SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Securonix is a cybersecurity unicorn backed by Vista Equity Partners, recognized as a five-time leader in the Gartner Magic Quadrant for SIEM. The company serves over 1,000 customers worldwide, including 10% of the Fortune 100, with a platform that combines AI-reinforced threat detection, investigation, and response capabilities on a cloud-native architecture.
The Support Engineer – Risk and Compliance Analyst will report to the Manager of Information Security Risk & Compliance and be responsible for maintaining the organization's compliance posture across multiple regulatory frameworks including SOC 2, ISO 27001, ISO 42001, HITRUST, and PCI.
Key responsibilities include:
- Conducting control self-assessments to identify and assess information security risks within the Securonix IT environment, ensuring timeliness, completeness, and accuracy
- Coordinating with auditors and internal stakeholders for audit evidence gathering
- Conducting risk assessments and vendor risk reviews, maintaining documentation in the GRC tool
- Creating and maintaining policy documentation, standards, and procedures to support security, compliance, and audit requirements
- Working with IT teams to establish standards and processes for maintaining and improving the organization's security posture
- Maintaining the risk register with up-to-date risk details and tracking risk response plans to closure
- Performing audits and assessments of third parties including vendors and service providers
- Developing appropriate remediation action plans for identified risks in collaboration with Technology and Security teams
- Assisting in continuous improvement and maturation of the Information Security GRC program
Requirements:
- 2+ years' experience in Information Security, IT audit, and/or IT Risk & Compliance roles
- Demonstrated experience performing risk assessments and control reviews against compliance frameworks such as COSO, COBIT, NIST, ISO 27001, etc.
- Understanding of IT General Controls in relation to SOC 2, ISO 27001, ISO 42001, and other compliance frameworks
- Bachelor's or Master's degree in computer science, information management, or similar work experience
- Strong attention to detail, influencing, and problem resolution skills
- Desirable: Familiarity with IT and Information Security processes (identity and access management, vulnerability management, encryption, logging and monitoring, application security)
- Desirable: Familiarity with cloud and SaaS-based environments and associated auditing methodologies
- Desirable: Relevant certifications such as CISSP, CISA, CRISC, or ISO 27001 Lead Auditor/Lead Implementer (not mandatory)
