Listing Description

We are seeking an Enterprise Security Analyst to join our small but mighty Information Security and Technology team. In this greenfield role, you will help operate and mature the engines of our enterprise security program, specifically in the realm of Third Party Risk Management. You will work closely with stakeholders across the business to implement, manage, and track enterprise security processes. Be ready to make your mark!

How you’ll spend your time:

• Perform security assessments on third parties (e.g., vendors, partners) to help identify, track, and reduce organizational risk using LogicGate’s flagship GRC product, the Risk Cloud


• Maintain an inventory of identified risks, technical configuration issues, and threats for third party systems interacting with the LogicGate environment 


• Work closely with business and IT stakeholders to ensure alignment on the implementation of technical security measures for third parties and any relevant systems


• Lead initiatives to introduce new security tooling and processes


• Learn and apply security engineering skills to automate the mundane away, integrate tools, and administer systems


• Produce operational metrics for third party risk management activities and implement relative risk ratings for vendors/systems to aid in prioritization efforts


• Collaborate with security, IT, and compliance teams on process improvement opportunities

We get excited about you if you have:

• 2 to 4 years of experience in a cyber security role


• Experience in operating third party risk management processes (e.g., due diligence requests)


• Comfort working in a SaaS environment and have a general technical aptitude with cloud based tools (e.g., Okta, AWS, Google Workspace)


• A knack for innovating, automating processes, and raising the (security) bar whenever possible


• Admin experience with SaaS tools (GRC is a plus!)


• An attention to detail that is required in documenting assessment results


• Have, or are working towards, any IT or Security certifications (e.g., CompTIA)

What We Use:

• 
  
  
  
  • Back: Spring Boot, Java, Kotlin
  
  
  • Front: TypeScript, Angular, Webpack, Sass
  
  
  • Data: Neo4j, Redis, RabbitMQ
  
  
  • Test: JUnit, Jasmine, Karma, Protractor, Selenium
  
  
  • Ops: AWS, Ansible, Terraform, Hashicorp, Docker
  
  
  • Work: Jira, Slack, Gitlab, G Suite