Note: The job is a remote job and is open to candidates in USA. LaunchDarkly is a company focused on modern software delivery, and they are seeking a Security Analyst III to facilitate security and privacy programs. The role involves assessing and reducing security risks, advising stakeholders, and ensuring compliance with various security frameworks.
Responsibilities
- Collaborate with stakeholders to design and operate security controls that comprise the LaunchDarkly GRC program
- Use technology to automate compliance activities like gathering evidence and verifying controls
- Operationalize the health and maturity of the program by tracking metrics based on quantitative and qualitative data
- Drive progress towards results for GRC-related continuous improvement projects
- Contribute to documentation for security standards, policies, and processes
- Support audits and assessments with internal and external stakeholders
- Work with product and infrastructure delivery teams on engineering projects related to GRC requirements
Skills
- Deep cybersecurity, privacy, and risk management knowledge and skill
- Excellent communication skills - written and verbal
- Experience working on collaborative projects
- Depth with modern cloud-based SaaS organizations - specifically AWS control environments
- Information security experience at an organization with significant compliance requirements
- Strong familiarity with security standards (SOC 2, ISO 27001, ISO 27701, FedRAMP) as well as privacy laws (CCPA and GDPR)
- Familiarity with LaunchDarkly's collaboration tools like Confluence, Slack, and Github
- Considerable knowledge of software development and architecture
- CCSP, PCI QSA, CISSP, or CISA / CISM certifications
Benefits
- Restricted Stock Units (RSUs)
- Health, vision, and dental insurance
- Mental health benefits
Company Overview
Company H1B Sponsorship