Compliance Analyst

**Harnessing the Power of Data, Together.**
The world’s leading enterprises are using Solace’s event streaming and management platform to transform their organizations by harnessing the power of events.

The more quickly an enterprise can get information about events to where it needs to be, the more effectively a business can react to opportunities and improve the customer experience. That’s where an event broker (modern messaging-oriented-middleware) comes in.

*
Help Us, Help Them, Help You.*
By joining our first-class team, you will be helping leading enterprises, including common household brands we all know and love, reach their full potential in this real-time, digital world.

The next time you drive a luxury vehicle, do some online banking, fly in a plane, or order some furniture online, you could be getting a better experience as a direct result of our technology, and your hard work. Wouldn’t that be great?

*
Overview*
This position is for a **Compliance Analyst**. In this role, you will be responsible for managing security compliance programs of Solace Cloud, our market-leading SaaS offering, across leading cloud providers and platforms such as Amazon Web Services, Microsoft Azure, Google Cloud Platform, Kubernetes, etc. AMAZING

**The Right Person Will**:

- Demonstrate expert knowledge in multi-cloud security stacks (AWS, Azure, GCP)
- Demonstrate expert knowledge in major compliance programs (SOC, ISO, CSA, HIPPA etc.)
- Lead compliance program for Solace cloud (SOC2, ISO 27001, HIPAA, CSA)
- Continuously observe and maintain lifecycle of Technical and Non-Technical security controls
- Perform internal audits on a regular cadence to ensure zero exceptions
- Engage with various control owners and lead technical walkthrough sessions for external audits
- Facilitate evidence gathering for external audits and participate in evidence discussions
- Consults with all risk functions in the development and documentation of policies, procedures, and controls, for all Solace cloud department processes
- Prepare Audit reports, System Descriptions, Control wordings etc.
- Contribute to Solace Cloud’s security engineering & compliance practices
- Collaborate with various teams and individual contributors across the organization
- Automate the lifecycle of audit process such as Evidence gathering, Compliance monitoring, Alerts on exceptions in real-time.
- Continuously Identify risks and gaps in compliance programs to improve security posture
- Research and review current and upcoming technologies and trends, IT leading practices, and other relevant areas to maintain sufficient competency in assessing IT risks and controls; and
- Prepare responses to client questionnaires and checklists, and requests for proposals (RFPs) and requests for information (RFIs).

**Required skills**:

- Minimum 3 years in a Security or Compliance Analyst role
- 2-4 years of relevant experience in external or internal audit or regulatory compliance
- Knowledge of common information security management frameworks, such as ISO/IEC 27001, CSA, COBIT, SOC, HIPAA and the Cybersecurity Framework
- Automation experience (Python, GO, bash, etc.)
- Strong change management ability - focus on identifying potential risk areas, and establishing and enhancing processes and controls to mitigate those potential risks
- Demonstrated ability to harness technology and implement technology-based solutions to compliance matters engineering to enhance efficiency and impact of compliance program

**Desirable Skills are**:

- Hands-on experience with securing micro-service architecture
- Experience with compliance standards such as SoC II, ISO 27001, GDPR
- Threat analysis techniques (Network, Application)
- Vulnerability assessment and analysis (OWASP Top 10, Zero day exploits)
- One or more of the following certifications: CompTIA Security+, CISSP, CISA, CISM

**What Makes Us Great**:

- We have an awesome team You’ll get to work with some of the smartest individuals in the business
- We believe in work-life balance and believe it’s important to love what you do
- We have adopted a hybrid work model to create an inclusive working environment for everyone
- Our training programs are top-notch (LinkedIn Learning, Mentorship program, Solace Academy)
- We like to brag about our stellar customer lineup
- We are social - we like to keep things simple and fun
- We are one of the top-ranked employers on Glassdoor
- We have a sense of humour and make cool videos like this

Not sure you meet all the requirements? We still want to hear from you — we know experience comes in all forms, so don't let that hold you back from applying

We believe that diversity in all of its forms drives innovation and growth, both in business and in life. This is why we strive to create an enriching and safe workplace where you can be who you are. It is only because of you that we can be us.

If you want to do the best work of your career and feel supported eve