Staff Info Security Engineer

Secure Every Identity, from AI to HumanIdentity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.The Security Compliance team’s mission is to strengthen Okta’s position as the leading Identity-as-a-Service solution through a security-first approach to compliance. We are looking for someone with a strong compliance background and experience in the technical implementation of security controls from ISMAP, IRAP Protected, SOC2, ISO 27001, and other international frameworks. The right candidate will have participated in a mature ISMS program, delivered ISMAP compliance, and will play a key role in providing customers with confidence in Okta’s leadership in the identity space. As a Staff Security Compliance Analyst, you will support security initiatives by engaging various process owners in the design, documentation, implementation, monitoring of the appropriate controls in our computing environments, and demonstrating those controls to external auditors. In addition you will plan and lead the private sector compliance initiatives.
The ideal candidate will have hands-on experience with the technical implementation of ISMAP, SOC2 and ISO controls in a cloud-based environment using tools such as Salesforce, Okta, ServiceNow, JIRA and others. This position requires a unique set of skills including project management, and an eye towards future standards and regulations that will impact our customers. If you’re a self-starter who wants to make a difference in global cloud security, we want you on board.
Job Duties and Responsibilities:

Participate in Security Compliance Assessments of the company’s computing environment, with focus on security controls
Facilitate Okta’s ISMAP compliance assessment
Interpret requirements across multiple compliance frameworks
Collaborate to manage and maintain common controls framework for Okta
Scheduling compliance walkthroughs
Ensuring consistent operations and communications across compliance teams
Ensuring visibility into key compliance projects through reporting and metrics
Analyze gaps between current status and future compliance framework needs
Perform controls testing and develop recommendations based on confirmed observations
Work with process and control owners to help them understand the audit results, identify remediation options, and prioritize their closure
As needed, develop appropriate security documentation, including system security plans, information security policies, and risk assessment procedures
Assess security impact on changes to the systems and applications
Identify opportunities for improvement within the Compliance program and build plans to address them

Knowledge, Skills, and Abilities:

5-7+ years of experience in Information Technology or similar, preferably in a Security Governance, Risk, or Compliance (GRC) focused role
Comprehensive understanding of IT Security practices and the Governance, Risk, and Compliance lifecycle
Fluent in English and Japanese
Experience at ISMAP compliant organization(s), or performing ISMAP assessments
Familiarity with Japanese cybersecurity laws and regulations
Knowledge in IT security frameworks and best practices, such as NIST publications, FedRAMP, ISO 27001, CCM, IRAP Protected, ISMAP, BSI-C5, TISAX, SOX, HIPAA, ENS, HDS, and SOC2 Trust Principles and Criteria
Understanding of IT methodologies, such as software development lifecycle and operations
Strong analytical and problem-solving skills and the ability to “think-out-of-the-box”
Strong oral, written and presentation communication skills
Able to work independently or with a team
Bachelor’s degree or higher in Computer Science, Management Information Systems or Accounting, or equivalent experience

#P26228_3602148
#LI-hybridThe Okta Experience

Supporting Your Well-Being
Driving Social Impact
Developing Talent and Fostering Connection + Community

We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one.Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws.If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation.Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.