Sr. Information Security Analyst

📋 Description

• Leads major program areas with limited supervision, such as vulnerability management, third-party
• Leads risk assessment processes end to end, including the hardest and highest-stakes ones, and
• Designs and documents complex internal controls, which may include building reports or automation.
• Provides effective challenge, primarily to partners in Engineering, and partners with Compliance
• Uses professional judgment and quantifiable methods to measure risk, and drives decisions on
• Independently authors high-quality updates to policies and procedures, and owns program-level and

🎯 Requirements

• 6+ years of experience in security GRC, technology risk, technology audit, or security operations
• Expert-level depth in at least one security domain (for example vulnerability management, SDLC
• Deep, hands-on command of security risk management: the CIA triad, control design and operation
• Strong command of security controls for cloud computing and third-party SaaS, including logical
• Fluency in the structure and content of audit reports and risk assessments, including audit and
• Ability to use professional judgment and quantifiable methods to measure risk, and to drive

🎁 Benefits

• Medical, dental, and vision coverage; life and AD&D insurance; short- and long-term disability
• Equity for all employees, including new hire and refresher grants
• Flexible paid time off, paid parental leave, and a fully paid four-week sabbatical in your sixth
• Company-paid professional coaching for all employees
• Day-one 401(k) match plus matching on qualified student loan payments