Compliance Analyst

Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security. 

Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events (pre and hopefully post-Covid) and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive.  Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter@Netskope.

About the position:

This role is a member of the Global Information Security (GIS) team which has oversight and operational responsibilities for the Information security of Netskope.  The GRC Compliance Analyst will be a key member of the GRC team responsible for collaborating with the business on GRC activities, administering GRC solutions, managing the Vendor Security Risk Management Program and ensuring compliance objectives are being achieved. This role will be critical as we mature our controls and overall Information Security program.

Responsibilities:

• Assist in conducting enterprise-wide, ongoing risk analysis in tandem with compliance and internal audit.
• Assist in the development and management of the Vendor Security Risk Management Program and performing supporting tasks
• Support Customer risk assessments , audits and evidence collection.
• Assist in the development and maintenance of the  Information Security Risk Register 
• Monitors control effectiveness and escalates where issues are identified
• Contributes and co-manages the Metrics and Measures Program
• Contributes to security requirement documentation packages 
• Assists in development and maintenance of Information Security control mappings to defined frameworks
• Ensures risk treatment plans are appropriately communicated and tracked to the proper level of management
• Performs Technology and Information Security risk assessments
• Collaborate with Internal Audit and other assessors on Audits for Technology
• Works closely with cross functional teams to address control maturity or issues
• Review and provide feedback on other members work and documentation

 Job Requirements:

• A minimum of 4 years’ experience in Information Security and/or Technology.
• Prefer candidates with critical technical and IT security certifications, such as CISSP, CISM, CISA or equivalent.
• Experience in Vendor Security Risk Management
• Experience in performing risk assessments
• Must have knowledge and experience in managing GRC tools.
• Must be highly analytical with the ability to present your analysis
• Must have great written and verbal communication
• Must have experience in performing risk assessments.
• Must have experience in maintaining metrics and measures.
• Must have experience in supporting customer audits
• Must have experience working with software engineering teams in an agile environment
• General understanding of Cloud technologies
• General understanding of meeting multiple compliance frameworks such as ISO 27001, FedRAMP, SSAE-18 SOC2, CSA STAR, Security Control Framework, HIPAA, PCI-DSS, etc. 

Preferred Skills:

• General knowledge of security technologies and approaches to secure an organization.
• General knowledge of risk management and how to use risk management in a security program. 

Additional Skills: 

• Ability to be an active member of a team
• Ability to communicate effectively (written and verbal) 
• Self-motivated to work on tasks independently within the team 
• Ability to educate other members of the on existing processes and technologies
• Adds to the diversity (gender, religion, race) of the team
• Self and quick learner
• Ability to ask questions
• Knowledgeable pertaining to news and current events.

Education:

• Bachelor’s Degree or equivalent in experience preferred. 

#LI-SC1

Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.

Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.