Addepar - Senior Security Analyst
Requirements
• Extensive experience managing, consulting, auditing, or working in the fields of Information security or Technology Risk required. AWS Cloud Security experience preferred. • Demonstrate strong analytical, communication, and problem solving skills. • Experience identifying and communicating key risks related to cloud implementations and architectures. • Ability to manage multiple high-visibility and high-impact projects while maintaining superior results. • Familiarity with control frameworks (e.g. NIST Cybersecurity Framework, NIST 800-53, ISO) and SOC2 audit compliance. • Our Values • Act Like an Owner - Think and operate with intention, purpose and care. Own outcomes. • Act Like an Owner - • Build Together - Collaborate to unlock the best solutions. Deliver lasting value. • Build Together - • Champion Our Clients - Exceed client expectations. Our clients’ success is our success. • Champion Our Clients - • Drive Innovation - Be bold and unconstrained in problem solving. Transform the industry. • Drive Innovation - • Embrace Learning - Engage our community to broaden our perspective. Bring a growth mindset. • Embrace Learning -
Responsibilities
• Assist in the management of Addepar’s Client Due Diligence Program through the composition and maintenance of security collateral. • Drive a more optimized Information Security and Risk Program, aligned with industry standard frameworks such as the NIST Cybersecurity Framework. • Lead independent risk assessments of our environment focusing on our platform and its supporting third party and internally developed software, infrastructure, and tools. • Support build-out of an enterprise metrics program and risk reporting framework to communicate risk to senior management. • Partner with control owners, engineers and other teams to facilitate reviews of new products and services, to ensure risks are identified, communicated, and mitigated. • Support SOC2 reviews including project management, planning, and coordination across Addepar teams and external auditors. • Maintain Addepar Information Security & Risk policies and standards, aligning to business and Client needs. • Assist efforts on Data Governance and ensuring the right access controls are in place to support the program. • Drive improvements and execution of risk and governance awareness programs. • Work as part of a global operating team across multiple timezones.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT