Security and Compliance Analyst

As a Security and Compliance Analyst, you will help scale MNTN’s technology compliance program to accommodate the growing and evolving needs of our customers. This is a unique opportunity to advance our compliance program as our business grows. You will collaborate with people both inside and outside the organization, including department heads, engineers, and customers. This position will report to the Director of IT, Infrastructure and Operations and will work closely with partners across the organization, including Legal, Engineering, Sales, Platform Experience, and Human Resources.

You will:

• Maintain a deep understanding of our platform and its supporting infrastructure and processes, as well as how our compliance obligations apply to that environment.
• Provide responses to and maintain reference material for customer inquiries and due diligence procedures that involve technology compliance and participate in discussions for security and compliance assessments.
• Continuously confirm and refine MNTN’s internal control framework and related documentation (e.g., policies, procedures, narratives, training material), and contribute to ongoing controls development and improvement.

 You have:

• 5+ years of security or compliance analysis, or assurance/advisory experience, including building controls in the technology space.
• A thorough understanding of technical environments, and the ability to communicate with subject matter experts about technical and operational security controls.
• Experience mapping and rationalizing controls to meet requirements across multiple information security/technology compliance standards (e.g., ISO 27001, SOC 2, IT General Controls)
• Excellent written and verbal communication skills to communicate details of a security program to a wide spectrum of audiences, including customers.
• You have strong analytical skills and attention to detail.
• Flexible and have the ability to adapt to a changing environment.
• Self-directed and take initiative on projects and tasks, and in identifying gaps related to security controls, with minimal day-to-day oversight/direction.
• Knowledge of Amazon Web Services and Container technologies.
• CISA, CISM, CISSP, or related certification
• Experience using governance, risk management, and compliance (GRC) tools.