Senior Information Security & Compliance Specialist

Company: Smartsheet Inc
Location: Bellevue
Posted on: February 23, 2021

Job Description:

Senior Information Security & Compliance Specialist We are looking for a Senior Information Security & Compliance Specialist to join our growing security team. You will lead the continued development of our compliance programs at Smartsheet. We're looking for motivated individuals who will improve both the existing and future state of Smartsheet. In 2005, Smartsheet was founded on the idea that teams and millions of people worldwide deserve a better way to deliver their very best work. Today, we deliver a leading cloud-based platform for work execution, empowering organizations to plan, capture, track, automate, and report on work at scale, resulting in more efficient processes and better outcomes. You will report to our Director of Compliance and Corporate Security located in our Bellevue, WA office. You Will:

• Work with Legal, IT and Engineering teams to develop new, and improve, existing compliance and security governance programs for Smartsheet products, customers, and operations
• Support current third-party attestations, audits, and certification efforts for our organization, including SOX-IT, ISO27001, ISO27701, ISO27018, and SOC 2/3, related documentation, and remediation activities
• Help achieve new compliance frameworks at Smartsheet, including SOC1, CSA, HITRUST, and PCI frameworks
• Help integrate newly acquired businesses and operations, and expanding businesses and processes, into Smartsheet's security, risk and compliance programs
• Support the rollout of our multi-region initiative, coordinating with team members and partners to understand audit requirements and processes for data residency in non-US markets
• Support governance and risk management activities including Policy Management, Enterprise Risk Management, Business Continuity Management, and Third Party Risk Management You Have:
  • Ability to handle confidential matters discreetly
  • 5+ years of relevant experience in information security or compliance
  • Experience working for a Cloud Service Provider
  • Understanding of information security and security governance, risk and compliance frameworks, methodologies and practices
  • Working knowledge of IT processes, IT compliance, IT frameworks, such as: SOX, SSAE 16 - SOC 1 & SOC 2, PCI compliance, ISO 27001 & ISO 27002, CSA, HITRUST
  • Working knowledge of other compliance areas such as C5, UKGov, OFAC, FCPA, HIPPA, FERPA, NERC CIP
  • Evaluating risk and communicating risk in a fact-based manner
  • Big 4 experience preferred
  • 100% employer-paid medical, dental, and vision coverage for full-time employees
  • Equity - Restricted Stock Units (RSUs) Equity with all offers
  • Lucrative Employee Stock Purchase Program (15% discount)
  • 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay)
  • Monthly stipend to support your work and productivity
  • 15 days PTO to start, plus Flexible Sick Leave
  • Teleworking options from any registered location in the U.S. (role specific)
  • Up to 24 weeks of Parental Leave
  • Personal paid Volunteer Day to support our community
  • Opportunities for professional growth and development including access to Audible for Business and LinkedIn Learning online courses
  • Company Funded Perks, including a counseling membership, primary care membership, local retail discounts, and your own personal Smartsheet account Equal Opportunity Employer: Smartsheet is an Equal Opportunity Employer committed to fostering an inclusive environment with the best employees. We provide employment opportunities without regard to any legally protected status in accordance with applicable laws in the US, UK, and Australia. If there are preparations we can make to help ensure you have a comfortable and positive interview experience, please let us know. At Smartsheet, we strive to build an inclusive environment that encourages, supports, and celebrates the diverse voices of our team members who also represent the diverse needs of our customers. We're looking for people who are driven, authentic, supportive, effective, and honest. You're encouraged to apply even if your experience doesn't precisely match our job description-if your career path has been nontraditional, that will set you apart. At Smartsheet, we welcome diverse perspectives and people who aren't afraid to be innovative-join us!-- At Smartsheet, we strive to build an inclusive environment that encourages, supports, and celebrates the diverse voices of our team members. Individuals seeking employment at Smartsheet are considered without regards to race, ethnicity, color, age, sex, religion, national origin, ancestry, pregnancy, sexual orientation, gender, gender identity, gender expression, genetic information, physical or mental disability, registered domestic partner status, caregiver status, marital status, veteran or military status, citizenship status, or any other legally protected category in the US, UK, and Australia.
    
    Below is a set of voluntary demographic questions. If you choose to complete them, your responses will be used in aggregate to help us identify areas for improvement in our programs. Your responses, or your choice to not respond, will not be considered in the hiring process. Any information that you provide will be recorded and maintained confidentially.
    
    For definitions of any of the following terms or to read more about your rights, please visit the EEOC website here .-- I identify my gender as:
    Male
    Female
    Non-binary (inclusive of bigender, agender, androgynous, gender fluid, or gender non-conforming)
    I prefer not to say
    I identify as transgender:
    No
    Yes
    I prefer not to say
    I identify my race / ethnicity as (select all that apply):
    Alaska Native / American Indian / Indigenous/Aboriginal / Native American
    Black / African-American / Black-British / Caribbean
    Hispanic / Latinx
    East Asian (Chinese / Hong-Kong / Japanese / Korean / Mongolian / Tibetan / Taiwanese)
    Middle Eastern / North African
    Native Hawaiian / Pacific Islander
    South Asian (Bangladeshi / Bhutanese / Indian / Nepali / Pakistani / Sri Lankan)
    Southeast Asian (Burmese / Cambodian / Filipino / Hmong / Indonesian / Laotian / Malaysian / Mien / Singaporean / Thai / Vietnamese)
    White / European
    I prefer not to say
    My veteran status is:
    Yes, I am a veteran
    No, I am not a veteran
    I prefer not to say
    My disability status is:
    Yes, I have a disability (or previously had a disability)
    No, I do not have a disability
    I prefer not to say
    

Keywords: Smartsheet Inc, Bellevue , Senior Information Security & Compliance Specialist, Other , Bellevue, Washington