About the Role
Working under the Compliance Manager, the Security and Compliance Analyst is a key member of Validity's Security Operations team. With a focus on information security knowledge and experience, the Security and Compliance Analyst will assist the team in maintaining Validity's industry compliance certifications and audit requirements, assisting with the sales support process, and reviewing and following up on logs and alerts from the SIEM solution. Efforts will include strengthening security and compliance standards, continuously maintaining the established ISO 27001/27701 certification and SOC2 programs, and participating in sales-focused due diligence engagements for customers and prospects.
Position Duties and Responsibilities

• Support the sales process by completing fielding due diligence requests, completing questionnaires, and redlining security addendum documents as needed
• Support design and implementation of systems and processes to track, monitor, and report compliance with information security and compliance policies and procedures as well as program performance
• Monitor and respond to alerts generated by the Security Information Event Management (SIEM) system
• Assist with Validity's external SOC 2 and ISO 27001/27701 assessments
• Gain a thorough understanding of Validity's products and services to identify where new compliance and security efforts could minimize operational risk
• Collaborate with management and key stakeholders on information security and compliance program development, maintenance, and enforcement to minimize Validity's risk exposure
• Maintain vulnerability management dashboards from various sources (Tenable, AWS, Snyk)
• Support KPI collection and reporting results to make continuous compliance program improvements
• Collaborate on critical security, compliance, and IT projects to ensure that security policy/risk issues are addressed throughout the project life cycle
• Conduct internal user access and other compliance related reviews throughout the year

Required Experience, Skills, and Education

• Minimum 2 years of work experience in an information security or compliance-based role
• Experience participating in SOC 2, ISO 27001, PCI, or equivalent audits
• Experience processing due diligence and RFP documentation and questionnaires
• 1 years of knowledge of AWS and Azure Cloud
• 2 years of experience with Incident Response
• Familiarity with vulnerability management program methodologies
• Experience with security-related technology and toolsets
• Ability to maintain a professional, positive demeanor in high-pressure circumstances
• Ability to look creatively at the big picture, to follow trends beyond obvious attributes
• Collaborative mindset - a track record of cross-functional success in a team environment
• Experience managing multiple projects/issues concurrently
• Excellent written and verbal communication skills

About Validity
For over 20 years, tens of thousands of organizations across the world have relied on Validity solutions to target, contact, engage, and retain customers - using trustworthy data as a key advantage. Validity's flagship products - Everest, DemandTools, BriteVerify, and GridBuddy Connect - are all highly rated, #1 solutions for sales and marketing professionals. These solutions deliver smarter email campaigns, more qualified leads, more productive sales, and ultimately faster growth.
Validity is a truly unique company - massive revenue growth, top-tier investors, 5-star product ratings, proven ability to acquire and integrate top tech companies and welcome them into the Validity family, a winning culture, and a work environment that fosters hard work, trust, and fun.
Headquartered in Boston, Validity has offices in Tampa, Denver, London, Sao Paulo, and Sydney. For more information, connect with us on LinkedIn, Instagram, and Twitter.
Validity is proud to be an equal opportunity employer. We are committed to providing equal employment opportunities to all employees and applicants for employment regardless of actual or perceived race, color, ancestry, national origin, citizenship, religion or creed, age, physical or mental disability, medical condition, AIDs/HIV status, genetic information, military and veteran status, sex, parental status (including pregnancy and pregnancy-related conditions, childbirth, post childbirth, nursing mother, parent of a young child and parent of a foster child), gender (including gender identity and expression), sexual orientation, marital status (including registered domestic partner status), or any other characteristic protected by applicable federal, state, or local law.
Please review our Applicant Privacy Notice before submitting any information: Applicant Privacy Notice