Lead Security Analyst

At Vidyard, we make life easier for sellers, marketers and corporate communicators. Our video messaging tools, digital sales room platform, and other products are used by Microsoft, LinkedIn, and thousands of other companies. We're passionate about elevating our customers, our teammates, our communities, and ourselves.

**About the Role**:
Vidyard is looking for a **Lead Security Analyst **to join our **Security** team. Reporting to the **Director of Platform and Infrastructure**, you will work with teams across Vidyard to ensure our security compliance and risk requirements are met, while driving security awareness across Engineering and the business. You will become a strong mentor to our IT & Security team on security practices to level up the team's knowledge and skills

**About the Team**:
As a cohesive team, they are deeply committed to ensuring our employees and customers remain well-informed and conscious of security practices, while actively cultivating a secure and collaborative environment for all stakeholders involved.

**As a Lead Security Analyst You Can Expect to**:

- Partner with other teams to help them improve their security posture and monitor their configurations, vulnerabilities, and compliance
- Lead efforts to define, document and implement industry leading security practices & internal controls
- Evaluate new cybersecurity threats and IT trends to develop effective security controls
- Research, develop and maintain a high-quality security/vulnerability posture
- Assist with penetration testing and compliance certification audits with our security vendors
- Lend your expertise to enable our pre-sales technical teams to manage customer security questionnaires
- Monitor our security stance, and react and respond to alerts across our platforms and tools
- Collaborate with Developers and leaders to help triage, prioritize, and remediate weaknesses and vulnerabilities found during security assessments.
- Coordinate with internal teams to operationalize and audit infosec policies
- Advise on core internal security policies and processes such as Security Incident Management, Risk Management, Vulnerability Management
- Lead and facilitate all periodic regulatory processes (e.g. SOC2, ISO27001), coordinating and gathering information across the company to fulfill our obligations
- Manage our vendor assessment processes, interfacing with external stakeholders as necessary.

**What You'll Bring to this Role and Your New Team**:

- 8 - 10 years of related functional experience
- Expertise in cloud security, preferably in AWS, with a strong understanding of cloud security best practices.
- Strong communication and collaboration skills, with the ability to work effectively across teams and influence stakeholders.

**Our Tech Stack**:

- Cloud Compliance Platforms
- SIEM products
- Network Security (eg. WAF, Security Groups)
- Cloud Security Tooling (eg. AWS Inspector)
- Static Application Security Testing (SAST) Tools
- Dynamic Application Security Testing (DAST) Tools

As we also value **user obsession**, we prioritize our users, customers and community so you can expect to hear from our team even if you are not selected to move forward.

**What You'll Love about Vidyard**:

- Competitive pay
- Comprehensive, flexible benefits on day one*
- Wellness allowance to spend on what's important to you
- Flexible hours + unlimited vacation + programs to support travel while working, enabling you to live your best life
- Access to Inkblot, a digital mental health platform + $1,500/person/year for mental health coverage*
- Allowance to support your ongoing growth and development
- Parental leave top-up
- Paid volunteer hours
- Employee resource groups to empower and drive change at Vidyard and in our communities
- RRSP match*
- Stock options
- Flexible holiday program
- Home office stipend
- Flexibility to work in the place that brings out your best: whether you thrive in the comfort of your home office, or are local to, and prefer the energy of our collaboration space in Kitchener, Ontario, Canada, there is flexibility for all. Although we default to remote-first there will be occasional in-person meetings/events purposefully designed for connection and collaboration.
- _Benefits described are Canadian specific, if you're located in another country our People team will speak with you about localized benefits for you._
- We thank all applicants for your interest in Vidyard. Only those applicants selected for an interview will be contacted. Unsolicited resumes from Agencies will not be accepted._