Compliance Internal Audit
Poland (Remote)
Applications have closed
LivePerson
LivePerson's Conversational AI platform helps brands embrace digital-first customer conversations for better scale, engagement, and results.LivePerson (NASDAQ: LPSN) is the global leader in enterprise conversations. Hundreds of the world’s leading brands — including HSBC, Chipotle, and Virgin Media — use our award-winning Conversational Cloud platform to connect with millions of consumers. We power nearly a billion conversational interactions every month, providing a uniquely rich data set and safety tools to unlock the power of Conversational AI for better customer experiences.
At LivePerson, we foster an inclusive workplace culture that encourages meaningful connection, collaboration, and innovation. Everyone is invited to ask questions, actively seek new ways to achieve success, nd reach their full potential. We are continually looking for ways to improve our products and make things better. This means spotting opportunities, solving ambiguities, and seeking effective solutions to the problems our customers care about.
Overview:
A Compliance Internal Auditor at LivePerson is responsible for the assessing, documenting and communicating of LivePerson’s compliance and risk posture as they relate to its information assets. The purpose of this position is to provide skilled information security and compliance expertise for development, support and implementation of the information security risk management program, with a focus on managing outside audits and assessments.
Responsibilities require project management experience, as well as expertise to ensure effective system-wide security analysis; compliance; standards and testing; risk assessment; awareness and education; and development of policies, standards and guidelines. Our Compliance team reports to the Compliance Leadership and are a part of LivePerson’s highly talented and Global Information Security team.
You will:
Duties and Responsibilities:
Compliance
- Coordinate with the necessary LivePerson teams on the system-wide information security compliance program, ensuring IT activities, processes, and procedures meet defined requirements, policies and regulations.
- Execute strategy for managing an increasing number of audits, compliance checks and assessment processes for internal/external auditors. These currently include but are not limited to: PCI DSS, HITRUST, SOC 2, ISO27001, NIST 800-171 and LivePerson continues to add additional certification frameworks.
Audit
- Partner with Internal Audit, Audit Partners, brands, Assessors and outside consultants as appropriate on required security assessments, audits and certifications.
- Manage all information technology and security related audits including scope of audits, timelines, resource scheduling, auditing agencies and reporting.
- Maintain excellent relationships with audit entities and business partners, and provide a consistent perspective that continually puts LivePerson into the best security posture possible.
- Provide guidance, evaluation and advocacy for all audit responses.
Communications:
- Analysts must demonstrate both oral and written communication skills to be used with all levels of management, across various business units, and both internally and externally, with an ability to express information security concepts in simplified terms.
- Manage and maintain Compliance central information repository, communication channels and policy documentations.
Leadership
- Operate with a high degree of independence with regard to project management activities, including development of project plans, customer meetings and audit sessions.
- Provide leadership to the other compliance analysts/coordinators.
- Perform other duties as assigned to ensure the smooth functioning of the department and maintain the reputation of LivePerson as a valued business partner to its customers.
Problem-Solving Skills
- Must be able to assess the status of complex multi-location projects as well as identify and implement appropriate corrective measures to resolve issues as they arise.
- Must have a strong customer service orientation and the ability to exude that attitude to customers in remote locations.
You have:
Knowledge, Skills, and Abilities
Required Qualifications
- Minimum of 5 years experience in managing compliance audits, assessments and certifications with a risk based approach.
- Knowledge of information security risk management frameworks and compliance practices (e.g., PCI DSS, HITRUST, SOC 2, ISO27001, NIST 800-171 etc.).
- Excellent interpersonal communication, and presentation skills, including formal report writing experience for all levels of management.
- Adept at understanding business focus and processes with the ability to inject Compliance/Security concepts into the business through teamwork and influence
- Exceptional oral and written communication skills to be used with all levels of management, across various business units, and both internally and externally, with an ability to express information security concepts in simplified terms.
- Operate with a high degree of independence with regard to project management activities, including development of project plans, customer meetings and audit sessions.
- Candidates must be willing to undergo background checks to verify their identity, character, qualifications, skills and experience.
Preferred Qualifications
- Experience in a SaaS environment
- College degree in Information Technology, Computer Science or a related field or equivalent experience
- Advanced security qualifications such as CISSP, CRISC, CISM, GIAC, CDPSE or CIPM or equivalent experience
Benefits:
- Health: medical, dental, and vision
- Time away: vacation and holidays
- Development: Generous tuition reimbursement and access to internal professional development resources
- Equal opportunity employer
- #LI-Remote
Why you’ll love working here:
As leaders in enterprise customer conversations, we celebrate diversity, empowering our team to forge impactful conversations globally. LivePerson is a place where uniqueness is embraced, growth is constant, and everyone is empowered to create their own success. And, we're very proud to have earned recognition from Fast Company, Newsweek, and BuiltIn for being a top innovative, beloved, and remote-friendly workplace.
Belonging at LivePerson:
We are proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants with criminal histories, consistent with applicable federal, state, and local law.
We are committed to the accessibility needs of applicants and employees. We provide reasonable accommodations to job applicants with physical or mental disabilities. Applicants with a disability who require reasonable accommodation for any part of the application or hiring process should inform their recruiting contact upon initial connection.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Audits CISM CISSP Cloud Compliance Computer Science CRISC GIAC HITRUST ISO 27001 NIST PCI DSS Risk assessment Risk management SaaS Security analysis Security assessment SOC SOC 2 Strategy
Perks/benefits: Career development Health care Medical leave Startup environment
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Information Security Specialist jobs
- Open Senior Cyber Security Engineer jobs
- Open Ethical hacker / Pentester H/F jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Principal Security Engineer jobs
- Open Cyber Security Architect jobs
- Open Manager Pentest H/F jobs
- Open Product Security Engineer jobs
- Open Staff Security Engineer jobs
- Open Cyber Security Specialist jobs
- Open Senior Information Security Analyst jobs
- Open Cybersecurity Analyst jobs
- Open Chief Information Security Officer jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open IT Security Analyst jobs
- Open Consultant SOC / CERT H/F jobs
- Open Cybersecurity Consultant jobs
- Open Senior Information Security Engineer jobs
- Open Security Specialist jobs
- Open Senior Penetration Tester jobs
- Open Senior Security Architect jobs
- Open Cybersecurity Specialist jobs
- Open Security Researcher jobs
- Open IT Security Engineer jobs
- Open Sr. Security Engineer jobs
- Open CISM-related jobs
- Open Windows-related jobs
- Open Network security-related jobs
- Open ISO 27001-related jobs
- Open Pentesting-related jobs
- Open Application security-related jobs
- Open Agile-related jobs
- Open GCP-related jobs
- Open Vulnerability management-related jobs
- Open CISA-related jobs
- Open SaaS-related jobs
- Open Analytics-related jobs
- Open Threat intelligence-related jobs
- Open IAM-related jobs
- Open APIs-related jobs
- Open Security assessment-related jobs
- Open Java-related jobs
- Open Malware-related jobs
- Open Security Clearance-related jobs
- Open DevOps-related jobs
- Open IDS-related jobs
- Open Forensics-related jobs
- Open CEH-related jobs
- Open EDR-related jobs
- Open Kubernetes-related jobs