Security Governance Associate

As part of the Security Governance & Compliance Team, you will be responsible for:

• Participating in maintaining our ISO 27001/27701/27017/27018 certifications, HIPAA and SOC 2 report. As well as any new framework we would go forward with.

• Helping acquired companies integrate with Contentsquare’s security policies and practices

• Taking part in internal, external, customer and certification security audits

• Contributing to periodic risk management activities such as internal risk assessments and third party security reviews

• Deploying/merging our security practices, policies and certification with recently acquired companies

• Handling the security governance tasks (bi-annual management review, risk analysis, monthly KPI, security awareness, supplier risk review)

• Collaborating with other departments to improve the security of business processes (onboarding, offboarding, access management, business continuity, SDLC, incident management, etc.)

• Actively promoting security awareness through the use of structured campaigns and initiatives

• Helping ensure internal security controls are understood and consistently followed

• Responding to prospects/customers on security topics before and during the life of customer contracts

• Reviewing security clauses in legal contracts

• Arrange the schedule of internal and external security scans, penetration testing, code vulnerability testing, etc.

• Continually monitor emerging threats, understanding when a concern becomes a priority, and finding creative ways to mitigate these while achieving business goals

• Respond to security incidents if they occur, working to investigate and remediate the impact swiftly

• As part of Third-Party Risk Management (TPRM), perform security assessments and risk analyses on vendors