Senior Security Governance Risk & Compliance Analyst - Remote

BigCommerce’s mission is to help merchants sell more at every stage of growth, from small startups, to mid-market businesses to large enterprises. We focus on being the best ecommerce platform so our customers can focus on what matters most: growing their businesses.

We are equally passionate about growing our employee’s careers and providing them an incredible experience as we rapidly expand across the globe. We are proud to have been recognized numerous times for our product and workplace culture. We empower our people and customers to build, innovate and grow, so together we can redefine the ecommerce industry.

Do you thrive on partnering with internal teams to ensure successful security programs are in place that aligns with compliance requirements? Are you experienced with helping internal teams continuously improve their security and compliance posture and do you enjoy the challenge of working in a fast-paced space like e-commerce? Are you a go-getter who loves to get stuff done and is passionate about delivering value to the business? If so, BigCommerce has an exciting full-time opportunity for someone like you!

BigCommerce, is seeking a Senior Security Governance, Risk & Compliance Analyst to work with our Cybersecurity & GRC Team

Our global GRC Analysts lead projects/programs across the company, interfacing with TechOps, IT, Product Development, HR, and everywhere in between. You’ll be collaborating with both internal customers and external partners/vendors to help define and execute our global GRC roadmap.

** To be considered applicants must reside in the United States**

What You’ll Do

• Coordinate information technology and security-related audits for compliance standards like PCI DSS, ISO27001, SOC2, etc.
• Assist management in the development of the appropriate documentation, including, for example, security plans, information security-related policies, and process descriptions
• Drive improvements in existing processes and monitor the measurement and review of internal processes, especially those that affect the quality of the organization's services
• Conduct internal risk assessments
• Support the communication of policies, procedures, and plans regarding security and compliance best practices around applicable laws, regulations, and controls
• Perform IT controls testing and develop recommendations based on confirmed observations
• Work with process and control owners to help them understand the audit results, identify remediation options, and prioritize their closure
• Partner with internal teams to ensure successful security programs that align with compliance requirements
• Supports daily operational security activities such as responses to client inquiries regarding the information security program as required
• Identify, research, and evaluate new compliance requirements and ensure they are incorporated into the BigCommerce security policy framework
• Perform other IT security and compliance-related tasks as assigned by management

Who You Are

• 6+ years experience in cybersecurity, governance, risk & compliance 
• Bachelor's degree in CS, EE, CE, MIS; or equivalent experience
• Excellent communication, planning organizational and writing skills
• Strong knowledge of applicable compliance/risk concepts, information security audit standards, and industry best practices
• Attention to detail around controls, metrics, accountability, and operational excellence
• Strong track record of developing and maintaining high-quality internal policy and procedure documents
• Proven ability to manage multiple projects and lead them to completion with limited direction
• Ability to understand deep technical concepts and explain technical or complex analysis to non-technical individuals
• Experience working extremely cross-functionally in a fast-moving, engineering-focused organization
• Hands-on experience working successfully in a very fast-paced, results-oriented environment
• You have experience using a variety of tools like JIRA, Confluence, and G Suite.
• Self-driven. You have superior organizational skills, integrity, and great follow-through on tasks. You don't get overwhelmed easily
• Naturally curious. You're innovative, extremely creative, and constantly providing ideas to optimize the process
• You're a charismatic people-person who can talk to anyone; you're flexible, fearless, and excited to help build something awesome
• You understand the awesomeness and challenges of risk assessments, auditing, and auditors - and know what to apply for each situation.
• You u