Abnormal Security
Abnormal Security
Abnormal Security бизнеске арналған бұлттық электрондық пошта қауіпсіздігі шешімдерін әзірлейді. Оның технологиясы фишинг, зиянды бағдарлама, бопсалаушы бағдарлама, әлеуметтік инженерия және аккаунттарды басып алу сияқты қатерлерді анықтап, олардың алдын алуға көмектеседі. Компанияның өнімдері бизнеске арналған электрондық поштаны қорғауға және фишингті анықтауға бағытталған. Киберқауіпсіздік саласында жұмыс істейтін компания ұйымдарға корпоративтік электрондық пошта байланысын қорғауға көмектесу үшін 500-ден астам қызметкерді біріктіреді.

Trust Analyst II - GRC at Abnormal Security (Remote, United States)

Lead governance, policy, risk management, internal controls, and compliance readiness for Abnormal Security’s cybersecurity SaaS programs. Support certifications, audits, remediation, and governance operations across AI, data, and security domains.

Сипаттама

  • Lead AI, data, security, and related governance committees by setting agendas, coordinating stakeholders, and closing decisions.
  • Manage the policy lifecycle, including drafting, revisions, maintenance, stakeholder review, acknowledgments, and Policy Center administration.
  • Run risk management operations covering the risk register, assessments, exceptions, renewal reviews, documentation, and the 12-month exception cap.
  • Track regulatory and industry developments and advise leadership on program strategy and potential impact.
  • Align program execution with strategy while delivering GRC milestones on schedule and to a high standard.
  • Improve internal control effectiveness through monitoring, control enhancements, and guidance on control design and operation.
  • Conduct compliance readiness assessments and provide senior leaders and business partners with updates, recommendations, and roadmaps.
  • Educate and train process, control, and risk owners on control requirements, documentation, and risk responsibilities.
  • Define and report key risk indicators and key performance indicators.
  • Identify policy and process gaps or conflicts and develop solutions with business partners.
  • Lead remediation and risk mitigation through root cause analysis, action-plan development and tracking, and recurring risk analysis.
  • Design and manage program operations and the technology that supports them.
  • Contribute to ad hoc projects as needed.
  • Report control testing, audit, risk assessment, issue management, program health, achievements, and risks to project teams, partners, and senior management.

Талаптар

  • Bring 4–7 years of experience in cybersecurity, technology risk, GRC, and/or technical compliance.
  • Have at least 2 years of experience implementing and maintaining ISO 27001.
  • Have led at least one complete ISO 27001 certification cycle, including the 2022 revision, from initiation through completion.
  • Demonstrate project management experience across concurrent compliance initiatives, cross-functional teams, Agile or Waterfall methods, and tools such as ServiceNow.
  • Have owned or facilitated cross-functional AI, data, or security governance programs or committees.
  • Understand security concepts, ISMS implementation and maintenance, control mapping across frameworks, and continuous control monitoring and automation.
  • Have implemented and managed ISO 27001 and ISO 27701 programs, including Statements of Applicability, risk treatment plans, risk acceptance criteria, internal audit programs, and management reviews.
  • Have worked with external auditors and managed internal stakeholders.
  • Have experience with audit automation and continuous control monitoring tools.
  • Can coordinate multiple stakeholders and vendors while sustaining project momentum.
  • Bachelor’s degree or equivalent military experience is preferred.
  • ISO 27001, ISO 27701, or ISO 42001 Lead Auditor Certification is preferred.
  • CRISC, CISSP, CPA, CISA, PMP, or CISM certification is preferred.
  • Experience with NIST CSF, NIST SP 800-53/171, or other control frameworks is preferred.
  • Familiarity with AI governance frameworks such as ISO/IEC 42001 and NIST AI RMF is preferred.
  • Experience in a technology, SaaS/cloud, or regulated public company is preferred.
  • Two or more years of Big Four experience is preferred.

Артықшылықтар

  • Bonus or incentive compensation may be available.
  • Equity may be available.
  • A comprehensive benefits package is offered.
  • Pre-employment checks follow applicable legislation and Abnormal AI’s security and privacy standards.

Ұқсас жұмыс орындары

Ramp

Senior Analyst, Economic Research and AI Projects at Ramp

Ramp

Expand Ramp’s AI spending index using business spending data and investigate AI adoption and returns. Deliver research, dashboards, and recommendations for CFOs and finance leaders.

Ашу
CHS Inc.

Operations Specialist – Grain and Fertilizer

CHS Inc.

Support CHS grain and fertilizer facilities by operating equipment and managing loading, unloading, and inventory. Help maintain safe, orderly agricultural operations.

Ашу
Ms Ms

Operations Analyst, Parametric Investment Management

Ms Ms
5 001 – 10 000 Қызметкерлер
B2CМедиа

Support Parametric’s investment management operations across reconciliations, trade settlement, account onboarding, billing, corporate actions, and client account activity.

Ашу
FHI 360

Senior Technical Officer, Emergency Response Analytics

FHI 360

Lead data analytics and visualization for FHI 360’s global emergency and infectious disease response programs. Build dashboards, deliver epidemiological insights, and support monitoring, evaluation, and learning across project teams.

Ашу
Viatris

Senior Financial Analyst, R&D Finance — Viatris (Remote, U.S.)

Viatris

Support Viatris’ Total R&D finance through forecasting, budgeting, reporting, and financial analysis. Partner with scientific and functional leaders on programs and strategic plans.

Ашу
Stryker

Contracts and Proposals Analyst

Stryker

Support Stryker’s medical device capital equipment transactions by coordinating agreements, pricing analysis, approvals, and commercial workflows across Sales, Finance, Legal, and Operations.

Ашу
Accenture Federal Services

Senior Microsoft 365 Platform Analyst (Remote, Virginia)

Accenture Federal Services

Support Accenture Federal Services’ Microsoft 365, Entra ID, and automation platforms in a GCC High environment. Resolve incidents and develop solutions for emerging needs.

Ашу
dentsu Austria

Analyst Relations & Insights Manager (Hybrid, United States)

dentsu Austria
51 – 200 Қызметкерлер
КәсіпорынМаркетингМедиа

Manage analyst relations programs, evaluation submissions, and research insights for Merkle. Coordinate client stories, internal communications, and engagement with leading analyst firms.

Ашу