Principal Security Analyst – Governance, Risk, and Compliance

🔥 3 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Blackbaud

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

☁️ SaaS

🤝 Non-profit

🤝 B2B

💰 $6.5M Series A on 2000-02

SaaS • Non-profit • B2B

Blackbaud is a cloud software company that builds intelligent solutions for social impact, focusing on nonprofit organizations. It provides products and services for fundraising, donor management, engagement, and sector-specific cloud solutions to help charities, educational institutions, and other mission-driven organizations move faster and work smarter. Blackbaud also offers training, support, developer resources, a partner marketplace, and industry research through the Blackbaud Institute. The company emphasizes privacy, security, and corporate social responsibility.

📋 Description

• Champion the security risk quantification program and process to enable informed decision making across the organization. • Articulate security risk through the development of Key Risk Indicators (KRIs) and report to multiple stakeholder groups, including the Executive Leadership Team (ELT) and Board of Directors. • Develop, assess, and implement cybersecurity controls and procedures required to protect the confidentiality, integrity, and availability of Blackbaud data. • Lead and coordinate internal and external security, compliance, and regulatory assessments, including customer audits, independent attestations, certification audits, and third party reviews. Serve as the primary liaison with assessors and stakeholders to ensure successful completion of assessment activities and remediation efforts. • Act as a key stakeholder in corporate governance forums and committees by serving as an active advocate for cybersecurity practices, risk management, and policy compliance. • Partner with control owners to continuously monitor control implementations, assess effectiveness, and track noncompliance issues through resolution. • Enhance change management processes to socialize, communicate, and educate stakeholders on policy, standard, and procedure updates. • Identify opportunities to strengthen and mature the organization's governance, risk, and compliance programs through continuous improvement initiatives and industry best practices.

🎯 Requirements

• 8+ year’s experience in Information Technology and/or Security • 3+ year's experience in leading audit/ assessment projects • 3+ year’s experience in risk management frameworks (i.e., NIST CSF) • 2+ year’s experience in quantitative risk management frameworks (FAIR, OCTAVE, etc.) • Experience in corporate GRC solutions (Archer, ServiceNow, etc.) • Experience in financial services, or other highly regulated industries (i.e. SOX, SOC, PCI DSS) • Experience working in an agile team • Demonstrated understanding of cyber risks and implementing mitigation plans • Possesses effective communication and presentation skills • Ability to handle multiple priorities and high stress situation • Industry Certifications like: CISSP, CRISC, CISM/CISA, AWS certification(s), Azure certification(s)

🏖️ Benefits

• Medical, dental, and vision insurance • Remote-flexible workforce • Wellness Programs • 401(k) program with employer match • Flexible paid time off • Generous Parental Leave • Donations for Doers • Pet insurance, legal and identity protection • Tuition reimbursement program