Design, develop, and maintain internal controls in response to security and compliance goals: FedRAMP, SOC2, HIPAA, PCI-DSS, ISO27001, etc.
Perform security reviews and identify security gaps in architecture resulting in recommendations for inclusion in the risk mitigation strategy
Support tooling and automation that facilitate security and compliance related activities and lead to reducing the disruption of audit events
Lead planning, coordination and execution of 3rd party-risk assessments and audits
Develop and maintain internal and external-facing security and compliance documentation
Work with product and engineering teams to maintain compliance baseline in Sumo Logic products
Work with internal teams to formulate processes in line with compliance and security controls, hold them accountable for following them, and manage throughout Risk Treatment and Remediation plans
Provide direction to management team on compliance goals and statuses
Drive periodic reviews, updates, and maintenance of compliance items
Interface with external auditors and be a primary point of contact for audits
Participate in maintenance of standard security and compliance collateral for marketing and sales activities

Requirements

The role needs to be located primarily in the US
Support the analysis, classification, and response to cybersecurity risks within the organization
Support sales team with customer meetings regarding questions on Information Security and Privacy
Must have strong skills in the following areas: Communication, Security and Privacy and the Compliance of security controls.
Ability to work and communicate across various teams and at various levels of the business is essential to this role.
Knowledge of compliance frameworks such as PCI DSS, ISO 27001, SOC 2, IRAP and NIST 800-53 / FedRAMP.

Benefits

Health insurance
401(k) matching
Flexible work hours
Paid time off
Remote work options

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

security reviewsrisk mitigation strategy3rd party-risk assessmentscompliance documentationcybersecurity risk analysissecurity controls complianceaudit managementprocess formulationrisk treatmentremediation plans

Soft Skills

communicationleadershipcoordinationinterpersonal skillsaccountabilitydirection providingcollaborationproblem-solvingorganizational skillscustomer engagement