Security Assurance Manager
Kentik
This job is no longer accepting applications
See open jobs at Kentik.See open jobs similar to "Security Assurance Manager" Third Point Ventures.Who we are
Kentik is the network observability company. Our platform is a must-have for the network front line, whether digital business, corporate IT, or service provider. Network professionals turn to the Kentik Network Observability Cloud to plan, run, and fix any network, relying on our infinite granularity, AI-driven insights, and insanely fast search.
Kentik makes sense of network, cloud, host, and container flow, Internet routing, performance tests, and network metrics. We show network pros what they need to know about their network performance, health, and security to make their business-critical services shine. Networks power the world’s most valuable companies, and those companies trust Kentik. Market leaders like IBM, Box, and Zoom rely on Kentik for network observability. Visit us at kentik.com and follow us at @kentikinc.
What we do
The Security Assurance Manager is a pivotal role within our growing Security organization, tasked with leading three key functions: Security & Privacy compliance, Third party & enterprise risk management, and Customer security assurance. This role demands a blend of technical expertise, strategic planning, and interpersonal skills to manage initiatives that span across both external customer and internal facing teams including Engineering, Finance, Legal, Sales and Customer Success.
The successful candidate will drive cross-functional work necessary to ensure the implementation of the management, operational and technical security controls required to be compliant with all applicable regulations and security compliance standards. They will also work in close collaboration with GTM teams to make security a sales enabler, providing necessary training and creating relevant customer facing content.
This position is an individual contributor role reporting to Kentik’s Chief Security Officer (CSO).
What you'll do
- Security & Privacy Compliance - Drive security and privacy compliance initiatives by maturing existing practices and implementing new ones. Conduct security control test of design and test of operating effectiveness activities. Manage remediation tasks through to closure while adhering to strict deadlines
- Risk Management - Mature the third party risk management practice with implementation of new tooling and processes. Establish & implement broader enterprise risk management and business continuity strategy. Execute operational security risk management activities such as third party security risk assessments, business impact assessments and critical systems assessments
- Customer Security Assurance - Drive customer confidence by promptly responding to customer queries and proactively building content to assist with the same. This includes activities such as creating white papers, slides and a customer facing trust center.
- Program Management - Drive the overall strategic and operational execution of the Security & IT function, tracking initiatives to completion and producing metrics.
- Governance - Publish and maintain internal security & privacy documentation, policies, standards and procedures related to Security and Privacy. Monitor external regulatory and compliance landscapes and proactively inform management of significant changes. Identify opportunities for security and governance process automation.
- Training - Drive organizational security & privacy awareness training initiatives including role specific training for groups such as engineering & GTM teams
What you'll bring
Studies have shown that some candidates tend to apply to jobs only if they meet 100% of the qualifications. We encourage you to apply if you meet most of the criteria - even if you don’t match all of the qualifications, your skills and experience could be valuable in this role!
- 5+ years of relevant work experience in Security & Privacy Compliance, Auditing, Risk Assessments or other GRC related experience
- 2+ years of experience leading security compliance audits and/or customer audits
- Experience with the audit lifecycle - including experience with testing controls (such as access reviews and writing test automation in various environments) and gathering and reviewing compliance evidences required for audit
- Experience with GRC management and automation platforms - such as Vanta, Onetrust or other similar tool
- Ability to work cross-functionally to provide security compliance issues, risks, and recommendations
- Experience engaging with internal, external, and customer auditors
- Experience running third party risk management programs to manage vendor risks
- Experience responding to customer queries and creating artifacts to enhance customer security assurance
- Strong project management skills - i.e. manage and track implementation of strategic initiatives, operational tasks and controls
- Knowledge of security & privacy compliance and regulatory frameworks, such as NIST, SOC2, ISO27001, ISO27701, GDPR & CCPA
- Experience with technologies such as AWS/GCP/Azure, Linux and Kubernetes/containers
Nice to haves:
- Industry certification such as CISSP, CISA, CISM, CRISC, AWS/Azure Security, and/or equivalent GRC certification
- Experience working in a SaaS environment
- Experience working in a pre-IPO startup environment
What we offer
Kentik is a fully remote company that operates globally. We seek professionals that will help us thrive as an organization, and in turn, to broaden and enhance your career. We’re very thorough in the interview process to understand your skills and how they will relate to your successful growth here at Kentik. Our compensation philosophy encompasses a fair program for all in order to attract, engage and retain talented individuals who will drive our business and wow our customers.
The compensation range for this position is: $150,000 - $200,000. This range reflects the low and high end of the U.S. compensation range Kentik reasonably and generally expects to pay the hired candidate in this role. The actual compensation offered may be lower or higher than the stated range depending on various factors, including but not limited to:
- Experience with the skill sets required for success
- Demonstrated competencies and potential
- A geographic market-based approach
In addition to a great career opportunity, Kentik offers stellar benefits for our employees, which include:
- 100% of premiums are paid by company for health, vision and dental coverage for you and your dependents
- Additionally, an annual Health Reimbursement Account (HRA) of $3,000 for an individual or $4,500 for a family
- Paid family & medical leave
- Open PTO, a quarterly Wellness Day, and a minimum of 10 paid holidays
- 401(k) retirement account
- Home office reimbursement
- Stock options
Note: Benefits are as listed for all US full-time employees. For compensation, international applicants will be treated equitably in relation to the laws applicable within the countries in which we operate.
Come work with us
The true meaning of Kentik is visibility. We’re committed to making sure everyone feels empowered to use their voice, has a sense of belonging, and is represented at Kentik.
We don’t look for individuals who fit the culture, but those who will continue to add to the culture.
We encourage everyone to apply, especially those individuals who are underrepresented in the industry: people of color, LGBTQI+ community, women, individuals with disabilities (both seen and unseen), veterans, and people of any age or family status.
Come as you are!
You will be working at a fast-growing, well-funded startup alongside industry thought leaders and network aficionados as we build the future of observability and set the high bar for how network operations and digital businesses should run. With a competitive salary and amazing benefits on top of the meaningful and challenging projects you’ll take on, we’re sure you’ll enjoy joining the Kentik team.
#li-remote
This job is no longer accepting applications
See open jobs at Kentik.See open jobs similar to "Security Assurance Manager" Third Point Ventures.