Job Description
OUR MISSION
At Torch, we believe in the power of people. People are the heart of every success story. They collaborate to achieve ambitious things together. And they inspire others to build a better future.Â
Â
That’s why our mission at Torch is to unlock the potential of people, teams, and organizations. We believe that trusted relationships are the key to helping people realize their full potential. When people experience transformational growth in the context of a trusted relationship, they achieve more, their teams excel, and their organizations thrive.
Â
By combining a community of expert coaches, scalable technology, and the latest behavioral science, Torch helps our customers develop their people, create stronger leaders and managers, and drive business performance.Â
Â
Backed by top-tier investors, Torch is a fast-growing, mission-driven SaaS startup comprised of people who are passionate about helping leaders, their teams, and their organizations achieve more. If that sounds worthwhile to you, join us. Torch is a remote and distributed team with an office in San Francisco. The rest of the team is scattered around the U.S.
Â
OUR VALUES
All Torch employees are expected to reflect and enhance our company values, GROW:
Â
Go deep: We study the science, learn from the best practitioners, and dig in with customers to solve their unique needs.
Â
Relationships matter: We lean into relationships with empathy to create more meaningful connections and more meaningful impact.
Â
Own it: We take responsibility for our commitments, our contributions, our results and for the success of those around us.
Â
Win together: We believe that happiness and fulfillment at work comes from shared success and value.
Â
Sprint Forward: We prioritize, sprint, adjust, and then sprint again.
Â
ABOUT THE JOB
We are seeking a highly skilled and motivated Principal Information Security Specialist to join our team. In this role, you will be responsible for planning and designing security solutions that align with business objectives and comply with applicable regulatory requirements and our organization's policies. As a Security Specialist, you will collaborate with cross-functional teams to assess risks, identify vulnerabilities, and recommend effective security controls and mitigation strategies. Your contributions will play a vital role in safeguarding our organization's sensitive data and maintaining a robust security posture in an ever-evolving cloud landscape. We are looking for an exceptional hands-on leader and communicator who builds credibility and trust amongst internal teams as well as with Torch's customers.
Â
This position will be reporting to the CTO.
YOUR POSITION
- Develop, implement, and enforce information security policies, procedures, and standards to mitigate risks and ensure compliance with industry regulations and best practices.
- Identify, assess, and manage security risks across the organization. This includes conducting risk assessments, establishing risk management frameworks, and ensuring the organization's risk tolerance aligns with its business goals.
- Apply in-depth, hands-on knowledge of the FedRAMP regulations, process, and requirements to lead Torch’s FedRAMP certification.
- Review and prioritize security vulnerabilities from various sources, including vulnerability scanning tools, penetration test reports, and threat intelligence feeds. Recommend solutions to the engineering teams to address and remediate identified vulnerabilities.
- Implement and maintain security tools and technologies, like firewalls and intrusion detection systems.Â
- Lead the incident response team in the event of security breaches or incidents. Develop incident response plans, coordinate responses, and ensure timely resolution while minimizing damage.
- Develop and deliver cybersecurity and privacy training and awareness programs for employees.Â
- Collaborate with Engineering and other departments to integrate security best practices.
- Evaluate and manage the security risks associated with third-party vendors and partners. Ensure that vendors adhere to Torch’s security and compliance requirements.
- Develop standards and practices for data anonymization, encryption and tokenization in the organization, based on the organization's data classification criteria.
- Collaborate with auditors to maintain certifications such as ISO 27001, SOC 2 Type 2, Data Privacy Framework Certification, compliance with GDPR etc.
- Engage in Sales calls to communicate the organization's security capabilities, policies, and procedures to clients.
YOUR EXPERIENCE
- 15+ years of experience in cybersecurity, minimum 5 years working in Security Compliance.
- Led the pursuit of, or maintained a FedRAMP Moderate+ Authorization.
- In-depth understanding of industry standards, frameworks, and regulations related to cybersecurity and privacy (FedRAMP, NIST, SOC2, ISO, GDPR etc.).
- Experience with artificial intelligence (AI) and machine learning (ML) related security and privacy risk management.
- Proven expertise in cloud systems (preferably AWS), container-based systems like Docker and Kubernetes, and automation/scripting tools for security automation (PowerShell, Python, Bash, etc.)Â
- Experience with a range of security technologies, processes, and tooling around vulnerability management, patch management, firewalling, networking including IAM, SIEM/SOC, IDS/IPS, DLP.
- Exceptional leadership and communication skills, with the ability to champion a culture of security across all levels of the organization.
- Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
INTERVIEW PROCESS - consists of the following
- Technical Interview with the CTO (60 minutes), Head of Platform Engineering (60 minutes) and a Principal Engineer (60 minutes).
- Leadership/Cultural Fit Interview with the COO (60 minutes).
- Take-Home Exercise: Candidates will be required to complete a 60-minute Security and Privacy solution design presentation. While the presentation is expected to take 60 minutes, candidates should allocate approximately 2-4 hours for preparation.
BENEFITS
- Health Insurance (medical, dental, and vision)
- Unlimited PTO
- 401k Retirement Plan
- Life & Disability Insurance
- Paid Parental Leave
- Torch Coaching
- Remote Workstation Stipend
Torch ensures equal employment opportunity without discrimination or harassment based on race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, age, disability, national origin, marital or domestic/civil partnership status, genetic information, citizenship status, veteran status, or any other characteristic protected by law.
Apply Now
Back to Job Listings
Add To Job List
Company Profile
View Company Reviews
Date Posted
05/04/2024
Views
4
Positive
Subjectivity Score: 0.9
Similar Jobs
Engineering Manager - Software Supply Chain Security: Auth Infrastructure - GitLab
Views in the last 30 days - 0
This job description highlights a leadership role in developing secure scalable authentication infrastructure for GitLab It emphasizes technical exper...
View DetailsBilling Coordinator III (Billing Specialist Subsidiary) - labcorp
Views in the last 30 days - 0
Labcorp seeks a Billing Specialist to manage insurance appeals and revenue cycles emphasizing collaboration and innovation The role offers remote work...
View DetailsStaff Salesforce Engineer - CRM Systems - GitLab
Views in the last 30 days - 0
This job description outlines a Staff Salesforce Developer role focusing on designing building and scaling enterprisegrade solutions across Salesforce...
View DetailsGrowth Product Lead - Loyalty - Trafilea
Views in the last 30 days - 0
Trafilea promotes itself as a transformative consumer tech platform with AIdriven growth solutions highlighting achievements like 1B revenue and globa...
View DetailsSales Prospecting Account Executive - Financial Solutions - Blackbaud
Views in the last 30 days - 0
This job posting seeks Prospect Account Executives to sell Financial Management applications for nonprofits and governments Responsibilities include s...
View DetailsSolutions Architect - phData
Views in the last 30 days - 0
This job posting seeks a Solutions Architect to join phDatas Elastic Platform Operations team focusing on cloudnative data platforms like Snowflake AW...
View Details