Senior Information Security Engineer

Sobre a vaga

We are looking for a Senior Information Security Engineer to join our growing Security Risk Management team. The role supports the day-to-day execution of risk identification, assessment, treatment, and reporting across Five9's infrastructure, services, and acquisitions.

O que vais fazer

• Identify, document, and assess security risks across Five9's environment, including production infrastructure, cloud services, corporate systems, and acquired platforms
• Maintain the Security Risk Register in Jira, ensuring risks are accurately categorized, assigned to appropriate owners, and tracked through their lifecycle
• Engage with service owners, engineering leads, and operations teams to establish risk ownership and drive remediation or mitigation plans
• Facilitate the risk acceptance process, including preparing risk acceptance documentation and coordinating approval with appropriate stakeholders
• Develop and deliver risk reporting for security leadership and executive audiences, including dashboards and metrics that communicate risk posture clearly
• Collaborate with compliance, vulnerability management, and other Information Security functions to ensure risk findings are incorporated into the broader security program
• Research and apply risk management frameworks and methodologies to continuously improve program maturity
• Contribute to the development of risk management policies, procedures, and playbooks

O que é pedido

• 3+ years of experience in information security, with at least 2 years focused on security risk management or GRC
• Demonstrated experience maintaining a security risk register and driving risk treatment decisions with cross-functional stakeholders
• Strong understanding of risk assessment methodologies (qualitative and quantitative)
• Familiarity with security frameworks such as NIST CSF, NIST 800-53, ISO 27001, PCI, or SOC 2
• Ability to communicate security risks clearly to both technical and non-technical audiences
• Experience with Jira or similar tools for tracking and managing risk workflows
• Self-directed and comfortable engaging directly with service owners, engineers, and leadership to resolve ambiguity around risk ownership
• This role is hybrid and requires 3 days a week in our Porto office

Valorizado

• Experience with cloud environments (GCP, AWS, or Azure), particularly assessing risks related to cloud architecture and services
• Familiarity with vulnerability management programs and how they feed into risk management
• Experience supporting compliance audits or regulatory assessments (ISO 27001, SOC 2, PCI DSS)
• Experience building or contributing to security metrics, KPI dashboards, or executive reporting
• Prior work in a SaaS or contact center / communications platform environment
• Hands-on experience using agentic coding tools (Cursor, Claude Code, Copilot, etc.) and a working knowledge of Python
• Professional certification in Information Security or Risk Management (such as CISSP, CISM, CISA, CRISC, etc.)

O que é oferecido

• Five9 Shares
• Bonus Scheme
• 10% Flex Benefit
• Meal Allowance
• Medical Insurance
• Life Insurance
• 25 day Annual Leave + Public Holidays

Resumo organizado por IA a partir do anúncio original. Confirma os detalhes no site da empresa.