Senior Security Assurance Analyst
NewInactive
A
AirbnbInformation security
Location: United States; This position is US - Remote Eligible.Full-TimeSenior
This job is no longer active. We keep the page for reference, but the employer may not accept new applications.
Salary179,000 - 210,000 USD per year
Job Details
- Experience
- 6+ Years of hands-on experience in Information Security Assurance, Governance, Risk and Compliance
- Required Skills
- AWS
Requirements
- Bring 6+ years of hands-on experience in Information Security Assurance, Governance, Risk and Compliance.
- Have deep understanding and working experience with PCI DSS, SOX, DORA, and DFS 500.
- Understand security foundations well enough to respond to partner security posture questionnaires.
- Develop and implement security controls and information security policies.
- Use a risk-based approach to evaluate security weaknesses.
- Communicate security controls and business impacts across stakeholders.
- Have experience streamlining compliance processes, automating manual workflows, and managing audit readiness.
- Understand cybersecurity frameworks and standards including NIST, ISO 27001, SOC 2, and PCI DSS.
- Work independently and collaborate with cross-functional teams, executive management, and external stakeholders.
- Hold a bachelor’s degree in Computer Science, Information Systems, or a related degree; a master’s degree is preferred.
- Experience with AWS, GitHub, Asana, and microservices is preferred.
Responsibilities
- Participate in building a comprehensive compliance program for frameworks such as PCI.
- Address security posture-related questionnaires for ongoing compliance initiatives.
- Collaborate with internal and external auditors on Test of Design and Test of Effectiveness processes.
- Work with stakeholders to understand operational needs and provide risk-based remediation recommendations.
- Monitor remediation activities and build metrics and reports on testing and remediation results.
- Streamline compliance processes, automate manual workflows, and manage audit readiness.