IT Security and Compliance Analyst

XperiencOps, Inc. is in search of an IT Security and Compliance Analyst who will be crucial in upholding our ISO 27001 and ISO 27018 certifications and managing various aspects of our security and compliance framework. This role demands a professional skilled in policy maintenance, security incident documentation, and vendor security assessments, preferably with experience using Vanta for compliance management.

Key Responsibilities

• ISO Certifications Maintenance: Actively maintain ISO 27001 and ISO 27018 certifications, regularly updating policies and ensuring compliance through tools like Vanta.
• Security Incident Documentation: Systematically record all security incidents, detected through monitoring tools or reported by users, aligning with our established security policies.
• Software Compliance and Certification Assistance: Aid in achieving and maintaining software certifications and compliance standards relevant to our industry, ensuring that all technical and procedural requirements are met efficiently.
• Vendor Security Assessments: Conduct detailed security assessments of vendors, reviewing SOC2 documentation and other relevant security credentials to ensure alignment with our security standards.

Requirements

• Bachelor’s degree in Information Technology, Cybersecurity, or related field, with professional certifications in ISO 27001/27018, CRISC, or CISM being advantageous.
• Demonstrable experience in IT security and compliance, with a strong understanding of ISO certification requirements and security incident management.
• Familiarity with compliance management tools, preferably Vanta, and experience in conducting vendor security assessments.
• Detail-oriented with strong analytical skills, capable of managing multiple priorities in a fast-paced environment.
• Effective communication skills, both written and verbal, with the ability to convey complex security and compliance information clearly.

Location

• This is a full-time, onsite position based in our Pleasanton, CA office. The successful candidate will be required to report to the office 5 days a week.

Benefits

• Competitive salary with comprehensive benefits.
• An engaging role in a dynamic and growing company with opportunities for professional development and growth.
• A collaborative work environment where your contributions to IT security and compliance are highly valued.