Remote Lead Security and Privacy Compliance Analyst

Description:

• The Lead Security and Privacy Compliance Analyst at Zone & Co plays a crucial role in ensuring the company's adherence to legal, regulatory, and professional standards in data protection and business practices.
• Responsibilities include overseeing compliance with laws, regulations, and internal requirements, supporting audits for SOC 1, SOC 2, and ISO 27001, and collaborating with other teams to establish and maintain robust security and privacy compliance programs.
• The role involves identifying and mitigating internal and external security and privacy risks, developing and updating IT policies and procedures, managing audit engagements, and addressing compliance issues with stakeholders.
• The Lead Analyst must possess a diverse skill set covering IT systems, applications, infrastructure, security, audit, and risk assessment, prioritize effectively, and ensure regulatory compliance to safeguard Zone's data, reputation, and operational continuity.

Requirements:

• Good working knowledge of compliance, security, governance, audit, and risk concepts and practices.
• In-depth understanding of common security and privacy standards, regulations, and laws relevant to a cloud software development company (e.g., SOC 1, SOC 2, ISO 27001/2, ISO 27017).
• 5+ years' experience in information security audits, risk assessments, cyber risk management, or compliance.
• Experience in vulnerability management, ability to work independently, and proficient in documenting risk and compliance activities.
• Excellent interpersonal, communication, and presentation skills, experience in developing security standards, and advanced computer skills.

Benefits:

• Zone & Co offers benefits designed to enrich employees' lives beyond the workplace, prioritizing flexibility and balance as a fully remote company.
• Comprehensive benefits include support for a diverse workforce, equal opportunity employment, and a commitment to building an equitable, inclusive, and supportive work environment.
• Candidates from all backgrounds and identities are encouraged to apply to bring diverse perspectives to the company and contribute to a supportive and inclusive workplace.