Apply on Employer Site

Bonterra · 2 hours ago

Information Security Compliance Analyst

United States

Full-time

Remote

Mid, Senior Level

$76K/yr - $100K/yr

6+ years exp

Bonterra is a company focused on increasing the giving rate in the social good sector. They are seeking an Information Security Compliance Analyst to manage compliance initiatives, perform risk assessments, and collaborate with various teams to ensure security protocols are followed.

Information TechnologySoftware

No H1B

Responsibilities

Perform as the primary in the executing our annual Service Organization Controls (SOC) reporting initiatives, which includes several Bonterra products

Works closely with other members of the Information Security Risk team

Works closely with control owners across the company and internal and external auditors to ensure requests are completed in a timely manner as part of the overall project management process

Performs technical risk assessments of third party suppliers' security and privacy controls

Maintains register of relevant suppliers/vendors, controls, and risks for ongoing vendor risk management activities

Will be responsible the play book for reporting of high risk events that involve compliance, risk and information security

Assists in maintaining our overall security awareness, role based security trainings and phishing simulation programs across the enterprise

Assists in conducting user activity audits where required

Qualification

RiskComplianceInformation security certificationsProject managementAnalytical skillsTechnical proficiencyCommunication skillsOrganizational skills

Required

6+ years' experience performing risk and compliance activities or open to less with a relevant degree

Project management experience

Experience managing multiple priorities independently and in a team environment to achieve goals

Excellent organizational, planning and time management skills

Excellent research and analytical skills

Excellent verbal and written communication skills

Ability to exercise good judgement and tact in dealing with Bonterra senior management

Proficient with technology and ability to learn our software systems, including GRC, ticketing and project management software and workflows

Proven track record of proactively identifying needs and implementing solutions

Preferred

Information systems security professional certifications preferred (CRISC, CISA, CISSP, CISM, GSEC, GCFA, GCTI, CCSP, or other relevant Information Security certifications)