Senior Information Security Analyst

Job not on LinkedIn

🔥 3 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Bonterra

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🤝 B2B

🤝 Non-profit

🌍 Social Impact

B2B • Non-profit • Social Impact

Bonterra is a company that provides purpose-built software solutions designed to enhance the impact and efficiency of nonprofits, corporations, foundations, and public agencies. Their products include tools for corporate social responsibility, strategic philanthropy, employee engagement, grants management, case management, and fundraising. Bonterra empowers organizations with the software, coaching, and expertise needed to maximize their social impact and streamline their operations. The company focuses on serving changemakers aiming to improve social good, expand their supporter base, and achieve greater community outcomes.

📋 Description

• Prepares for and facilitates examinations by qualified security assessors for frameworks such as SOC, ISO 27001, and PCI-DSS. • Works closely with other members of the Information Security, Risk, & Compliance team. • Gathers and synthesizes data; presents conclusions; and offers risk mitigation, remediation and process improvement solutions to management. • Works closely with control owners across the company and internal and external auditors to ensure requests are completed in a timely manner. • Identifies potential business risks, operational and regulatory process deficiencies and improvement opportunities. • Communicates risk findings and recommendations that are clear and actionable to all stakeholders. • Performs technical risk assessments of third party suppliers' security and privacy controls. • Maintains register of relevant suppliers/vendors, controls, and risks for ongoing vendor risk management activities. • Assists in the initial triage of compliance, risk and security requests in the ticket management system to ensure efficiency and prioritization. • Assists in maintaining our overall security awareness, role-based security trainings and phishing simulation programs across the enterprise. • Assists in conducting user activity audits where required.

🎯 Requirements

• 6+ years’ experience performing risk and compliance activities or open to less years with addition of relevant course work/degrees • Excellent organizational, planning and time management skills • Excellent research and analytical skills • Excellent verbal and written communication skills • Ability to exercise good judgement and tact in dealing with Bonterra senior management. • Proficient with technology and ability to learn our software systems, including GRC, ticketing and project management software and workflows. • Proven track record of proactively identifying needs and implementing solutions. • May hold one or more information systems security professional certifications (CRISC, CISA, CISSP, CISM, GSEC, GCFA, GCTI, CCSP, or other relevant Information Security certifications).

🏖️ Benefits

• Comprehensive benefits package that supports your health, well-being and growth • Bonuses, incentives, equity, and a comprehensive benefits program