Thematic

Security Engineer

• Be the first point of communication for any security-related matters
• Communicate with others via Slack and with external security teams via email / Zoom / Teams
• Fill out security questions in a timely manner, and if necessary jump in after hours / on weekends for time-sensitive compliance projects (We’ll keep these at a minimum)
• Collaborate with other teams to find answers, if necessary
• Collaborate with other teams to ensure any requirements or changes to processes or infrastructure are implemented
• Ensure the filling out of security forms is efficient and quick
• Create artifacts that help sales team communicate with external security teams e.g. our AI Governance practices
• Be the first point of contact for the SOC2 / ISO auditors
• Lead our annual SOC2 compliance and review (around 8 weeks part-time)
• Ensure we are following security practices necessary to pass SOC2 compliance in an efficient manner (throughout the year, depending on time available)
• Use Confluence and Jira heavily, and you’ll use other tools required for evidence preparation
• Strive to understanding of business context and correlate the effort required for compliance initiative with business impact
• Review and maintain policy documents
• Research and write policy documents and updates to existing documents as they are needed
• Ensure controls are in place for compliance with policy documents
• Monitor compliance throughout the year and work with other teams to ensure they remain compliant
• Help with legal contract review and compliance
• Manage performance review software

Security and Compliance Specialist