This role is an experienced Information Security Compliance subject matter expert who will take a lead role in improving our compliance and security program. This position will focus on three areas: Audit/Compliance support, Vendor Risk Management and RFX (answering customer security questionnaires). You will have excellent communication skills, a solid foundation in information security principles and an expertise in information security management systems as it relates to compliance with applicable frameworks. Strong understanding of privacy laws and regulations like GDPR, CCPA/CPRA and other similar regulations. This position reports to the Director of Platform Security.
This opportunity is for you, if you are:
Excited to work across the many Tealium products and services
Empathetic, patient and passionate about helping Tealium improve its security posture
Constantly looking for security technological innovation opportunities
Driven to help customers accelerate their digital transformation
YOUR DAY TO DAY
Support the maintenance of Tealium’s certifications: HIPAA, SOC2 Type 2, ISO 27001, ISO 27701, ISO 27018, TISAX Level 1
Conduct Vendor Risk Management assessments of critical Tealium vendors
Respond to customer information security RFX requests (security questionnaires)
WHAT YOU BRING TO TEALIUM
You have 5+ years total experience in information security
You have 3+ years experience working with Cloud Hosting Environments such as AWS, Azure, GCP and others in a high traffic global business
You have earned a bachelor’s degree in an Information Technology related field of study or equivalent experience; relevant, industry recognized security certification such as CISSP, CISA, CSSLP, or CRISC
You have deep knowledge of information security principles and technologies such as Security Incident and Event Management (SIEM), intrusion prevention and detection (IPS/IDS), firewalls, proxies, web filters, email filters, web application firewalls, and end-point anti-virus, etc
Familiarity with networking, operating systems, web applications, common techniques used by hackers/attackers and cloud technologies (i.e. IaaS, PaaS, SaaS) and cloud platforms (AWS, Azure etc)
Experience with compliance frameworks such as SOX, HIPAA, SOC2, ISO 27001, ISO 27018, ISO 27701 are a must; familiarity with NIST 800-171 and 800-53, FedRAMP, HITRUST and PCI DSS is nice to have
Excellent problem solving and analytical skills, as well as outstanding oral and written communication skills
The ability to work in a fast-paced environment and the ability to deal with ambiguity
Ability to handle multiple competing priorities and work well under minimal supervision
