Information Security Audit Manager
SnapLogic
IT
London, UK
Posted on Tuesday, July 16, 2024
The Role:
You are a well rounded IT Security professional with a strong working knowledge of Security and Compliance frameworks. You are comfortable managing and developing audited control objectives. You will be the point person for all Security and Compliance audits and will respond directly to Customers as needed. You will be responsible for understanding and supporting the design of SnapLogic’s procedural and technological Security controls within the context of the Security Compliance frameworks with respect to the SnapLogic platform and Business Operations. You enjoy being a part of a team culture that empowers you to take ownership of your features and components.
We are looking for exceptional, self-motivated individuals, eager to learn new and emerging technologies; share their learning, and exploit new Cloud offerings to the maximum benefit of our business and our customers. This role is a dedicated IT Security member for SnapLogic and will report to the Head of SnapLogic IT & Security. This role will be part of the SnapLogic Security Team and will work closely with all business units that are involved in our Security audits which includes Infrastructure Operations, IT, Engineering, HR, Legal, and Sales. You will be directly influencing our Security, Compliance and Privacy strategies.
What You'll Do:
- Oversee Security compliance audits and work with cross functional teams to collect evidence.
- Manage and develop audited internal controls in support of audited policies and procedures.
- Perform and document testing of those controls as well as championing recommendations for remediation.
- Define and track Security & Compliance audit lifecycle metrics.
- Assist daily ISEC tasks which will include Security RFIs, Vendor Management, Privacy DSR fulfillment, and support the SDLC program.
- Partner with key department stakeholders to align and collaborate on Security initiatives.
What We're Looking For:
- 3-5 years of experience managing Information Security and Compliance audits: SOC 2, ISO 27001, PCI, etc.
- 3 - 5 years of experience working in Information Security and Compliance.
- 3 - 5 years of experience working in Information Technology or Development Operations.
- Degree in Computer Science, Information Technology, or Information SecuritySecurity+, or higher level certification such as CISSP, CASP+, GCED, GCIH, GCFA, CISA, CEH, etc.
- Advanced expertise with two or more of the following frameworks: SOC 2, OWASP, NIST, HIPAA, ISO 27001, PCI-DSS, FedRAMP, and Data Protection regulations.
- Advanced ability to Project Manage initiatives with minimal supervision.
- Ability to work closely with cross-functional stakeholders in a dynamic environment.
- Ability to communicate effectively to technical and non-technical teams externally and internally.
Ideal Candidates Will Have:
- Penetration Testing and Vulnerability scan analysis and remediation experience.
- Advanced knowledge of Identity Management and SSO integrations.
- Advanced knowledge of Cloud Security concepts.
- Advanced understanding of Network conceptsBasic knowledge of standard Linux fundamentals
Why Join:
There's never been a better time to join SnapLogic. Here are a few reasons why:
Perks And Benefits: The list includes, but is not limited to: competitive salary, flexible PTO (USA employees), comprehensive healthcare; 401(k); FSA and supplemental insurance; paid parental leave; wellness and fitness reimbursements.
Company Momentum: Industry experts have consistently recognized our company, products, customers, and employees as best-in-class, from our year-over-year Leadership in Gartner’s iPaaS Magic Quadrant, to our 2021 CODiE Award win, to our recognition as a 2022 Bay Area Top Workplace.
Hot Market Opportunity: Leading organizations are embracing the cloud, data, and AI to rethink and rewire their businesses. According to industry analysts, the integration market alone is growing four times faster than the overall software market, approaching more than $5 billion in revenue.
Innovative Product: SnapLogic is the only company to provide a single, unified platform for all of a company’s integration and automation needs: application integration, data integration, API management, B2B integration, and data engineering.
World Class Customers: Hundreds of customers around the globe trust SnapLogic to handle their enterprise integration and automation needs. Our customers come first, and we’re proud of SnapLogic's industry-leading customer retention rate of over 95%.
SnapLogic is headquartered in San Mateo, CA with offices in New York, NY; London, UK; and Hyderabad, India.
To all recruitment agencies: SnapLogic does not accept unsolicited agency resumes. Please do not forward resumes to SnapLogic employees or to any other company location. SnapLogic is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company that does not have a signed agreement with the company. SnapLogic provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. SnapLogic complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. SnapLogic expressly prohibits any form of unlawful employee harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of SnapLogic employees to perform their expected job duties is absolutely not tolerated.