Create and update Security Policies, standards and procedures.
Create and manage corporate-wide security training.
Plan, coordinate, and implement work assignments with process owners, control owners, external auditors and consultants.
Perform control testing, document results and provide updates to the business.
Partner with internal stakeholders on the design of internal controls for ongoing risk mitigation and information systems based on internal and external obligations.
Clearly and effectively communicate security issues and risks to diverse audiences.
Manage, perform and report on Security Risk Assessments.
Educate and train process and control owners on security practices and responsibilities.
Ensure compliance with applicable controls based on a unified control framework.
Evaluate and advise on new and evolving certification programs, technology and security standards.
Proactively identify and correct process gaps and improvements to further the maturity of Gong’s programs in alignment with Company goals and objectives.
Ability to work independently on complex programs and assignments with diverse teams.
QUALIFICATIONS
6+ years of overall experience, with 5+ years of relevant Information Security or GRC experience.
Basic Cloud Security Knowledge.
GRC tool and automation experience.
In-depth knowledge of control and Risk frameworks including PCI DSS, NIST 800-37 and ISO 27001, SOC 2.
Ability to be hands-on and go beyond direct job responsibilities to help the team succeed.
Ability to navigate ambiguity in a fast-changing environment.
Familiarity with attack frameworks and mitigation.
PERKS & BENEFITS
We offer Gongsters a variety of medical, dental, and vision plans, designed to fit you and your family’s needs.
Wellbeing Fund - flexible wellness stipend to support a healthy lifestyle.
Mental Health benefits with covered therapy and coaching.
401(k) program to help you invest in your future.
Education & learning stipend for personal growth and development.
Flexible vacation time to promote a healthy work-life blend.
Paid parental leave to support you and your family.
Company-wide recharge days each quarter.
Work from home stipend to help you succeed in a remote environment.