In this role, you’ll be a key member of the company’s Information Security and Compliance Team by supporting ongoing compliance activities and monitoring efforts across different regulations (GDPR, SOC 2, PCI-DSS ISO/IEC, HIPAA, etc.).

Responsibilities

• Participating in internal and external planning and execution of compliance attestations (SOC 2, PCI DSS, HIPAA, GDPR) with third-party attestation partners
• Collaborating in and observing remediation plans
• Develop new policies and procedures, as well as monitoring and auditing existing controls
• Conducting research and analysis on regulatory changes and industry changes
• Collaborating with other team and departments on compliance matters
• Assisting in managing and monitoring third-party vendor and partner compliance
• Prepare compliance reports and documentation
• Investigate and resolve compliance issues or violations
• Conduct risk assessments and identify potential compliance risks
• Provide guidance and training to ensure compliance with relevant laws and regulations

Requirements

• 3+ years in the IT Compliance Specialist or similar roles
• Business goals oriented compliance foundation
• Familiarity with common IT security controls and best practices
• Knowledge of relevant IT compliance frameworks and regulations (SOC 2, PCI DSS, ISO 27001, HIPAA, GDPR)
• Previous relevant experience in IT compliance, risk management or a related field
• (Optional) Certifications, such as CompTIA Security+, GIAC Information Security Fundamentals (GISF), or Certified Information Systems Auditor (CISA) Associate
  
  

Benefits

• Stock options and Competitive salary
• Professional development support  (trainings, courses, conferences, books, etc)
• Access to all the latest tools and equipment you’ll need 
• Sports compensation, reimbursement for therapy, counseling sessions
• Team events: annual employee awards, internal hackathons, and a dozen cool events from cooking to the Glia olympic games :)
• Generous referral bonuses 
• Diversity: 25 countries represented