Support Engineer - Risk & Compliance Analyst

At Securonix, we’reon a mission to secure the world by staying ahead of cyber threats, reinforcing all layers of our platform with AI capabilities. OurSecuronix Unified Defense SIEMprovides organizations with the first and only AI-Reinforced solution built with a cybersecurity mesh architecture on a highly scalable data cloud. Enhanced by Securonix EON’s AI capabilities, our innovative cloud-native solution delivers a seamless CyberOpsexperience, empowering organizations to scale their security operations and keep up with evolving threats.

Recognized as afive-time leaderin the Gartner Magic Quadrant for SIEMand highly rated on Gartner Peer Insights, our award-winning Unified Defense SIEM provides organizations with 365 daysof ‘hot’ data for rapid search and investigation, threat content-as-a-service, proactive defense through continuous peer and partner collaboration, and a fully integrated Threat Detection, Investigation, and Response (TDIR)experience-all within a single platform. Built on a cloud-native architecture, the platform leveragesthe Snowflake Data Cloud for unparalleled scalability and performance.

Securonix is proud to be a cybersecurity unicorn and featured inCRN's 2024 Security 100 list.Backed by Vista Equity Partners, one of the largest private equity firms with over $100 billionin assets under management, we have a unique advantage in driving innovation and growth. With a global footprint, we serve more than1,000 customers

worldwide, including 10% of the Fortune 100.Our network of 150+ partnersand Managed Security Service Providers (MSSPs) enables us to deliver unmatched security solutions on a global scale.

At Securonix, we are driven by our core values and place our people at the heart of everything we do:

• Winning as One Team:We work together with universal respect to achieve aligned outcomes

• Customer Driven Innovation:We innovate to stay ahead of the market and create value for our customers

• Agility in Action:We embrace change and are unified in our purpose and objectivesamidst change

Join us as we redefine cybersecurity, innovate fearlessly, and grow together as one team.

The Support Engineer - Risk and Compliance will be responsible for ensuring that compliance with regulatory and industry mandates that include SOC 2, ISO 27001, ISO 42001, HITRUST, PCI, and others are maintained. Reporting to the Manager of Information Security Risk & Compliance, this rolewill be responsible for executing control self-assessments, creating,and maintaining policy documentation, assistingin maintainingthe risk register and overall maintenance of the organization’s compliance posture

Essential Functions of the Job:

• Conduct controlsassessments to identifyand assess Information Security risks within theSecuronix IT environment.

  Ensure that control self-assessments are conducted in a timely mannerensuring completeness and accuracy

• Co-ordinate with auditors and internal stakeholders for audit evidence gathering.

• Conduct risk assessments and vendor risk reviews andmaintain documentation of risks in the GRC tool.

• Ensure that appropriate documentationin the form of policies, standards and procedures is created and managed to support the various security, compliance,and audit requirements.

• Work with other teams in the IT org to establishstandards and process for maintainingand improving the organization’s security posture

• Assistin continuous improvement and maturing the Information Security GRC program

Additional Job Functions:

• Maintainthe risk register with up-to-date risk details, and track risk response plans(remediation/exceptions) to closure

• Performauditsand assessmentsof third parties such as vendors, service

  providers, and consulting

  organizations as required.

• Work closely with Technology and Security teams to develop appropriate remediationaction plans for identifiedrisks.

Knowledge and Skill Requirements:

• Demonstrated experience in performing risk assessmentsand control reviewsagainstcompliance frameworks such as COSO, COBIT, NIST, ISO 27001, etc.

• Understanding of IT General Controls in relation to SOC 2, ISO 27001, ISO 42001 and other compliance frameworks.

• Familiarity with IT and Information Security processessuch as identity and access management, vulnerability management, encryption and key management, logging and monitoring and application securityis desirable.

• Familiarity with cloud and SaaS-based environments and technologies with associated auditing methodologiesis desirable

• Bachelor’s / Master’sdegree in a computer or information management field or similar work experience.

• Relevant certifications likeCISSP, CISA, CRISC, ISO 27001 - Lead Auditor/Lead Implementer

  desirable, but not mandatory

• Strong attention to detail, influencing,and problem resolution skills.

• 2+ years’ experiencein Information Security - IT audit and/or IT Risk & Complianceroles

Benefits:

As a full-time employee with Securonix, you will be eligible for the following employee benefits:

• Health Insurance with a total sum insured is INR 7,50,000

• Coverage: Self, Spouse, 2 kids, Dependent parents, or parents-in-law

• Personal Accident with total sum insured is INR 10,00,000

• Term Life Insurance with a sum assured for employees is 5 times fixed base pay is covered.

Securonix providesequal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, amnestyor status as a covered veteran in accordance withapplicable federal, stateand local laws. Securonix complies withapplicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including hiring, placement, promotion, termination, layoff, recall, and transfer, leaves of absence, compensationand training.