IT & Cybersecurity Compliance Specialist

🕒 il y a 14 jours

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟡 Intermédiaire

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 10%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Pearl

Site WebLinkedInTous les Emplois

51 - 200 employés

Fondée en 2019

☁️ SaaS

🤝 B2B

💰 €58 000 000 Series B - Pearl en 2024-07

SaaS • B2B

Pearl est un fournisseur de kits d'outils UI/web front-end ou de modèles de sites web. Les CSS et noms de classes fournis indiquent que Pearl maintient un système de design ou un ensemble complet de composants UI (navigation, listes déroulantes FAQ, modaux, carrousels, conteneurs responsifs, états de focus accessibles et blocs de témoignages) destinés à assurer une apparence et un comportement cohérents des sites marketing et produits sur les navigateurs et les affichages. Les supports suggèrent que Pearl offre des styles réutilisables et des modèles d'UX pour construire ou thématiser des sites web, bien que l'extrait fourni ne précise pas si Pearl est une place de marché de modèles, un produit de système de design, une agence ou une plateforme SaaS.

Description

• Administer and maintain core IT systems including endpoint management, identity and access management (IAM), and SaaS tooling such as Google Workspace, Slack, and Notion • Manage employee onboarding and offboarding, including provisioning and deprovisioning accounts, hardware, and system access • Maintain and enforce IT access controls, role-based permissions, and least privilege across systems • Serve as the first point of escalation for internal IT support requests and tickets, triaging and resolving technical issues • Manage the company device fleet, including MDM enrollment, patching, and compliance monitoring • Administer and monitor cloud infrastructure and SaaS platform configurations for security and availability • Maintain IT asset inventory and manage software licensing • Conduct compliance gap assessments for SOC 2, HIPAA, GDPR, and related regulations • Develop, write, and revise security and privacy SOPs • Implement and monitor security KPIs • Assess, document, and report security breaches or incidents • Perform security assessments of new and existing suppliers, including annual reviews • Conduct information security incident reviews and recommend corrective actions • Manage security and privacy CAPAs • Prepare for and manage security and privacy audits • Complete security questionnaires for clients, vendors, and partners • Monitor evolving security and privacy regulations and update policies and procedures • Administer Vanta or an equivalent GRC tool for compliance monitoring and evidence collection • Oversee security and privacy training programs • Design and execute phishing simulation campaigns and related training • Host recurring security committee meetings and management reviews

🎯 Exigences

• 3+ years of experience in IT administration, systems management, or a combined IT/security role • 3+ years of experience implementing and maintaining SOC 2 certification • 3+ years of experience with HIPAA, GDPR, and other global privacy frameworks • Proven track record of managing compliance programs, including audits, risk assessments, and CAPAs • Hands-on experience with compliance tools such as Vanta or similar platforms • Demonstrated experience with endpoint management, IAM platforms, MDM solutions, and SaaS administration • Strong understanding of cybersecurity best practices, incident response, and supplier risk management • Excellent written and verbal communication skills, with the ability to translate complex requirements into actionable processes • Ability to work independently and collaboratively in a fast-paced environment • Relevant certifications (e.g., CISA, CISM, CISSP, CompTIA Security+, or equivalent) are a plus • Experience in a SaaS company is strongly preferred • Experience in a medical device company and/or supporting FDA submissions • Experience with ISO 27001, ISO 27701, CCPA, or other international security/privacy frameworks • Background in managing phishing simulation programs and employee training initiatives • Familiarity with SaaS-specific compliance challenges and customer-facing security requirements • Experience with Google Workspace administration and IT helpdesk/ticketing workflows • Comfort operating as a one-person or small-team IT function in a high-growth environment

🏖️ Avantages

• Competitive Benefit and Compensation Offerings • Ongoing Training and Development Opportunities • Unaccrued, Flexible PTO • Remote Work