SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Securonix is a cybersecurity unicorn backed by Vista Equity Partners, recognized as a five-time leader in the Gartner Magic Quadrant for SIEM. The company serves over 1,000 customers worldwide, including 10% of the Fortune 100, with a platform built on cloud-native architecture leveraging Snowflake Data Cloud.
The Support Engineer – Risk and Compliance Analyst will report to the Manager of Information Security Risk & Compliance and be responsible for maintaining compliance with regulatory and industry mandates including SOC 2, ISO 27001, ISO 42001, HITRUST, PCI, and others.
Key responsibilities include:
- Conducting control self-assessments to identify and assess information security risks within the Securonix IT environment, ensuring timeliness, completeness, and accuracy
- Coordinating with auditors and internal stakeholders for audit evidence gathering
- Conducting risk assessments and vendor risk reviews, maintaining documentation in the GRC tool
- Creating and managing policies, standards, and procedures to support security, compliance, and audit requirements
- Working with IT teams to establish standards and processes for maintaining and improving the organization's security posture
- Assisting in continuous improvement and maturation of the Information Security GRC program
- Maintaining the risk register with up-to-date risk details and tracking risk response plans to closure
- Performing audits and assessments of third parties including vendors and service providers
- Developing appropriate remediation action plans for identified risks in collaboration with Technology and Security teams
Requirements:
- 2+ years' experience in Information Security – IT audit and/or IT Risk & Compliance roles
- Demonstrated experience performing risk assessments and control reviews against compliance frameworks such as COSO, COBIT, NIST, ISO 27001, etc.
- Understanding of IT General Controls in relation to SOC 2, ISO 27001, ISO 42001, and other compliance frameworks
- Familiarity with IT and Information Security processes such as identity and access management, vulnerability management, encryption and key management, logging and monitoring, and application security (desirable)
- Familiarity with cloud and SaaS-based environments and technologies with associated auditing methodologies (desirable)
- Bachelor's or Master's degree in computer or information management field or similar work experience
- Relevant certifications such as CISSP, CISA, CRISC, or ISO 27001 – Lead Auditor/Lead Implementer (desirable but not mandatory)
- Strong attention to detail, influencing, and problem resolution skills
