Create and update Security Policies, standards and procedures. Create and manage corporate-wide security training. Plan, coordinate, and implement work assignments with process owners, control owners, external auditors and consultants. Perform...
Description:RESPONSIBILITIES- Create and update Security Policies, standards and procedures.
- Create and manage corporate-wide security training.
- Plan, coordinate, and implement work assignments with process owners, control owners, external auditors and consultants.
- Perform control testing, document results and provide updates to the business.
- Partner with internal stakeholders on the design of internal controls for ongoing risk mitigation and information systems based on internal and external obligations.
- Clearly and effectively communicate security issues and risks to diverse audiences.
- Manage, perform and report on Security Risk Assessments.
- Educate and train process and control owners on security practices and responsibilities.
- Ensure compliance with applicable controls based on a unified control framework.
- Evaluate and advise on new and evolving certification programs, technology and security standards.
- Proactively identify and correct process gaps and improvements to further the maturity of Gong’s programs in alignment with Company goals and objectives.
- Ability to work independently on complex programs and assignments with diverse teams.
QUALIFICATIONS- 6+ years of overall experience, with 5+ years of relevant Information Security or GRC experience.
- Basic Cloud Security Knowledge.
- GRC tool and automation experience.
- In-depth knowledge of control and Risk frameworks including PCI DSS, NIST 800-37 and ISO 27001, SOC 2.
- Ability to be hands-on and go beyond direct job responsibilities to help the team succeed.
- Ability to navigate ambiguity in a fast-changing environment.
- Familiarity with attack frameworks and mitigation.
PERKS & BENEFITS- We offer Gongsters a variety of medical, dental, and vision plans, designed to fit you and your family’s needs.
- Wellbeing Fund - flexible wellness stipend to support a healthy lifestyle.
- Mental Health benefits with covered therapy and coaching.
- 401(k) program to help you invest in your future.
- Education & learning stipend for personal growth and development.
- Flexible vacation time to promote a healthy work-life blend.
- Paid parental leave to support you and your family.
- Company-wide recharge days each quarter.
- Work from home stipend to help you succeed in a remote environment.