Product Security GRC Analyst

Summary

Data has never been more valuable and vulnerable. As cybercriminals become more sophisticated and regulations become stricter, organizations struggle to answer one key question: “Is my data safe?”

At Varonis, we see the world of cybersecurity differently. Instead of chasing threats, we believe that the most practical approach is to protect data from the inside out. We’ve building the industry’s first fully autonomous data security platform to help our customers dramatically reduce risk with minimal human effort.

At Varonis, we move fast. We’re an ultra-collaborative company with brilliant people who care deeply about the details. Together, we’re solving interesting and complex puzzles to keep the world’s data safe.

We work in a flexible, hybrid model, so you can choose the home-office balance that works best for you.

We are searching for a communicative and growth-oriented Product Security GRC Analyst to join our highly collaborative Product Security team. This individual will work within a team responsible for handling the intake, prioritization, and completion of Client security proposals, contracts, and questionnaires to support our Global Sales organization. The role also focuses Product Security aiding initiatives such as security Architecture Design, Vulnerability Management, and more. Our product Security team upholds a high standard when it comes to utilizing cutting edge products, technology, and best practices.

Responsibilities

• Coordinate, answer, and manage customer RFIs/RFPs, security questionnaires, and contract requirements.
• Collaborate with various business units to collect answers and address client inquiries as well as validate policy compliance of company responses prior to client delivery.
• Maintain and build out Product Security knowledge base of general processes and frequently asked security questions.
• Support Sales and customer success in any security aspects.
• Collaborate With Varonis BU(Development, Devops, CISO Office, FI, HR) For managing product security Certification Process (Build Procedure and create Evidence)
• Aid in additional Product Security initiatives such as security Architecture Design, Vulnerability Management, and more.
  
  

• General knowledge of information security principles and practices within the industry.
• Technical and Architecture product security Knowledge and experience.(Product Company , Security product is advantage)
• Experience with regulatory compliance standards and frameworks such as Fedramp, PCI, ISO27001, NIST 800-53, SOC 2, and GDPR.
• Uphold organization, prioritization, and coordination of multiple responsibilities in accordance with upcoming deadlines and appropriate levels of urgency.
• Excellent research and analytical skills.
• Aptitude to work independently as well as with others, both internal and external, as well as general can-do attitude.
• Fluency in English language; excellent oral and written communication skills