[Remote] Information Security Compliance Analyst
Note: The job is a remote job and is open to candidates in USA. Bonterra is a company dedicated to increasing the giving rate in the social good sector. They are seeking an Information Security Compliance Analyst to manage SOC reporting initiatives, perform technical risk assessments, and ensure compliance across various projects.
Responsibilities
- Perform as the primary in the executing our annual Service Organization Controls (SOC) reporting initiatives, which includes several Bonterra products
- Works closely with other members of the Information Security Risk team
- Works closely with control owners across the company and internal and external auditors to ensure requests are completed in a timely manner as part of the overall project management process
- Performs technical risk assessments of third party suppliers' security and privacy controls
- Maintains register of relevant suppliers/vendors, controls, and risks for ongoing vendor risk management activities
- Will be responsible the play book for reporting of high risk events that involve compliance, risk and information security
- Assists in maintaining our overall security awareness, role based security trainings and phishing simulation programs across the enterprise
- Assists in conducting user activity audits where required
Skills
- 3+ years experience performing risk and compliance activities
- Project management experience
- A strong understanding of both SOC and ISO as there will be overlap
- Experience managing multiple priorities independently and in a team environment to achieve goals
- Excellent verbal and written communication skills
- Excellent organizational, planning and time management skills
- Excellent research and analytical skills
- Ability to exercise good judgement and tact in dealing with Bonterra senior management
- Proficient with technology and ability to learn our software systems, including GRC, ticketing and project management software and workflows
- Proven track record of proactively identifying needs and implementing solutions
- Information systems security professional certifications preferred (CRISC, CISA, CISSP, CISM, GSEC, GCFA, GCTI, CCSP, or other relevant Information Security certifications)
Benefits
- A comprehensive benefits package that supports your health, well-being and growth - explore full details [here.](https://www.bonterratech.com/careers)
- Bonuses
- Incentives
- Equity
- A comprehensive benefits program
Company Overview