English_unformattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">PAY TRANSPARENCY NONDISCRIMINATION PROVISION</a>
<a href="https://www.dol.gov/sites/dolgov/files/olms/regs/compliance/eo_posters/employeerightsposter2page_19final.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS</a>

Palo Alto

Sr Enterprise Security Engineer II

Span.IO, Inc.

Our Mission  
SPAN develops products that accelerate the rapid adoption of renewable energy in the home. The flagship SPAN Smart Panel is the first true evolution for the traditional home electric panel, harnessing enhanced technology for metering, monitoring, and control. An expanded product suite of intelligent, integrated solutions radically lowers the cost and complexity of energy upgrades–including solar, batteries and EVs–empowering homeowners to be active, resilient and informed players in the energy market. 
The Role
The Information Security Intern will proactively work with internal stakeholders to identify security risks and implement practices that meet standards for information security. 
Responsibilities
The primary responsibility of the Information Security Intern include:
<ul>
<li>Application Security - Perform manual and automated security testing. </li>
<li>Cloud Security - Help with securing the production environment hosted in AWS.</li>
<li>IoT Security - Help secure firmware and hardware for an IoT product</li>
<li>Security Controls Development - Assist with the development of security controls and associated control procedures.</li>
<li>Security/Compliance Project Management - Assist with security and compliance project management activities on as needed basis.</li>
</ul>
<h3>About You</h3>
Required Qualifications:
<ol>
<li>Bachelor or Masters students pursuing a degree in business, information systems management, information security or computer science </li>
<li>Basic understanding of networking, operating systems, access control, databases, and application types</li>
<li>Basic understanding of Network Security (e.g. firewalls, IDS/IPS etc.) and Application Security (e.g. OWASP Top 10)</li>
<li>Basic understanding of compliance standards e.g. ISO 27001, SOX, PCI DSS, HIPAA, FISMA/FedRAMP, SOC1 (SSAE16), SOC2 and EU Privacy regulations</li>
<li>Security certifications like CISSP, CISA, CISM, CIPP, GIAC, OSCP are preferred but not required.</li>
<li>Excellent written and oral communication skills</li>
</ol>
<h3>Life at SPAN</h3>
SPAN embraces diversity and equal opportunity in a serious way. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. 
Headquartered in San Francisco’s vibrant SoMa neighborhood, we are an eclectic group of creative thinkers who value open communication, teamwork, and a ‘make it happen’ approach to addressing complex challenges. 
Our CEO, Arch Rao⁠—former head of the Tesla Powerwall team⁠—fosters an energetic and collaborative environment, with a strong emphasis on maintaining work-life-balance across the organization.
We’re hiring talented individuals who are driven by success and are passionate about shaping the future of renewable energy. If that sounds like you, we’d love for you to consider joining the rapidly growing team at SPAN.
The Perks:
⚡ Competitive compensation + equity grants at a well-funded, venture-backed company
⚡ Comprehensive benefits (including medical; dental, vision, life and disability insurance)
⚡ Comfortable, sunny office space located near BART and Caltrain public transit
⚡ Strong focus on team building and company culture (events, meet-ups, clubs)
⚡ Flexible hours and unlimited PTO
Our Mission &amp; Values:
At SPAN, we believe that powering your home with clean energy should be a simple and delightful experience that is at its essence human-centered and technology-forward.
Our core values include:
<ul>
<li>Making home energy more accessible, intuitive, and convenient.</li>
<li>Enabling homes and vehicles to be powered by the sun.</li>
<li>Building resilient homes with reliable power.</li>
<li>All-electric everything.</li>
<li>A more flexible &amp; distributed grid.</li>
</ul>
Interested in joining our team? Submit an application today and we’ll be in touch with next steps!

San Francisco

Information Security Internship

KOHO

About KOHOKOHO’s purpose is to empower Canadians to build a great financial foundation with products that are radically transparent and easy to manage. Our journey began in 2014, and we have since built a community of over 600,000 users. Leading investors around the globe believe in our vision, and we’ve successfully raised over $320M to make our vision a reality. The KOHO collective has grown to 300+ employees to date. Discover our culture <a href="https://www.koho.ca/culture/" rel="noopener noreferrer nofollow ugc" target="_blank">here</a> and get the inside scoop from our team <a href="https://www.linkedin.com/posts/koho_whats-it-like-to-work-at-koho-activity-6919662895492403200-6MuY/?utm_source=linkedin_share&amp;utm_medium=member_desktop_web" rel="noopener noreferrer nofollow ugc" target="_blank">here</a>! About the RoleReporting to the Director, IT and Security,  we are looking for a manager to ensure KOHO products meet security, privacy, and resiliency requirements.  This position will lead product security and collaborates with Tech/Engineering, Product, Risk, and Legal teams. You will work closely with Product teams to understand KOHO product roadmaps and strategy. Lead and develop KOHO’s product privacy and security strategy across all product linesUnderstand product features that impact the privacy and security for our users across all products.  You’ll be a foundational security team member and have significant responsibilities that make an impact on KOHO’s security posture. 
<h3>What you'll do</h3>
<ul>
<li>Align security strategy with the product roadmap to ensure user information and privacy is protected</li><li>Facilitate discussion and implementation of security strategy among project stakeholders across the stakeholder groups</li><li>Ensure security compliance and governance requirements are implemented by product and tech teams</li><li>Serve as the subject matter security expert to internal business stakeholders on go-to-market strategy, confidentiality, and additional stages of product development.</li><li>Maintains strong knowledge of ongoing security threats, remediation and operational standard methodologies</li><li>Work and collaborate cross-functionally with Product, Tech, Risk and Legal teams to establish consistent security and privacy for all KOHO products and services</li><li>Participate on incidents related to fraud and abuse of our products </li><li>Develop processes to remediate product risks and drive remediation of vulnerabilities across Tech and Product teams</li><li>Test and recommend tools for Tech and Security teams to implement that reduce product attack surface</li><li>Develop OKRs by collecting, analyzing, and summarizing data and trends.</li><li>Report progress to leadership and stakeholders for all tracked metrics.</li></ul>
<h3>Who You Are</h3>
<ul>
<li>You’ll need at least 3 years experience as a Product Security Engineer or Manager</li><li>Extensive experience with cloud and application architecture and security vulnerabilities</li><li>Hands-on experience with developing product security roadmaps and developing implementation plans</li><li>Demonstrated experience with implementing security and privacy features </li><li>Previous experience influencing Product and Engineering teams </li><li>Experience with security frameworks and standards such as PCI-DSS, SOC2, and ISO27001</li><li>Bachelor’s degree in Computer Science, IS, Security, or Engineering</li><li>Experience working in credit, banking, payment card processing and/or finance preferred</li></ul>What’s In It For You?We invest time and resources into making sure KOHO is as good as the people we hire. Here are some of the reasons we attract and keep the best people:• Balance Your Life - Company-wide Summer wellness days, Winter holiday closure, unlimited Personal Days, a wellness spending account, and maternity &amp; parental leave top-up.• Remote First - Work from anywhere in Canada with a budget to set up your home office• Level Up - Access to 3 in-house certified performance coaches and an annual training budget. • Reach Your Goals - Salary assessments twice per year, GRSP matching.• The KOHO Culture - We have won 7 "Great Place to Work ®" awards since 2019. The KOHO culture is one of collaboration, creativity, and diverse perspectives. We are committed to building and fostering an inclusive, accessible environment for everyone. If you have any questions, concerns, or requests regarding accessibility needs, please contact peopleaccessibility@koho.ca and the People and Culture team will be happy to help.#LI-Remote #LI-MD2

