Who We Are:

C rashPlan® provides cyber-ready data resilience and governance in a single platform for organizations whose ideas power their revenue. With its comprehensive backup and recovery capabilities for data stored on servers, on endpoint devices, and in SaaS applications, CrashPlan’s solutions are trusted by entrepreneurs, professionals, and businesses of all sizes worldwide. From ransomware recovery and breaches to migrations and legal holds, CrashPlan’s suite of products ensures the safety and compliance of your data without disruption.

What You Will Be Doing:

We are recruiting for an Information Security Analyst, Governance, Risk Management and Compliance to join our team. As a key member of the CrashPlan Information Security Team, you will be supporting the risk management and compliance functions. We believe in smart security and in your role you will look for meaningful ways to manage risk, ensure compliance, and work with teams to implement better security practices.

NOTE - We are only considering remote candidates in the following metropolitan areas:

Minneapolis/St. Paul, MN * Austin, TX * Princeton, NJ * Reston, VA

Day In The Life:

Conducting security and privacy risk assessments and security consulting engagements
Conducting information security assessments of third-party vendors
Maintaining reporting and tracking for information security and privacy risks and working closely with risk owners to remediate
Conducting periodic business continuity and disaster recovery testing
Responding to customer and prospect security questions related to CrashPlan’s products and security posture
Supporting information security and privacy compliance audits and initiatives (e.g. SOC2, ISO 27001, PCI-DSS, GDPR) including day to day management of the GRC platform and continuous monitoring activities
Conducting internal audits
Managing the security training and awareness program and phishing simulations
Facilitating change management
Prioritizing risks efficiently and appropriately; challenging assumptions and methodologies
Triaging and prioritizing vulnerabilities for remediation
Developing and maintaining cross-functional partnerships, and partnering with SMEs to determine appropriate risk-based remediation strategies

Who You Are:

Required Qualifications:

Bachelor’s Degree in Computer Science, Information Systems, Cybersecurity, or related discipline and/or equivalent experience
3+ years professional experience in a similar role
Knowledge of/experience working with NIST 800-53, ISO 27001, SOC2, GDPR, DPF and other relevant security and privacy frameworks
Knowledge of/experience with third Party Security, Policy management, Customer Security
Assurance, and/or Security Awareness
Experience conducting data privacy and security risk assessments and impact analysis

Preferred Qualifications:

One or more information security or privacy certifications (e.g. CISSP, CISM, CIPP)
Experience using vulnerability scan tools and threat and vulnerability management
Experience with Azure and AWS environments

The base pay compensation range for this role is listed below. This position is eligible for an annual bonus based on individual and company performance in addition to a full range of benefits including medical, dental, vision, 401k match, and more. Final compensation will be dependent on various factors relevant to the position and the candidate such as geographical location, candidate qualifications, certifications, relevant job-related work experience, education, skillset and other relevant business and organizational factors, consistent with applicable law. This information is provided per the relevant state and local pay transparency laws for the location in which this position will be performed.

Pay Transparency

$105,000—$125,000 USD

CrashPlan values workplace diversity and ensuring an environment of mutual respect. Employment opportunities are available to all applicants without regards to race, color, creed, religion, sex, national origin, age, marital status, veteran status, sexual orientation, gender identity or expression, disability, genetic information, or any other category protected by law. We believe that diversity and inclusion are critical to our success, and we seek to recruit, develop, and retain the most talented people from a diverse candidate pool. We are proud to be an equal opportunity employer.

Find Your Perfect Job

Information Security Analyst, GR&C