USASenior Analyst, Information Security Risk and Compliance
5 дн. назад
USASeniorRemote
Responsible for information security risk and compliance analysis enhancing ITGCs and automation.
О компании
- With electric vehicles expected to be nearly 30% of new vehicle sales by 2025 and more than 50% by 2040, electric mobility is becoming a reality. (NYSE: CHPT) is at the center of this revolution, powering one of the world’s leading EV charging networks and a comprehensive set of hardware, software and mobile solutions for every charging need across North America and Europe. We bring together drivers, businesses, automakers, policymakers, utilities and other stakeholders to make e-mobility a global reality.
- Since our founding in 2007, has focused solely on making the transition to electric easy for businesses, fleets and drivers. offers a once-in-a-lifetime opportunity to create an all-electric future and a trillion-dollar market.
- At , we foster a positive and productive work environment by committing to live our values of Be Courageous, Charge Together, Love our Customers, Operate with Openness, and Relentlessly Pursue Awesome. These values guide how we show up every day, align, and work together to build a brighter future for all of us.
- Join the team that is building the EV charging industry and make your mark on how people and goods will get everywhere they need to go, in any context, for generations to come.
Обязанности
- is looking for a Senior Analyst, Information Security Risk and Compliance, who will enhance ITGCs and automate processes for efficient and mature Governance, Risk and Compliance program, while maintaining compliance with SOX, Fedramp, PCI and other standards and frameworks, such as ISO 27001, SOC2, and NIST 800-53 as needed based on customer or other needs.
- Great opportunity to continue building our GRC program while adding innovation and streamlining compliance efforts. The individual will possess deep IT and Information Security audit, compliance and risk management knowledge and use of automated tools and techniques to build into projects and assessments.
Требования
- Bachelor’s degree in General Business, Information Systems, Engineering, Science or a related field and with a minimum of 5 years’ relevant experience
- 8+ years of internal controls and risk management experience including working with ITGC SOX, SOC 1/2/3, or IT Internal Audit activities and programs to support compliance efforts
- Good knowledge of Sarbanes-Oxley, NIST 800-53, Fedramp, ISO 27001, NIST CSF and commonalities across frameworks and standards
- Solution-oriented mindset and risk-based approach to identifying, evaluating and addressing critical compliance risks, operational technology risks and the relevant business and governance processes
- Experience working with and managing both internal and external auditors
- Familiarity with SAAS-based applications, such as NetSuite, Workday, Salesforce, Github, and infrastructure providers – AWS, Google Cloud from IT controls perspective and ability to understand in-house developed systems and CI/CD development processes
- Good written and verbal communication skills with the ability to influence broad range of stakeholders (Engineering, IT, Legal, Auditors, Product, Finance, etc.) and report policy and compliance results and risks
- Excellent organizational skills
Другое
- Senior Manager, Security Risk and Compliance
- Introduce innovative, differentiating capabilities that enhance our overall GRC program and align risk strategies with business priorities, including collaborating with the team for operationalizing the common control framework approach to achieve our various compliance needs
- Enhance internal processes, policies and programs by incorporating AI or other automation to streamline compliance efforts while ensuring compliance requirements are maintained
- Provide leadership to internal functions in the application, maintenance and improvement of access management, change management and operational procedures and department specific processes for both current and future IT systems that come into scope
- Establish credibility and maintain a strong working relationship with key stakeholders across the business, internal and external auditors to understand their current and planned activities that impact ITGC SOX, FedRamp, and PCI
- Partner with control owners and operators to validate the completeness and accuracy of ITGC control execution, ensuring ITGC’s are designed, documentation and teams are audit-ready, and controls executed and monitored effectively
- Build reporting to track and monitor overall GRC and other security project status as needed for monthly and quarterly reporting to senior management
- Remote
-
- We are committed to an inclusive and diverse team. is an equal opportunity employer. We do not discriminate based on race, color, ethnicity, ancestry, national origin, religion, sex, gender, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status or any legally protected status.
- If there is a match between your experiences/skills and the Company needs, we will contact you directly.
- is committed to fostering an inclusive workplace that welcomes and supports all qualified individuals. In alignment with this commitment, we ensure that persons with disabilities are provided with reasonable accommodations throughout the employment process.
- If you need a reasonable accommodation to participate in the application or interview process, to perform essential job functions, or to access any other benefits and privileges of employment, please contact us at accommodations@.com .
- is an equal opportunity employer. Applicants only - Recruiting agencies do not contact.