Information Security Operations Specialist

Join Quantifind, a data science technology company focused on combating financial crimes and uncovering criminal networks. As an Information Security Operations Specialist, you will support risk assessments of our business and technical processes and systems. You will work in a fast-paced, Agile environment with regular compliance milestones. Quantifind offers meaningful equity, performance reviews, collaboration across departments, and a supportive environment for professional growth.

• Support risk assessments of business and technical processes and systems.
• Maintain an internal control environment to manage technology risk and comply with regulatory obligations.
• Create, review, and update technical security policies and procedures, ensuring compliance with standards.

• You can ask Engineers and Data Scientists questions and convert their subject matter expertise into technical content an auditor will understand
• You can annotate a diagram showing Layer 2 switching and Layer 3 routing, network segmentation using VLANs, or secure data transfer and storage
• You are a technical writer in the security compliance career track who wants to work at a SaaS company with a culture of compliance
• You like adding to and maintaining an internal control environment which enables us to manage our technology risk and comply with our regulatory obligations while supporting the rapid growth and development objectives of the business
• The NIST 800 series is one of your go-to references
• Professional experience with formal SDLC and change control policies
• Professional experience creating, reviewing and making necessary updates to technical security policies and procedures
• You hold a Bachelor’s degree in a technical field and have 3+ years of experience in a security compliance role
• Outstanding technical writing and verbal communication skills
• Professional experience with SOC 2 or PCI controls and evidence submission to auditors
• Professional experience with Data Privacy compliance concepts and requirements including GDPR, CCPA, and CPRA
• Professional experience using NIST frameworks and ISO 27001
• Great interpersonal skills for mapping between business and technical stakeholders, both inside and outside of your organization
• You hold a professional audit and/or information security certification (CISA, CISSP, CRISC, CISM)
• Conversant with evolving cybersecurity best practices
• Professional experience with customer and vendor management
• Professional experience in technical writing about network architecture, including writing narratives and annotations
• Experience with JIRA and Confluence is strongly preferred
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
• A team player who succeeds in a collaborative environment
• Professional experience interviewing technical subject matter experts to generate the content for responding to complex security compliance questionnaires
• Familiarity with Drata or another security assurance platform is a plus
• Able to work independently and can self-prioritize across multiple ongoing initiatives
• Some exposure to CMMC and FISMA is a plus
• Thorough understanding of IT security principles and procedures
• Familiar with the risk assessment process from intake to completion
• Professional experience evaluating the various risks and requisite controls associated with multi-tenant SaaS architectures