Senior, Information Security Auditor Lead - Security Customer Enablement

See yourself at Twilio

Join the team as our next Senior, information Security Auditor - Lead on Twilio’s Security Customer Enablement team that sits within our Enterprise Information Security Organization.

Who we are & why we’re hiring

Twilio powers real-time business communications and data solutions that help companies and developers worldwide build better applications and customer experiences.

Although we're headquartered in San Francisco, we have presence throughout South America, Europe, Asia and Australia. We're on a journey to becoming a globally anti-racist, anti-oppressive, anti-bias company that actively opposes racism and all forms of oppression and bias. At Twilio, we support diversity, equity & inclusion wherever we do business. We employ thousands of Twilions worldwide, and we're looking for more builders, creators, and visionaries to help fuel our growth momentum.

About the job

This position is needed to help build out and lead Twilio’s Global Information Security Customer Audit Program. In this pivotal role, you will play a crucial part in establishing and overseeing Twilio's Global Information Security Customer Audit Program, specifically catering to audits requested by some of our most prominent and highly regulated customers. As a vital contributor to our enterprise-level operations, your responsibilities will extend across all our product offerings. This position offers you the opportunity to assume the primary leadership role in conducting information security customer audits, making a significant impact on our organization's security and compliance landscape, while earning the trust of our customers.

Responsibilities

In this role, you’ll:

• Develop and implement an Information Security Customer Audit Program, defining strategic vision, roadmap, runbooks, documentation, and evidence collateral tracking
• Manage multiple customer audit engagements concurrently, often working independently while collaborating effectively with various internal teams to gather evidence
• Assess and interpret customer and contractual requirements relevant to audit requests
• Advise and communicate the role and scope of audit and assurance engagement activities clearly to relevant stakeholders
• Review and report on the findings of audit and assurance engagements
• Recommend appropriate strategies to ensure adherence to regulatory standards and internal controls.
• Demonstrate proactive thinking and strategic planning, anticipating organizational needs and recognizing the wider business environment and dynamics
• Mentor and develop junior team members, fostering a culture of growth and excellence
• Apply strong business acumen and commercial awareness to align audit objectives with overall business goals
• Foster collaborative relationships with various internal teams across Twilio to facilitate seamless audit processes

Qualifications 

Not all applicants will have skills that match a job description exactly. Twilio values diverse experiences in other industries, and we encourage everyone who meets the required qualifications to apply. While having “desired” qualifications make for a strong candidate, we encourage applicants with alternative experiences to also apply. If your career is just starting or hasn't followed a traditional path, don't let that stop you from considering Twilio. We are always looking for people who will bring something new to the table!

Required:

• 5-7+ years of hands-on experience with auditing and/or maintaining information security-based controls
• Experience in a customer-facing technical role (internal or external based customers)
• Must possess exceptional communication skills, both oral and written, along with strong technical audit capabilities, organizational, analytical, and problem-solving and communication skills preferably in a risk or security context
• A deep understanding of security concepts and technology, including encryption, networking, operating systems, databases, telephony, middleware, and applications, ideally in a cloud environment
• Familiarity with cloud technologies and APIs will be an advantage
• Working knowledge of common security frameworks and regulatory requirements such as NIST, SOC, ISO/IEC 2700X, GDPR, HIPAA, and PCI
• Self-driven, autonomous and can contribute to the strategy and roadmap of the team, while having strong attention to detail and quality
• You have or would be willing to obtain certification(s) such as: CISA, CCSP, CCSK, CRISC, CISM, or CISSP

Desired:

<