Security Compliance Analyst

Tekfortune - Pleasanton, CA

Full-time

Pleasanton, CA

About the position

The Security Compliance Analyst is responsible for developing and maintaining security policies and standards based on established security frameworks and industry standards. This role involves conducting complex risk assessments, providing in-depth security consultation, and leading information security projects. The analyst will also mentor team members and represent the information security team in various meetings.

Responsibilities

• Develop and maintain security policies and standards based on security frameworks and industry standards.
• Provide in-depth security knowledge and consultation when analyzing security risks.
• Conduct the most complex Risk Assessments (RAs).
• Develop/maintain procedures related to RA/BRD/TDD/security defects.
• Perform analysis on complex Security Incident Response (SIR) tickets as needed.
• Act as Lead/Co-Lead/Backup on assigned Information Security projects.
• Train/mentor new/existing security team members on RAs/BRDs/TDDs/security defects.
• Attend meetings and represent Information Security for all security matters.

Requirements

• 5+ years of information technology experience, including two years of lead/management experience.
• Extensive knowledge of information technology systems and methods of developing, testing, and implementing solutions.
• Self-motivated and proactive, with strong communication skills to work closely with team members.
• Ability to work collaboratively and independently on assigned tasks with minimum supervision.

Nice-to-haves

• Working experience in a highly regulated environment managing information risks across multiple stakeholder groups.
• Experience with security, policy compliance, and governance frameworks including NIST-800 series, PCI, ISO 27001/27001, ITIL, and COBIT.
• Creative and critical thinking skills to analyze complex problems and select appropriate solutions.
• CISSP and CCFP or equivalent certification desired, with other security certifications being acceptable.
• Experience with LAN WAN, Internet, Proxy/Filtering, Firewall, VPN, DMZ, and network protocols.