Canada

America/Yellowknife

Product Security Manager

SugarCRM

About SugarCRMFrom the very beginning, SugarCRM had a unique vision: to offer a different kind of Customer Relationship Management (CRM). We pioneered the first commercial open-source CRM platform, and now, more than two decades later, are on a mission to provide products and services that make the hard things easier for sales, marketing and customer service teams. In fact, we help mid-market businesses around the globe reach new levels of performance and predictability by letting our award-winning CRM platform do the work.  Our diverse group of worldwide employees are united and driven by a shared passion for our mission, culture, and <a href="https://www.sugarcrm.com/careers/" rel="noopener noreferrer nofollow ugc" target="_blank">values</a>. We treat our employees like humans not line items and are building a culture where your work at Sugar helps fuel personal, professional and business growth – check out our recent ‘<a href="https://www.sugarcrm.com/press-releases/great-place-work-certification/" rel="noopener noreferrer nofollow ugc" target="_blank">Great Place to Work’ certification</a> that we are so proud of. Work/life fit and flexibility for our team matters and together we pride ourselves on solving for our customers, always. What’s more, we empower everyone to do their best work from home, the office, on the road, or anywhere in between.   If you're ready to grow your career and help organizations grow better and faster, you've come to the right place. Find out more about our <a href="https://www.sugarcrm.com/careers/" rel="noopener noreferrer nofollow ugc" target="_blank">SugarCRM careers </a>and how you can become a part of our journey. The Security Governance, Risk &amp; Compliance Analyst (GRC Analyst) will be responsible for leading the day-to-day governance, risk and compliance (GRC) function as part of the Global Information Security department. The analyst’s role will include the creation, management and effectiveness monitoring of policies, standards, procedures and associated controls aligned to frameworks and regulations. The GRC analyst is also tasked with performing risk assessments, assigning ownership of risks to business units, and ensuring those risks are regularly reviewed. The GRC Analyst will play a key part in aligning SugarCRM’s security program with industry standards, ensuring the company operates at a reasonable level of risk, and in turn helping ensure our customers data is kept secure. The GRC Analyst will have, but is not limited to, the following roles and responsibilities:
<h3>Impact you will make in the role:</h3>
<ul>
<li>Serve as a key governance, risk, and compliance SME for corporate and product information security.</li><li>Support compliance initiatives including government regulations, privacy law, and security frameworks such as SOC2, ISO27001, NIST and FedRAMP.</li><li>Define the global security policy, as well as associated standards and procedures.</li><li>Support the third-party risk management and vendor due diligence programs.</li><li>Administer the security GRC toolset, including risk register.</li><li>Co-ordinate risk assessments and internal auditing activities.</li><li>Interact with business units to ensure risks are managed correctly.</li><li>Respond to customer requests relating to RFPs and security and privacy diligence information.</li><li>Work closely with external auditors on certification and attestation activities.</li></ul>
<h3>What you will need to succeed:</h3>
<ul>
<li>BS degree in computing, information security, or a related field. MS is preferred.</li><li>5+ years of information security GRC/audit experience is also acceptable in lieu of a degree.</li><li>Industry certifications preferred – for example CRISC, CISA, CISM, ISO27001 Lead Auditor.</li><li>Strong experience working with security and privacy frameworks including SOC2, ISO27001, SCF (Secure Controls Framework), NIST CSF, and NIST 800 Series.</li><li>Strong experience governing and championing risk management activities in a global organization.</li><li>Strong experience working with data protection and privacy laws including GDPR, CCPA.</li><li>Experience working in a cloud-first and remote-first company.</li><li>Experience using OneTrust, RSA Archer, ServiceNow GRC or equivalent GRC tools.</li><li>Experience with compliance automation is a plus, for example Drata or Vanta.</li><li>Highly organized and motivated, with the ability to work independently as a self-starter.</li><li>Strong communications skills – an ability to communicate complex compliance requirements to business stakeholders and software engineering teams.</li></ul>We understand that no candidate is perfectly qualified for any job. Experience comes in different forms; many skills are transferable; and passion goes a long way. Even more important than your resume is a clear demonstration of dedication, impact, and the ability to thrive in a fluid and collaborative environment. We want you to learn new things in this role, and we encourage you to apply if your experience is close to what we’re looking for. We also know that diversity of background and thought makes for better problem solving and more creative thinking, which is why we're dedicated to adding new perspectives to the team. Benefits and Perks:Beyond a stellar work environment, friendly people, and inspiring work, we have some sweet benefits and perks: - UK Pension Scheme- Private medical and dental insurance- Health &amp;Wellness Reimbursement Program- Unpaid sabbatical leave- Educational Resources - Career &amp; Personal Development Program- Various discount programs (i.e. travel, virtual exercises classes, etc.)- We are a merit-based company with many opportunities to learn, excel and grow your career!#LI-Remote

