Overview
Security Compliance Analyst Jobs in Lehi, UT at RainFocus
Title: Security Compliance Analyst
Company: RainFocus
Location: Lehi, UT
RainFocus, one of the most innovative software companies in the heart of Utah’s Silicon Slopes, is in search of an exceptional Security Compliance Analyst.About RainFocusRainFocus cares about its employees, customers, and the world in which we live. Our rapidly-growing team serves Fortune 500 companies like Adobe, Cisco, IBM, Oracle, VMware, and others to prepare and execute in-person, virtual, and hybrid events, across the world. Those events are delivered through our industry-disrupting software platform, with groundbreaking business intelligence, to elevate the attendee experience, streamline event operations, and accelerate marketing results. We are well-funded, growing fast, and building a company that is changing the market — it will be challenging, fun and exciting.
What You’ll Experience With Your JobThe Security Compliance Analyst is a reliable member of a team and is eager to learn & grow. This position works in a team environment to support the company’s cybersecurity and data privacy program by working primarily on the program’s compliance component.
For example, this individual will have responsibility for assessing compliance requirements from various standards, helping maintain and mature our Security & Privacy Program and responding to clients’ and personnel’s questions. The Analyst will work closely with our Security & Privacy Team and contribute to all other components of our program.
The Analyst will be mentored and have opportunities for training and growth. As such, candidates are expected to have a strong desire to work in the cybersecurity and/or privacy fields, be willing to be mentored and take on responsibilities that will further their career growth.
Essential Responsibilities
The Analyst will support the compliance component of our cybersecurity and data privacy program, and as such will:
Assist with managing our control framework. For example:
Map new regulations, contracts, etc.
Conduct gap assessments
Maintain relevant documentation (e.g. policy and process documents)
Monitor for, analyze and report on policy individual compliance violations and overall trends
Assist with managing our Third Party Risk program
Assist with audits
Assist with risk assessments
Respond to security and privacy inquiries
Contribute to maturing our overall Security & Privacy Program, with a focus on the compliance aspect
Participate in educational/mentoring activities
Perform other tasks as determined
Applicable Skills And Experience
US Citizen/Authorized to work in the US
0 – 5 years’ relevant experience from any field, such as (but not limited to):
Academia
Audit / compliance
Cybersecurity
Data Privacy
Finance
Healthcare
IT
Military
Legal
Risk management
Basic understanding of key cybersecurity and privacy terms & concepts, including:
Cryptography
Networking concepts,
The primary cybersecurity risks facing multinational organizations
The primary objectives of most data privacy/protection laws and how, in general, those laws impact organizations
Firm understanding of key cybersecurity and data privacy terms & concepts, including:
The interplay between risks and vulnerabilities/threats
The role of policies in an organization
Relevant experience with any of the following – or similar – regulations, standards and frameworks (listed alphabetically):
GDPR
ISO 27001
NIST 800-53
PCI-DSS
SOC Audits
Personal Characteristics
The best can…