Security Compliance Specialist

We are seeking an experienced Security Compliance Specialist to join our growing team. In this role, you will be responsible for collaborating with teams across our company, to gather the necessary requirements for implementing a comprehensive security plan and ensure that the organization meets all of the security requirements to prevent cyber-attacks and data breaches.

WHAT YOU WILL DO

• Become fully conversant in our current security posture and existing security controls
• Assist in the development and implementation of an effective security compliance program
• Assist in designing, creating, and maintaining information security policies, standards, guidelines, and procedures
• Collaborate with cross-functional teams to assess and mitigate security risks, including conducting risk assessments and tracking corrective actions to completion
• Assist in developing, reviewing, and maintaining minimum security and privacy controls required to protect Ava Labs' data and information systems
• Monitor the effectiveness of security and privacy controls over data and information systems that support Ava Labs' operations
• Operate security compliance tooling to support the security compliance program and execute periodic control activities
• Conduct third-party security due diligence activities and support Ava Labs' vendor risk management program
• Assist in responding to incoming security assessments, questionnaires, and other due diligence requests from potential customers and third-party business partners
• Assist in coordinating and responding to internal and external IT audits, including walkthroughs, evidence gathering, and drafting of management responses

WHAT YOU WILL BRING

• 3-7 years of experience within financial sector security governance, risk, and compliance in a cloud-based, agile environment (blockchain a plus)
• Strong familiarity with risk management and security control frameworks such as ISO/IEC 27001, NIST 800-53, and SOC 2, as well as data privacy regulations
• Experience with the implementation and/or operation of an Information Security Management System (ISMS) in accordance with ISO 27001
• Ability to communicate information security and risk topics effectively to technical and non-technical audiences
• Strong analytical skills and ability to conduct exploratory assessments related to sensitive data processing and business-critical processes
• Awareness of the evolving regulatory landscape within the blockchain industry
• Strong writing, verbal, and interpersonal communication skills
• Strong attention to detail and the ability to produce high-quality work independently within a distributed environment.
• CISSP, CRISC, or CISA certified desirable.

Base Salary Range: $114,400 - $143,200

(**This is not a guarantee of compensation or salary, a final offer amount may vary based on factors including but not limited to experience and geographic location.)

#LI-Remote #LI-BA1