Based

Security Governance, Risk &amp; Compliance Analyst

Fenergo

The Company:Fenergo is the leading provider of digital transformation, customer journey and client lifecycle management (CLM) solutions for financial institutions.Its software digitally transforms and streamlines end-to-end CLM processes - from regulatory onboarding, data integration, client and counterparty data management, client lifecycle reviews and remediation, all the way to client offboarding.Fenergo is recognized for its in-depth financial services and regulatory expertise (from a team of over 30 global regulatory specialists), community-based approach to product development and rules engine which ensures financial institutions are future-proofed against evolving Know Your Customer (KYC), Anti-Money-Laundering (AML), tax and OTC derivatives-based regulations across 100+ jurisdictions.Counting 80+ global financial institutions as clients, our award-winning CLM suite digitally transforms how financial institutions manage clients; from initial onboarding to KYC/AML and regulatory compliance, to data management and ongoing lifecycle KYC reviews and refreshes.Headquartered in Dublin, Ireland, Fenergo currently employs over 850 people and has offices in North America, the UK, Poland, Spain, South Africa, Asia Pacific, and the UAE.As Fenergo’s is growing and scaling its cloud product offerings we are now looking for an Information Security Operations Manager to join our Product team working with the Fenergo Trust and Security organization to implement technology compliance and best practice requirements across our cloud product offerings and associated global business operations.Main Responsibilities:<ul> <li>Manage the implementation of security requirements for cloud product offerings and supporting business operations</li> <li>Maintain cloud product and business operations in compliance with Fenergo Information Security Policies and Standards.</li> <li>Play lead operation manager role for cloud product service events and incidents, escalating to privacy and/or security team for support as required.</li> <li>Be the service delivery for Trust and Security monthly/quarterly services.</li> <li>Project manage the implementation of technology compliance and security assessments action items and/or improvement recommendations.</li> <li>Lead team of operational analysts to deliver to security and privacy operations</li> <li>Ensure security and privacy daily operation procedures are documented, maintained, and delivered to inline with Information Security KPI requirements.</li> <li>Report on FenCloud Security status directly to CISO.</li> <li>Complete monthly FenCloud Security health check and maturity scorecard for CISO.</li> </ul>RequirementsThe successful candidate will need <ul> <li>At least 6 years working experience working designing, building and/or implementing security part of software lifecycle processes.</li> <li>Practical experience managing vendors and suppliers </li> <li>Practical experience of security technologies and implementations</li> <li>Practical experience of addressing cyber-security in hybrid on-premises/cloud or all-cloud environments</li> <li>Ability to implement service type security solutions, managed and measured.</li> <li>A strong technical background in Security technology stacks</li> <li>Good knowledge of international security standards - ISO270001 and SOC2</li> <li>Excellent organizational, communication, leadership, and customer service skills.</li> <li>Ability to prioritize and manage across multiple sensitive initiatives</li> </ul>Benefits<ul> <li>Opportunity for career development in high growth with agile working environment</li> <li>Opportunity to work with clients and colleagues on a global scale</li> <li>Extensive training programmes, classroom and online, through ‘Fenergo University’</li> <li>Opportunity to work on a cutting-edge Fintech Product, using the latest of tools and technologies</li> <li>Contributed pension.</li> <li>Bonus.</li> <li>Health care for you and your family.</li> <li>Active sports and social club.</li> <li>Flexible working hours, and work from home policy</li> <li>Awesome co-workers.</li> </ul>

County Dublin

Information Security Operations Manager

Apply to SOC2 Cyber Security Jobs in companies remotely and near you. New SOC2 Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Sr Enterprise Security Engineer II at Rubrik	Full Time Analyst Windows Automation AWS
Information Security Internship at Span.IO, Inc.	Internship CISM Application Security AWS CIPP
Product Security Manager at KOHO	Remote Full Time Manager Banking Cloud
Security Governance, Risk & Compliance Analyst at SugarCRM	Remote Full Time CISM Audit Analyst
Information Security Operations Manager at Fenergo	Full Time CISO Manager Agile Cloud

SOC2 Cyber Security Jobs

0 SOC2 Cyber Security Jobs. Page 1 of 1

5 closed soc2 cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

SOC2 Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

SOC2 Cyber Security Jobs

0 SOC2 Cyber Security Jobs. Page 1 of 1

5 closed soc2 cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

SOC2 Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter