Sr. Security & Compliance Analyst

At InStride, it's simple.
We believe the more you invest in your people, the more skilled they become, and the better your organization performs.
Our mission to bring career-aligned, debt-free education to employers and their workforce has created pathways for 52,000+ Learners to accelerate their careers with 3,100+ learning options.
Our teams are tied together by a recognition of how impactful education can be for one's career, livelihood and community. Our commitment to the success of our Learners is what defines us. To get a better feel for our culture, watch more here .
Candidates must be located in one of the following states to be considered eligible for employment: AZ, AR, CA, CO, CT, FL, GA, IL, KS, LA, MD, MA, MI, MO, NV, NH, NJ, NY, OH, TX, VA, WA, WI.
What we're looking for:
As a Sr. Security & Compliance Analyst on the InStride Security team, you will be responsible for ensuring that our organization maintains a strong security posture and complies with industry regulations and standards. Your expertise in risk assessment, compliance frameworks, vulnerability management and security controls will be vital in identifying and mitigating potential risks. You will collaborate closely with cross-functional teams, including Engineering, IT, Legal, People & Talent and Operations, to implement effective security policies and procedures. The company will look to you as our SME to help us identify, communicate, mitigate and remediate threats and obstacles we face as an organization every single day. You will also be accountable for ensuring InStride maintains compliance with applicable laws, licenses, and regulations in the regions where we do business. This role reports to the Director, IT & Security.
Who you are:

• You have five years of security, privacy and compliance experience, including building controls in the technology space
• Proven experience in the area of audit, compliance and information security (i.e. auditor, compliance officer, security engineering, or leading technical teams that have significant compliance requirements)
• Compliance and regulatory knowledge in the technology and software industry. CCPA, GDPR, ISO 27001, PCI, NIST and/or SOC 2 experience preferred
• Proven track record to translate regulatory standards into technical requirements for software development teams operating in a Public Cloud environment
• Demonstrated knowledge of how to deploy and operate SaaS workloads in the AWS and GCP cloud.
• Previous experience as an SME with tools designed for patch management, vulnerability management and achieving resolution within the service level.
• Promote, drive & track the adoption of centralized security and compliance services across the organization
• Outstanding communication skills appropriate for executive-level audiences visually presenting security and compliance goals, relationship to business goals, and other relevant success criteria.

How you will create impact:

• Conduct detailed risk assessments to uncover potential security flaws and compliance gaps
• Collaborate with internal teams to create and put into action security policies, standards, and processes that are in line with industry-standard methodologies and regulatory requirements
• Develop and implement risk mitigation strategies, controls, and corrective action plans to lead identified risks and ensure compliance with frameworks (e.g., NIST, ISO, SOC 2, PCI DSS, GDPR, CCPA) international, cybersecurity and data protection requirements
• Assist with internal and third-party security, privacy, and compliance vendor risk assessments
• Regularly analyze security logs, reports, and audit findings to supervise and assess the efficacy of existing security controls and measures
• Stay ahead of changing regulatory and compliance standards, and be proactive in identifying areas where the organization's security posture may be jeopardized
• Conduct regular audits and assessments to ensure adherence to established security policies and procedures
• Review system configurations, detect vulnerabilities, offer corrective measures in collaboration with teams and drive remediation efforts to closure within the service levels
• Prepare comprehensive reports and presentations on security compliance risks, findings and recommendations for management and team members
• Assist in developing and delivering security awareness training programs to educate employees on security policies, procedures, and best practices
• Work with teams with varied strengths on data defense, data governance, threat and risk management, artificial intelligence, and regulatory compliance
• Be available 24/7/365 to collaborate with teams on potential security and data privacy incidents

Target base compensation amount for this role outlined below. Final offer amounts are determined by multiple factors including candidate experience and expertise and may vary from the amounts shown below.
$100,000 - $120,000 USD
Don't meet every single requirement? Studies have shown that women and people of color are less likely to apply to jobs unless they meet every single qualification. At InStride we are dedicated to building a diverse, inclusive, and authentic workplace, so if you're excited about this role, but your past experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this role!
Benefits @ InStride
As an organization that champions investing in people, it's critical we walk the talk. That's why every InStride employee is eligible to enroll in 3,100+ online certificate and degree programs through our Step Forward program. Unlike traditional tuition reimbursement programs, InStride covers your tuition upfront, regardless of your course of study, degree type, or school - eligible to all employees starting Day 1.
This role is also eligible for the following benefits:

• 401(k) plan with company match
• Flexible vacation policy
• Paid family leave
• Best-in-class health care benefits
• And more!

InStride Diversity and Inclusion Statement
At InStride, we foster a culture of belonging, we support authenticity and intersectionality, and we embrace and appreciate our differences. We do this by building a diverse pipeline of talent and ensuring equitable access to opportunities, information and leadership. We celebrate diversity and are committed to creating an inclusive environment for all employees.
If you have a disability or special need that requires accommodation, please let your recruiter know.
Policies & Disclosure
Effective November 1, 2021, all new hires must be fully vaccinated against the COVID-19 virus unless they have been granted a reasonable accommodation. If you are offered employment, this requirement must be met by your date of hire, unless a reasonable accommodation is approved by the People & Talent team in writing.
For questions on how we use personal information of job applicants, please refer to InStride's Job Applicant Privacy Policy.
Beware of recruiting scams. InStride does not require a financial transaction or any financial account information to be eligible for employment. If you receive a message purporting to be from InStride asking you for a financial transaction, your financial account information, or any other sensitive information, please do not respond and let us know immediately at recruiting@instride.com .
About InStride
InStride is a tech-enabled services company that is pioneering new approaches to workforce education solutions with a mission of driving meaningful social and business outcomes by unlocking access to life-changing education. In collaboration with quality academic institutions, we enable employers to provide career-aligned, debt-free education through a personalized, digital platform and a consultative service model. To learn more, visit: https://www.instride.com/