Security Compliance Analyst | ATL

BetterCloud is the first SaaS Operations Management platform, empowering IT to define, remediate, and enforce management and security policies for SaaS applications. Over 2,500 customers in 60+ countries rely on BetterCloud for continuous event monitoring, quickly remediating threats, and fully automating policy enforcement.

We are a high energy, high growth startup that is seeking an experienced Security Compliance Analyst to interact with Customers and Vendors during the contract stage; to maintain BetterCloud’s SOC policies, procedures, and risk management program; to enforce access controls; and to advise the Product team such that the BetterCloud application complies with security standards set by the industry and by BetterCloud security policies.

BetterCloud has a 3 person security team lead by the CTO, and this team is set to expand in 2018.

Responsibilities

  • Assist the Security Compliance Manager with the SOC 2 policies, procedures, and risk management program. This includes representing BetterCloud during the annual third party audits as well as creating, monitoring, and enforcing new and established security controls
  • Represent BetterCloud and collaborate with the Sales Team, the Success Team, and Department leads during the contract process with our Customers and Third Party Vendors
  • Enforce access control standards and policies
  • Assist with annual staff training on the company security practices and policies as well as during employee onboarding
  • Conduct periodic internal reviews to ensure that compliance procedures are followed
  • Assist with coordination and recording internal investigations of compliance issues
  • Assess product, compliance, or operational risks and develop risk management strategies for assigned areas
  • Consult with corporate attorneys as necessary to address difficult legal compliance issues
  • Assist withthe development or implementation of compliance-related policies and procedures for assigned areas
  • Assist with continuous improvement ofour GDPR compliance program

Qualifications | Required

  • At least 1-3 years of experience with information security governance, risk, and compliance or cloud services and architecture
  • Strong understanding of the controls in the compliance frameworks such as SSAE 16 / SSAE 18 / ISAE 3401, SOC 2, HIPAA, ISO 270001, CSA STAR, NIST 800-171
  • Ability to create policies and procedures to address the controls in compliance frameworks
  • Ability to plan assessments of controls in compliance frameworks
  • Experienced in executing an incident management and response system
  • Self-driven and directed, knows how to prioritize responsibilities on a regular basis
  • Mindset of ‘strive to delight’ for the customers served -- both internal and external.  Look for ways to streamline cumbersome processes and fulfill security requests quickly
  • Experienced with applying policies to cloud-based systems and architectures
  • Detail oriented, process oriented
  • High ethical values

Qualifications | Preferred

  • Experience handling auditors during an SSAE 16 / SSAE 18 SOC 2 Type II audit
  • Understands what GDPR is and how to maintain and monitor for compliance
  • Understands networking, managing certificates, SSH, and  Scrum project management
  • Excellent negotiation capabilities

Compensation | Benefits

  • Competitive base salary
  • Full benefits package
  • Stock options
  • Career growth with an industry innovator

Meet Some of BetterCloud's Employees

Valeria Y.

Sales Development Representative

Valeria operates on the front lines as a customer’s first point of contact. She educates prospects on what the team does to help align client goals with BetterCloud.

Jesse F.

Senior Customer Success Manager

Jesse meets face-to-face with customers to make sure they’re maximizing the value of BetterCloud. Then she brings feedback to the Product Team to inform potential offerings that meet more needs.


Back to top