Information Security Audit Manager

The Role: You are a well–rounded IT Security professional with a strong working knowledge of Security and Compliance frameworks. You are comfortable managing and developing audited control objectives. You will be the point person for all Security and Compliance audits and will respond directly to Customers as needed. You will be responsible for understanding and supporting the design of SnapLogic's procedural and technological Security controls within the context of the Security Compliance frameworks with respect to the SnapLogic platform and Business Operations. You enjoy being a part of a team culture that empowers you to take ownership of your features and components. We are looking for exceptional, self–motivated individuals, eager to learn new and emerging technologies; share their learning, and exploit new Cloud offerings to the maximum benefit of our business and our customers. This role is a dedicated IT Security member for SnapLogic and will report to the Head of SnapLogic IT & Security. This role will be part of the SnapLogic Security Team and will work closely with all business units that are involved in our Security audits which includes Infrastructure Operations, IT, Engineering, HR, Legal, and Sales. You will be directly influencing our Security, Compliance and Privacy strategies. What You'll Do:

• Oversee Security compliance audits and work with cross–functional teams to collect evidence.
• Manage and develop audited internal controls in support of audited policies and procedures.
• Perform and document testing of those controls as well as championing recommendations for remediation.
• Define and track Security & Compliance audit lifecycle metrics.
• Assist daily ISEC tasks which will include Security RFIs, Vendor Management, Privacy DSR fulfillment, and support the SDLC program.
• Partner with key department stakeholders to align and collaborate on Security initiatives.

What We're Looking For:

• 1 – 3 years of experience managing Information Security and Compliance audits: SOC 2, ISO 27001, PCI, etc.
• 3 – 5 years of experience working in Information Security and Compliance.
• 3 – 5 years of experience working in Information Technology or Development Operations.
• Degree in Computer Science, Information Technology, or Information Security, Security+, or higher level certification such as CISSP, CASP+, GCED, GCIH, GCFA, CISA, CEH, etc.
• Advanced expertise with two or more of the following frameworks: SOC 2, OWASP, NIST, HIPAA, ISO 27001, PCI–DSS, FedRAMP, and Data Protection regulations.
• Advanced ability to Project Manage initiatives with minimal supervision.
• Ability to work closely with cross–functional stakeholders in a dynamic environment.
• Ability to communicate effectively to technical and non–technical teams externally and internally.

Ideal Candidates Will Have:

• Penetration Testing and Vulnerability scan analysis and remediation experience.
• Advanced knowledge of Identity Management and SSO integrations.
• Advanced knowledge of Cloud Security concepts.
• Advanced understanding of Network concepts and basic knowledge of standard Linux fundamentals.

Why Join: There's never been a better time to join SnapLogic. Here are a few reasons why: Perks And Benefits: The list includes, but is not limited to: competitive salary, flexible PTO (USA employees), comprehensive healthcare; 401(k); FSA and supplemental insurance; paid parental leave; wellness and fitness reimbursements. Company Momentum: Industry experts have consistently recognized our company, products, customers, and employees as best–in–class, from our year–over–year Leadership in Gartner's iPaaS Magic Quadrant, to our 2021 CODiE Award win, to our recognition as a 2022 Bay Area Top Workplace. Hot Market Opportunity: Leading organizations are embracing the cloud, data, and AI to rethink and rewire their businesses. According to industry analysts, the integration market alone is growing four times faster than the overall software market, approaching more than $5 billion in revenue. Innovative Product: SnapLogic is the only company to provide a single, unified platform for all of a company's integration and automation needs: application integration, data integration, API management, B2B integration, and data engineering. World Class Customers: Hundreds of customers around the globe trust SnapLogic to handle their enterprise integration and automation needs. Our customers come first, and we're proud of SnapLogic's industry–leading customer retention rate of over 95%. SnapLogic is headquartered in San Mateo, CA with offices in New York, NY; London, UK; and Hyderabad, India.