Information Security Manager
We believe in the power of hiring. Because the potential for people to do something outstanding has everything to do with being in the right role, on the right team, at the right time. That’s where Greenhouse comes in – from recruiting to on-boarding, we make software to help every company be great at hiring.
Greenhouse is looking for an Information Security Manager to join our team!
Working in tandem with our Director of Security, you will be on the front lines, acting as a proponent of our Governance, Risk, and Compliance (GRC) program. With the ever growing threat in the cybersecurity landscape, this role will play a key role in bolstering our GRC program by crafting controls and implementing more than just industry standards across the organization. The Information Security Manager will have the ability to foster relationships with a variety of teams and expand their impact outside of the general information security functions.
Learn more about our engineering culture here.
Who will love this job
- A security enthusiast – you're excited about being at the forefront of protecting Greenhouse from ongoing cyber threats from the outside world
- An effective communicator – you are able to convey concepts clearly and effectively to technical and non-technical individuals
- A self-starter – you take initiative and thrive in navigating through tasks autonomously, but aren't afraid to ask for help when necessary
- A detail lover – you hone in on the details and have a penchant for adhering to guidelines
What you’ll do
- Partner with the Security team to conduct risk assessments and treatments.
- Implement and uphold controls to grow and elevate the GRC program
- Update existing security and compliance policies
- Uncover new frameworks and promote security awareness throughout the organization
- Support and monitor biannual internal and external audits
- Manage Greenhouse's Data Privacy program to ensure policies and processes are in place to protect our customer's data
- Build relationships with Greenhouse's business partners to track risks, support internal systems, and assess changes to the environment
You should have
- Familiarity with ISO 27001/27002/SOC 2 and their associated common controls
- Previous experience with Information Security Risk Management principles
- Knowledge of data privacy regulations such as GDPR and CCPA
- An understanding of cloud computing concepts (PaaS, IaaS, and SaaS)
- Expertise in data privacy regulations such as GDPR and CCPA
- Prior knowledge of physical access control systems
- Familiarity with SDLC principles
- Mastery of one or more GRC tools (ex. RSA Archer, Zen GRC, etc.)
- Experience with change management tools (Jira, GitHub, etc.), a plus
- CISA or CISM certification, a plus
- Your own unique talents! If you don’t meet 100% of the qualifications outlined above, tell us why you’d be a great fit for this role in your cover letter
Applicants must be currently authorized to work in the United States on a full-time basis.
If you are based in California, we encourage you to read this important information for California residents linked here.
The range provided is for Colorado-based hires only and will be commensurate with candidate experience. Pay ranges for candidates in other locations other than CO may differ based on the cost of labor in that location. Pay range: $140,000.00 - $180,000.00
#LI-ML1
Who we are
At Greenhouse, we celebrate having a diverse group of hardworking employees – and it hasn’t gone unnoticed. In 2019, we were ranked #4 in Fortune’s Best Workplaces in New York and #5 in their Best Company Culture. We’ve also been recognized as a Best Company for Diversity by Comparably, and have been named to Inc. Magazine’s Best Workplaces list. We pride ourselves on fostering a collaborative culture throughout every step of a Greenhouse employee's journey. From day one of our interview process to executive "Ask Me Anything" sessions, we consistently cultivate an inclusive environment.
For all our employees, we offer a full slate of benefits from competitive salaries, stock options, medical, dental and vision coverage, disability coverage, employer paid life insurance, mental health resources, financial wellness benefits, and a fully paid parental leave program. For US-based employees, we offer flexible vacation, commuter benefits and a 401(k) plan, and for Dublin-based employees we offer 25 days' vacation and a pension plan.
Our success in making companies great at hiring depends on our ability to create a diverse, equitable and inclusive environment. To that end, we’re committed to attracting, developing, retaining and promoting a diverse workforce, and infusing DE&I throughout all of our internal practices. By ensuring that every Greenie is able to bring a diversity of talents to our work, we’re increasingly capable of living out our mission and providing real insight from our products to support our customers. We encourage people from underrepresented backgrounds and all walks of life to apply. Come grow with us at Greenhouse, where we’re building a team to face the world’s increasingly complex and diverse hiring needs.
Want to learn more about our interviewing process? Check out our interviewing at Greenhouse page.
**Due to COVID-19, all Greenhouse employees are working remotely until further notice.**