Position: Compliance Manager
Company: Reply
Category: Security
Experience required: 3y
English level: fluent
Published: 2022-09-01T00:00:00+03:00

The Technical Compliance Specialist will ensure that information system controls and monitoring systems are operating effectively to prevent, detect and respond to cyber-criminal threats and other risks to corporate information and operational technologies. 

The Technical Compliance Specialist  is the central point of contact within the Information Security related initiatives or projects, including leading activities related to risk assessment, security awareness and application of necessary security controls and technologies. 

Assist leadership with improving policies and processes including providing best practice and workflow guidance. 

The Technical Compliance Specialist is a collaborator and consensus builder capable of maintaining and cultivating successful working relationships with internal and external stakeholders; a person who proactively establishes/ develops strong partnerships with key stakeholders across the global organization.

**Requirements**
• 3+ years of recent experience in analyzing and reporting results of vulnerability assessments and penetration tests
• In-depth knowledge and understanding of IT Security controls, risk and compliance management, and IT security requirements in relation to information and application
• Ability to identify processes needing improvement, and to recommend improvements
• Excellent organizational and problem-solving skills
• Focus on achieving goals through teamwork
• Proven ability to manage multiple complex projects while charting a course of action that effectively and efficiently assists the organization and department in fulfilling and achieving goals, initiatives, and objectives.
• Demonstrates professional communication etiquette
• Excellent written and verbal communication skills

**Responsibilities**
• Create and run all the documentation according to SOC2 requirements
• Work with third-party vendors to run SOC2 assessment 
• Develop, maintain and implement information security policies, standards and procedures and ensure projects related to Information Technology infrastructure adhere to Security by Design principles.
• Experience of IT Security aspects towards key areas like Cloud Computing, Cyber Risks, Network Security, database management systems, IT general controls (ITGC), SSAE 16 (SOC 1, SOC 2), ISO 27001:2013, HIPAA, HITRUST.
• Expertise in identifying Risk and Risk management and Business Continuity Management, Security and Compliance Audit Experience, drafting policy and procedure.
• Serve as an expert resource for information privacy and security.
• Provide program support for all matters related to information privacy and security related policies and procedures.
• Manage, measure, and report on the activities and performance against a variety of security and privacy frameworks.
• Work with stakeholders to manage security incidents until incident is closed out
• Develop test plans and detailed test procedures to assess operating effectiveness of the IT General Computer Controls for Information Security, Change Management, and IT Operations.

**What Reply offers**
• Working with the leading product on the US and Global market
• Real opportunity for professional growth and self-improvement
• Small and focused agile teams
• Work from home or co-working space (we cover co-working cost)
• Access to online courses, books and audio-books
• Ability to focus on your tasks — lack of bureaucracy and micromanagement
• Culture of openness — easy communications and access to anyone
• Amazing and accessible CEO who is ready to help
• Corporate celebrations and fun activities, some of them unforgettable
• Awesome colleagues and pleasant working atmosphere.