Description

Manage information security and data privacy responses for prospective customers while ensuring contractual and regulatory compliance.

Responsibilities

• Respond to RFx requests and security questionnaires including NIST, CAIQ, SIG, and OneTrust.
• Review customer and vendor contractual documents such as MSA, SOW, DPA, and SCC to ensure compliance with security and privacy requirements.
• Collaborate with Engineering, DevOps, and IT to gather artifacts for security risk questionnaires and audits.
• Conduct Privacy Impact Assessments (PIA), Data Transfer Impact Assessments, and develop Data Flow Diagrams.
• Maintain an up-to-date RFx response library and supporting artifacts in a central repository.

Required Skills

• 5+ years of experience in a SaaS product company in customer-facing security roles.
• Strong knowledge of cloud security (AWS, Azure) and modern architectures like microservices and containers.
• Hands-on experience with ISO 27001, SOC 2, NIST 800-53, FedRAMP, and GDPR.
• Expertise in application security, secure SDLC, and Linux/Ubuntu environments.
• Proven ability to map client security requirements to organizational policies.
• Experience performing third-party security assessments and due diligence.
• Active CISSP, CISA, CIPP, or CRISC certification.
• Ability to communicate technical security risks to both technical and executive audiences.

Preferred Skills

• Experience with CSA CCM and HIPAA compliance frameworks.
• Knowledge of multi-cloud architecture security.

Key Skills

Education

ANY GRADUATE