Senior GRC Analyst

This is a hybrid role. At Bluevine, we pride ourselves on our collaborative culture, which we believe is best maintained through in-person interactions and a vibrant office environment. All of our offices have reopened in accordance with local guidelines, and are following a hybrid model. In-office days will be determined by location and discipline.

ABOUT THE ROLE:

We are seeking an experienced individual to help lead the security governance, vendor security assurance and Security Compliance in Bluevine. As an Information Security Specialist you will be an important part of the security team, gaining valuable experience with designing and implementing secure integrations with 3rd parties in a rapidly evolving environment. Our team is always learning, sharing, and researching, and you will have the opportunity to work across all information security domains.

WHAT YOU'LL DO:

• Lead our 3rd party risk assessment program, assessing our vendors questionnaires, compliance and their attack surface
• Manage enterprise software information security (e.g. Salesforce, NetSuite etc.)
• Lead the Data Leak Prevention (DLP) program
• Take part of the company governance, regulations and compliance efforts
• Answer company prospects security questions and questionnaires supporting the company operations
• Recommend information security policies, standards and guidelines by evaluating the organization's outcomes, identifying problems, evaluating trends, and anticipating requirements
• Evaluate new technologies and processes that enhance security capabilities

WHAT WE LOOK FOR:

• Bachelor's degree in a related field or Equivalent experience
• Minimum - 5 years of experience in the Information Security field
• Must - Experience with security & privacy standards and regulations such as SOC 1, SOC 2, ISO 27001, GDPR, CCPA, etc.
• Must - Experience with Vendor Security Assessments (Conducting Security Audits or being directly audited)
• Must - Experience with CRM & ERP systems
• Must - Strong self-learning skills

Bonus points if you also have:

• At least 1 year of experience with Cloud IaaS services such as: AWS, Azure, GCP
• Experience with Vendor Management and Security Rating solutions
• Experience with large enterprise software infosec tools and methodologies
• Experienced with Incident Response, Vulnerability Management & Security Solutions
• Industry security certifications, relevant security educations or courses

New Hire Base Salary Range: $134,300 - $161,200