Information Security Analyst

Position Summary

The Information Security Analyst is a position responsible for implementing and managing controls in support of internal and external requirements for information security and privacy while also playing a role in risk management, governance, and more. This individual will report directly to the Information Security Director.

You will play a vital role in implementing or enhancing controls in new and existing products and demonstrating our competence in security and privacy management. In traditional security parlance, this role supports the “Governance, Risk, and Compliance” aspects of Information Security.

The Information Security Analyst must be familiar with industry best practices and feel comfortable advising management on the security and privacy implications of business decisions on our organization, people, infrastructure, and products.

You must be able to collaborate with technical and non-technical staff across the entire breadth of the company and act as an interface to colleagues on implementation of company-wide security and privacy solutions.

If you’re a self-starter who wants to make a difference in a rapidly growing, world-class, cloud-native provider of an innovative cybersecurity software-as-a-service solution, we want you on board.

What you’ll bring:

• 2+ years experience supporting process and system owners in the design, implementation, and monitoring of security and privacy controls
• Experience leading efforts to demonstrate the efficacy of controls to external parties such as auditors or customers
• Experience with information security standards and frameworks such as ISO 27001, SOC 2, and similar
• Knowledge and awareness of recent developments in the security and privacy industry such as new vulnerabilities, best practices, and regulations
• Excellent written and verbal communication skills
• Comfortable with investigating problems and researching solutions independently while understanding when to escalate and engage stakeholders as needed

Nice to have:

• Experience with privacy standards and regulations such as ISO 27018, ISO 27701, GDPR, and CCPA
• Strong IT background and in-depth understanding of cloud security
• Hands-on experience with the technical implementation of security and privacy controls in a cloud-native environment using AWS, Cloudflare, etc.
• Prior experience in the cybersecurity software-as-a-service market, or in a related industry
• Prior startup experience

• People: first and foremost they are our most valuable resource. Our people are independent thinkers who make data-driven decisions and take ownership and accountability in all the things they do.
• Team Work. We demonstrate respect, trust, integrity, and communicate openly with a positive can-do attitude, and constructively challenge one another
• Customer Focus. We empathize with our customers and obsess about solving their problems
• Execution with precision, professionalism, and urgency
• Security. It's the lens through which we implement our processes, procedures, and programs

Arose Labs is an Equal Opportunity Employer that makes employment decisions without regard to race, color, religious creed, national origin, ancestry, sex, pregnancy, sexual orientation, gender, gender identity, gender expression, age, mental or physical disability, medical condition, military or veteran status, citizenship, marital status, genetic information, or any other characteristic protected by applicable law. In addition, Arkose Labs will provide reasonable accommodations for qualified individuals with disabilities.