About the role
As a senior member of security and compliance, you will oversee security operations administration and work closely with the company's CISO.
Responsibilities:
- Overall technology evaluation and selection to meet the agreed-upon security architecture requirements.
- Ownership and execution of incident and breach response.
- Manage the information security architecture to provide confidentiality, integrity, and availability to the company's sensitive data.
- Manage the security awareness and training program.
- Communicate information security policies and acceptable use guidance to system users.
- Maintain all Security Awareness and Acceptable Use and Access Authorization Request Forms in Avaamo's internal collaboration tools and HR files.
- Complete the Avaamo onboarding procedural process for each new Avaamo employee or contractor.
Requirements:
- Bachelor's degree in computer science, information security, or a related field; advanced degree or relevant certifications (e. g., CISSP, CCNP, AWS Certified Security - Specialty) preferred.
- 8+ years of experience in data protection and security architecture engineering, focusing on cloud technologies.
- Expert-level knowledge of compliance requirements for SOC 2, ISO 27001, NIST 800-171, CSA-STAR, and CCPA.
- Expert-level knowledge of healthcare-related compliance requirements like HIPAA and HITRUST.
- Experience working with customers on security incidents.
- Experience working with customers on data breach incidents.
- Experience managing vendors to conduct VAPT, network scanning, and white-hat hacking.
- Excellent communication and collaboration skills, with the ability to effectively convey technical concepts to technical and non-technical stakeholders.