The Information Security Compliance Analyst will be a crucial member of the security team driving down cyber risks, ensuring our compliance with ISO27001 and continually reducing the friction of the compliance program with internal departments.
Responsibilities:
Governance: Review and update policies as necessary.
Processes and Procedures: Build, improve, and/or utilize Lightcast processes and procedures to drive down risks and improve day-to-day security operations.
Compliance: Leverage security tools and processes to validate and ensure Lightcast’s compliance with ISO27001, NIST 800-53, and other cybersecurity frameworks.
Vulnerability and Patch Management: Effectively communicate and engage with IT and Engineering, leveraging security tools, to reduce risk scores.
Audit: Perform assessments and engage with auditors on behalf of Lightcast’s security team.
Training and Awareness: Provide training to employees on the latest security threats, best practices, and internal policies.
Customer Engagement: Respond to requests for proposals and other vendor questionnaires to drive Lightcast revenue targets.
Team Player: Work with cross-functional teams to reduce security risks and achieve compliance goals.
Cloud Compliance Knowledge: Knowledge of AWS, GCP, or Azure is a plus!
Performs other related duties as assigned.
Required Skills/Abilities:
A passion for organization and attention to detail is a must!
Demonstrated problem-solving and analytical skills.
Proficient, or able to gain proficiency with, a broad array of security software applications and tools.
Skill in GSuite, Microsoft Office Suite or related software.
Able to understand and communicate, highly technical topics.
Education and Experience:
Bachelor's degree in Computer Science, Programming, or a related field required; M.B.A. in Information Systems preferred.
At least one year of experience in computer systems with some specialization in computer security highly preferred.
Physical Requirements:
Prolonged periods sitting at a desk and working on a computer.