SUPPORTING GOVERNANCE, RISK AND COMPLIANCE EFFORTS TO PROTECT OUR EMPLOYEES AND CUSTOMERS

Sisense is the unified, collaborative data platform for professional data teams. We help thousands of data teams tackle increasingly complex data challenges, from ETL through to predictive analytics.

Our expectations for ourselves are ever increasing, and we're looking for someone to help us along that journey. If you love creating delightful user experiences for technical and non-technical users and delivering company-changing outcomes, this role is for you!

You will help lead the effort to constantly improve the security of Sisense's architecture, production systems, and corporate infrastructure. Assist in maintaining our current ISO 27001 and SOC 2 certifications and planning for the roadmap ahead to provide greater confidence and assurance to our customers. You will help maintain and analyze the overall security policies, risk register and implementation at Sisense. 

WHY YOU SHOULD JOIN OUR INFORMATION SECURITY TEAM:

Customers trust us with their most important data. They use Sisense to query everything from revenue metrics to the personally identifiable information of their users. 

You'll be expected to design and deploy solutions that are both highly secure and highly functional while moving at the speed of the business. Enabling everyone at Sisense to keep moving fast while continuously increasing the strength of our security may be your greatest challenge. While some capabilities are already in place that will need to be learned and maintained, there will be a need to introduce new emerging security solutions to proactively and reactively protect our employees and customers. 

HOW YOU'LL RAMP

Within your first 30 days you'll…

• Partner with the Risk & Compliance Senior Manager to understand the organizational mission, needs and defining the appropriate risk-based security initiatives.
• Spend time with the Security Team to get up-to-speed on our technology stacks and current security controls.
• Review existing third party relationships and process for vendor due diligence.
• Learn about the audit process of Sisense, controls and cycle.

By Day 30, you'll...

• Have a solid fundamental understanding of our products, people, processes and technologies.
• Maintain vendor due diligence and strategy process along with effective monitoring of security postures of key third parties.
• Contribute to the ongoing awareness and education activities of evolving security processes and capabilities.
• Help test, inquire, conduct observations and other analysis required to meet audit and assessment objectives.

By Day 60, you'll…

• Identify a new training and socialize the content with the team.
• Take ownership of the phishing program and ensure that appropriate process is in place for the targeted security control.
• Evaluate and document internal controls, assist with internal security reviews, and working with internal teams to address compliance and audit issues.
• Prepare, validate and maintain security documentation as needed.

By Day 90, you'll...

• Have rolled out a new annually required training
• Support continuous monitoring of security systems and tools to better automate the identification of security issues.
• Participate in compliance audits in a supporting role.
• Work with key stakeholders to ensure compliance of Sisense internal procedures (SOC2, HIPAA, ISO, GDPR).
• Promote a security-first culture and ensure that all employees at Sisense are able to protect Sisense from threats.

WHAT YOU HAVE AND ACCOMPLISHED SO FAR:

• Experience working as a security engineer, compliance analyst or vendor management specialist.
• Knowledge in Information Security best practices.
• Hands-on experience in contract management, security reviews and deploying security awareness training.
• Exposure to penetration testing and ethical hacking practices.
• Ability to triage new vulnerabilities and apply threat modeling to understand implications to specific organizations.
• Understanding of various security processes (access management, incident management, data security, etc.).
• Security certifications are a plus: CISSP, CISM, CISA, etc.

If you learn quickly and have that get-stuff-done attitude, we'd love to talk to you!