Support Engineer - Risk & Compliance Analyst

At Securonix,we’re on a mission to secure the world by staying ahead of cyber threats, reinforcing all layers of our platform with AI capabilities. Our Securonix Unified Defense SIEM provides organizations with the first and only AI-Reinforced solution built with a cybersecurity mesh architecture on a highly scalable data cloud. Enhanced bySecuronix EON’s AI capabilities, our innovative cloud-native solution delivers a seamlessCyberOps experience, empowering organizations to scale their security operations and keep up with evolving threats.  

Recognized as a five-time leader in theGartner Magic Quadrant for SIEM and highly rated onGartner Peer Insights, our award-winning Unified Defense SIEM provides organizations with365 days of ‘hot’ data for rapid search and investigation, threat content-as-a-service, proactive defense through continuous peer and partner collaboration, and a fully integratedThreat Detection, Investigation, and Response (TDIR) experience—all within a single platform. Built on a cloud-native architecture, the platformleverages the Snowflake Data Cloud for unparalleled scalability and performance. 

Securonix is proud to be a cybersecurity unicornand featuredin CRN's 2024Security 100 list. Backed byVista Equity Partners, one of the largest private equity firms with over$100 billion in assets under management, we have a unique advantage in driving innovation and growth. With a global footprint, we serve more than 1,000 customers
worldwide, including10% of the Fortune 100. Our network of150+ partners and Managed Security Service Providers (MSSPs) enables us to deliver unmatched security solutions on a global scale. 

At Securonix, we are driven by our core values and place our people at the heart of everything we do: 

• Winning as One Team: We work together with universal respect to achieve aligned outcomes 

• Customer Driven Innovation: We innovate to stay ahead of the market and create value for our customers 

• Agility in Action: We embrace change and are unified in our purpose andobjectives amidst change 

Join us as we redefine cybersecurity, innovate fearlessly, and grow together as one team. 

TheSupport Engineer – Risk and Compliancewillbe responsible forensuringthatcompliance with regulatory and industry mandates that include SOC2, ISO 27001,ISO 42001,HITRUST,PCI,and others aremaintained. Reporting to the Manager of Information SecurityRisk &Compliance,this role willbe responsible forexecutingcontrol self-assessments,creating, andmaintainingpolicydocumentation,assisting inmaintaining the risk register and overall maintenance of the organization’s compliance posture 

 
Essential Functions of the Job: 

• Conductcontrols assessments toidentify and assess Information Security risks within the Securonix ITenvironment.
  Ensure that control self-assessments are conductedin a timely manner ensuring completeness and accuracy 

• Co-ordinate with auditors and internal stakeholders for audit evidence gathering. 

• Conduct risk assessmentsand vendor riskreviews and maintain documentation ofrisks in the GRC tool. 

• Ensure thatappropriate documentation in the form of policies, standards and procedures is created and managed to support the various security,compliance, and audit requirements. 

• Work with other teams in the IT org toestablish standards and process formaintaining and improving the organization’s security posture 

• Assist in continuous improvement and maturing the Information Security GRC program 

Additional Job Functions:  

• Maintain the risk register with up-to-date risk details, and track risk response plans(remediation/exceptions) to closure 

• Perform audits and assessments of third parties such as vendors, service
  providers, and consulting
  organizationsasrequired. 

• Work closely with Technology and Security teams to developappropriate remediation action plans foridentified risks. 

Knowledge and Skill Requirements: 

• Demonstrated experience inperforming risk assessments and control reviews against compliance frameworks such as COSO, COBIT, NIST, ISO 27001, etc. 

• Understanding of IT General Controls in relationto SOC2,ISO 27001, ISO42001and other complianceframeworks. 

• Familiarity with IT and Information Securityprocesses such as identity and access management, vulnerability management, encryption and key management, logging and monitoring and application security is desirable. 

• Familiarity with cloud and SaaS-based environments and technologies with associated auditing methodologies is desirable 

• Bachelor’s /Master’s degree in a computer or information management field or similar work experience. 

• Relevant certifications like CISSP, CISA, CRISC,ISO 27001 – Lead Auditor/Lead Implementer
  desirable, but not mandatory 

• Strong attention to detail,influencing, and problem resolution skills. 

• 2+years’ experience inInformation Security -IT auditand/or IT Risk &Compliance roles 

Benefits: 

As a full-time employee with Securonix, you will be eligible for the following employee benefits: 

• Health Insurance with a total sum insured is INR 7,50,000 

• Coverage: Self, Spouse, 2 kids, Dependent parents, or parents-in-law 

• Personal Accident with total sum insured is INR 10,00,000 

• Term Life Insurance with a sum assured for employees is 5 times fixed base pay is covered. 

Securonixprovides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status,amnesty or status as a covered veteranin accordance with applicable federal,state and local laws. Securonixcomplies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including hiring, placement, promotion, termination, layoff, recall, and transfer, leaves of absence,compensation and training.