Address
Form of work
SalaryAbout Us
WorkForce Software is the #1 rated workforce management solution for large, global employers and the first to deliver integrated employee communication capabilities. The company’s WorkForce Suite adapts to each organization’s needs—no matter how unique their pay rules, labor regulations, and schedules—while delivering a breakthrough employee experience at the time and place work happens. Enterprise-grade and future-ready, WorkForce Software is helping some of the world’s most innovative organizations optimize their workforce, protect against compliance risks, and increase employee engagement to unlock new potential for resiliency and optimal performance. When your employees include deskless or hourly workers, unionized, full-time, part-time, or seasonal, WorkForce Software makes managing your global workforce easy, less costly, and more rewarding for everyone.
Over one thousand organizations with more than 6 million users in over 80 countries rely on WorkForce Software solutions to streamline compliance, reduce labor costs, provide more intuitive tools to their employees, and achieve strategic HR on a global basis.
We value effort, positivity, and collaboration. As a software company, founded by techies, we’ve got an unending appetite for the cutting edge. Competing against products from much larger firms challenges us to design the next great technology, a step ahead of everyone else!
Summary
The Senior Security Specialist will work closely with and support the Global Workforce software Sales team to provide security expertise during presentations, RFP’s, and security questionnaires. This role will also be responsible for our external and internal risk programs. Which will consist of both customer and vendor reviews, as well as assessing, scoring, and driving our internal risk process.
You will participate in various audits that will contribute to verifying compliance with company policies, procedures, regulations, and customer requirements. The Senior Security Specialist will recommend ways to enhance security, availability, processing integrity, confidentiality, and privacy controls, including changes to policies and procedures.
This role plays an integral part in the implementation, maintenance, and enforcement of multiple data security standards, processes, and initiatives.
The Senior Security Specialist will play a large role in providing assurance to our customers of the security and privacy controls we have in place, as well as helping to evolve our security posture overall within the organization.
Responsibilities
- Assist with and support internal teams including the Audit Manager to ensure teams have the required documentation to pass various audits including SOC 1 Type II, SOC 2 Type II, ISO audits, TISAX, and any self-certification audits, and to collect required documentation.
- Meet with customer and potential customers to discuss security and privacy controls.
- Provide support documentation for sales/customer requests as needed.
- Define, Manage, and enforcement of security best practices and frameworks.
- Drive risk management across organizational functions throughout Workforce Software
- Continuous improvement through utilizing metrics to ensure that endpoints and cloud infrastructure are meeting our standards.
- Ownership of customer requests for information about our security and privacy programs.
- Maintain and develop security and privacy collateral.
- Assist with security and privacy risk assessments and analysis. Develop risk-based audit plans. Make recommendations for systems operations and process improvement.
- Test and evaluate IT systems and controls for conformity with industry standards, WorkForce Software policy, or for efficiency, accuracy, and security.
- Track, document, and review customer concerns/questions for timely remediation
- Participate in gap analyses to determine areas for improvements to mature our security posture.
- Ensuring departments test Business Continuity Plans annually as part of the BC program initiative.
- Helping to close vulnerability issues that have an impact on external audit performance.
- Provide recommendations for tests of security and privacy controls.
- Provide recommendations for system operations and process improvement relating to information security and audit.
- Manage and oversee assigned projects.
- Any additional audits as required.
Requirements
- A “can-do, get-it-done” attitude.
- Experience participating in ISO 27001, ISO 27017, ISO 27018, ISO 27701, SOC 1, SOC 2, EU-US Data Privacy Framework, FedRAMP, StateRAMP, NIST SP-800-53, HIPAA, PCI DSS, TISAX, CIS or similar audits.
- Experience with writing, enforcing, and improving security policies.
- Experience owning, managing, driving, and reporting on Risk in a mature organization.
- A thorough understanding of all aspects of computer, network, and application security.
- Excellent oral and written communication skills.
- Excellent ability to represent our security and privacy program to customers via calls and presentations.
- Strong analytical and problem-solving skills, as well as excellent judgment, and self-motivation.
- Advanced organizational and multi-tasking skills
- A broad knowledge of the technical infrastructure and architecture of systems including Linux, Windows, and other operating systems, plus networks, database, and enterprise applications.
- Experience and expertise in conducting control reviews and risk assessments
- Experience in assessment of IT infrastructure and network and security reviews.
- A self-starter and ability to work independently and as part of a group
- Keep abreast of industry security trends and developments, as well as applicable government regulations.
Desired Skills
- Experience in Cloud Security
- Experience leading and conducting Business Impact Assessments (BIA)
- JIRA and Confluence experience
- Privacy experience
- ITIL experience/certification
- GRC experience
Education
- Bachelor’s degree OR equivalent experience.
- Industry recognized security and/or audit certifications (CISA, CRISC, CISSP, CISM, etc.)
Travel
- 0 to 15%. Opportunity for international travel.
Why You Should Join the WorkForce Team?
- Unlimited PTO
- Flexible Hours / Work from Home Policy
- 401k with Company Match
- Performance Bonus
- Career Development and Training – Be the CEO of your career!
- Company paid LinkedIn Learning subscription.
- Diversity, Equity, and Inclusion Initiatives including committees such as:
- Women for Inclusion
- Age: Unity Beyond Years
- Racial Equality/Discrimination
- Mental and Physical Ability
- WorkForce Pride Network
- Global Perspectives
- Band of Veterans
- Health and Wellness / Gym Reimbursement
- Full Comprehensive Health Benefit Package
- Parental Leave
- Community Outreach Programs and Charitable Support
This job description is not intended to be all inclusive, and employee will perform other reasonably related business duties as assigned by the immediate supervisor and other management as required.
To maintain our goal of remaining a diverse and inclusive company, WorkForce Software advocates for and promotes a diverse, equitable, safe, and professional workplace where all people feel welcomed and empowered. We are committed to creating an environment that supports and celebrates the full range of our individual and collective differences, so that everyone can do their best and most innovative work, on the job and in our communities.
WorkForce Software is committed to the full inclusion of all qualified individuals. As part of this commitment, WorkForce Software will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact our Talent Acquisition Department at careers@workforcesoftware.com, 1-833-987-3831.
WorkForce Software is an Equal Opportunity Employer.
