Security, Trust and Assurance Analyst

Say hello to possibilities.
It's not everyday that you consider starting a new career. We're RingCentral, and we're happy that someone as talented as you is considering this role.
First, a little about us, we're a global leader in cloud-based communications and collaboration software. We are fundamentally changing the nature of human interaction-giving people the freedom to connect powerfully and personally from anywhere, at any time, on any device.
We're a $2 billion company that's growing at 20+% annually and we're expanding our Product & Technology Team to make sure we stay ahead of the competition.
Responsibilities:

• Support Supply Chain and Third-Party Vendor Risk management program activities (work with questionnaires, monitor inventory of vendors, help with risk assessment activities).
• Help prepare Security Assurance materials for internal and external audiences, including maintaining our Security responses to customer questionnaires.
• Help prepare content for Security newsletter (as related to Security Trust and Assurance team) and related Security Trust and Assurance communications.
• Prepare regular metrics related to Trust and Assurance program activities, Compliance website developments and related work to present to upper management.
• Assist with evidence gathering for audits, update centralized GRC tool with audit performance and perform related compliance activity.
• Provide training to Sales, Solutions Engineering, RFP team and other teams on security topics and spread awareness.
• Enhance the documentation for the Information Security Management System (ISMS), maintain the development and communication of policies, procedures, and other documents regarding security and compliance best practices around applicable laws, regulations and controls.
• Assist Security Trust and Assurance team with other Compliance and Trust program tasks as required.

To succeed in this role you must have experience in:

• BS or equivalent degree in Computer Science or related field
• Minimum 2 years' experience in the field of Data Security, Risk Management, Security Engineering or Compliance Audits
• Knowledge of frameworks such as NIST CSF, ISO 27001, SOC2 trust principles and controls, CIS Critical Controls, etc.
• CISSP, ISO 27001 auditor/implementer, or PCI ISA/QSA certification. (If not certified, show interest to get certified within 6 months of hire)
• Excellent communications skills, both in writing and verbal
• Experience creating Security documentation (whitepapers, FAQs, etc.), along with the necessary technical writing and formatting capabilities.
• Intermediate-Advanced English language skills
• Strong knowledge of at least one of the compliance frameworks/controls library
• High attention to detail
• Experience in Security program management
• Strong knowledge of common security monitoring topics, encryption, vulnerability management, access management, risk management, and related operational topics & processes

The RingCentral CISO team is the engine that drives and helps implement security standards for RingCentral. By partnering closely with Product & Technology, we work with teams from Engineering to UX/UI to CloudOps, to help come up with the biggest ideas in secure cloud communications that are imagined, developed, and delivered. If there's a better way to bring people together, RingCentral is finding it, iterating on it, and sharing it with the world.
RingCentral surrounds you with world-class technology and talent, in a people-first environment built from the ground up to help you do the best work of your career. We're not just changing the nature of communication and teamwork. We're winning, together.
As part of the CISO team, you'll help define and drive the security standards, compliance, and disciplines required for complex, business-critical problems supported with elegant, user-friendly solutions that perform at massive scale. It's a once-in-a-career chance to get your hands on the latest-and-greatest technologies, and build the platform that's reshaping the way the world communicates.
About RingCentral
RingCentral, Inc. (NYSE: RNG) is a leading provider of business cloud communications and contact center solutions based on its powerful Message Video Phone™ (MVP™) global platform. More flexible and cost effective than legacy on-premises PBX and video conferencing systems that it replaces, RingCentral® empowers modern mobile and distributed workforces to communicate, collaborate, and connect via any mode, any device, and any location. RingCentral is headquartered in Belmont, California, and has offices around the world.
RingCentral is an equal opportunity employer that truly values diversity. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
#LI-BH1