Cybersecurity Analyst

$100,000 - $120,000/Yr

Trupanion - Seattle, WA

Full-time - Mid Level

Seattle, WA

Personal and Laundry Services

About the position

Join Trupanion as a Cybersecurity Analyst and make a significant impact on the security posture of our organization. In this role, you will be instrumental in protecting the business from potential threats and ensuring that our IT systems and information assets remain secure. Your extensive experience in evaluating risks, responding to incidents, conducting security reviews, managing vendor onboarding, and adhering to governance, risk, and compliance frameworks will be crucial in establishing and implementing robust security measures that align with industry standards. As a Cybersecurity Analyst, you will develop, implement, review, and update Information Security policies and procedures in accordance with regulatory requirements and industry standards. It will be your responsibility to ensure that these policies are effectively communicated and clearly articulated across the organization. You will support the design, implementation, and review of the Control Framework, conduct risk assessments, and implement appropriate mitigation strategies. Collaboration with various business units will be essential to align Information Security initiatives with organizational goals and objectives. In addition, you will support internal and external audits, lead incident response efforts, and collaborate with cross-functional teams. Your role will also involve performing security reviews of systems, networks, and applications, leading vendor risk programs, and managing the onboarding and offboarding of vendor relationships while continually assessing their security practices. You will maintain the information security training program and awareness campaigns, handle non-conformities and exceptions to policy, and continually improve our security governance practices, GRC tooling, and risk treatment approach. Producing security reports and maintaining dashboard metrics will also be part of your responsibilities.

Responsibilities

• Develop, implement, review, and update Information Security policies and procedures in accordance with regulatory requirements and industry standards.
• Ensure that policies and policy requirements are effectively communicated and clearly articulated across the organization.
• Support design, implementation and review of the Control Framework.
• Conduct risk assessments and implement appropriate mitigation strategies.
• Collaborate with business units to align Information Security initiatives with organizational goals and objectives.
• Support internal and external audits.
• Lead incident response efforts and collaborate with cross-functional teams.
• Perform security reviews of systems, networks, and applications.
• Lead vendor risk programs, and the onboarding and offboarding of relationships, continually assessing their security practices.
• Maintain the information security training program and awareness campaigns.
• Handle non-conformity and exceptions to policy.
• Continually improve our security governance practices, GRC tooling, and risk treatment approach.
• Produce security reports and maintain dashboard metrics.

Requirements

• Bachelor's degree or equivalent experience in Computer Science, Cybersecurity, or a related field.
• 4+ years of experience in relevant GRC functions related to compliance & risk management.
• 2+ years of experience in incident management IT technical background.
• Involvement with security standards ISO, NIST and CIS.
• Familiarity with maintaining multiple legal and regulatory frameworks, including PCI DSS, SOX, NYDFS, and OSFI.
• Excellent communication, documentation, and collaboration skills.

Benefits

• Full medical, dental, and vision benefits at no cost to the employee.
• Four weeks of paid time off and 9 paid float holidays.
• Five-week sabbatical after five years of employment.
• Open, casual, pet-friendly, and fun office environment.
• Free medical health insurance for your pet (1 dog or cat).
• Paid time off to volunteer at nonprofit organizations.
• Free on-site gym, free dog walking services for office pets during business hours, free parking, and paid ORCA cards.