Introduction to PurpleBox
PurpleBox is a pioneering technology consulting company that specializes in leveraging cutting-edge technologies to solve complex business problems. As a leading provider of Cybersecurity, Cloud Computing, and DevOps consulting services, we empower businesses to manage their risks more effectively and achieve their goals. Our team of experts is dedicated to delivering innovative solutions that meet the evolving needs of our clients, and we are now seeking talented professionals to join our ranks as Information Security Risk and Compliance specialists.
Job Overview
We are excited to offer multiple Information Security Risk and Compliance positions, ranging from entry-level to mid-senior level, with options for internship, part-time, or full-time employment. As a key member of our collaborative team, you will play a vital role in driving the success of our clients by working on risk assessment, compliance, and cybersecurity projects. This is a remote position that offers an immediate start for the right candidate, providing a unique opportunity to join a dynamic team and contribute to the growth and development of our company.
Key Responsibilities
- Manage and execute day-to-day information security risk and compliance operational activities, ensuring the effective implementation of our clients' security governance, risk management, and compliance projects.
- Develop and recommend tailored information security policies, standards, procedures, checklists, and guidelines that align with generally recognized security concepts and meet the specific requirements of our clients.
- Identify and document specific security issues, propose resolution options, and interpret matters from the perspective of involved stakeholders, demonstrating a deep understanding of the complex security landscape.
- Communicate regularly with teams and staff as part of risk assessments, follow-up on open issues, status tracking, and other miscellaneous items, ensuring seamless collaboration and effective issue resolution.
- Independently design, recommend, plan, develop, and support the implementation of project-specific security solutions that meet the unique requirements of each client, leveraging your expertise in cybersecurity and risk management.
- Manage remediation of identified risks and vulnerabilities, identifying responsible parties, tracking progress, and providing regular reporting to all constituents, ensuring that our clients' security posture is continuously improved.
- Provide regular reporting metrics on the current state of the program, offering valuable insights that inform strategic decision-making and drive business growth.
- Perform other duties as assigned, demonstrating your flexibility and commitment to delivering exceptional results in a fast-paced environment.
Essential Qualifications
- Bachelor's degree in Computer Science, Information Technology, Business Administration, or a related field, providing a solid foundation in the principles of information security and risk management.
- Experience in information security risk assessment, compliance, and/or security operations, with a deep understanding of the complex security landscape and the ability to apply this knowledge in real-world scenarios.
- Previous experience in one or more of the following areas is highly desirable:
- IT Security Strategy and Management
- Risk Management, IT Audit, and Compliance
- Network, System, Database administration, support, and/or help-desk experience
- Application Security, Software Development
- Security Monitoring, Data Loss Prevention, Incident Response
- Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate complex security and risk-related concepts to both technical and non-technical audiences.
- Strong analytical skills to analyze security requirements and relate them to appropriate security controls, demonstrating a deep understanding of the complex security landscape.
- Working knowledge of relevant security regulations, standards, and frameworks, including SOC2, ISO27000, PCI, HIPAA, and NIST CSF, ensuring that our clients' security posture is aligned with industry best practices.
Preferred Qualifications
- Professional certifications such as CISM (Certified Information Security Manager), CISA (Certified Information Systems Auditor), or other similar credentials, demonstrating your expertise and commitment to the field of information security and risk management.
- Advanced degree in a related field, such as a Master's degree in Information Security, Cybersecurity, or a related field, providing a deeper understanding of the complex security landscape and the ability to apply this knowledge in real-world scenarios.
- Experience working with cloud-based technologies, such as Amazon Web Services (AWS), Microsoft Azure, or Google Cloud Platform (GCP), and familiarity with cloud security best practices.
- Knowledge of emerging technologies, such as artificial intelligence, machine learning, and the Internet of Things (IoT), and their potential impact on information security and risk management.
Career Growth Opportunities and Learning Benefits
At PurpleBox, we are committed to the growth and development of our team members, providing opportunities for professional development, training, and education. As an Information Security Risk and Compliance specialist, you will have access to a range of resources, including:
- Comprehensive training programs, designed to enhance your skills and knowledge in information security and risk management.
- Mentorship opportunities, providing guidance and support from experienced professionals in the field.
- Access to industry-leading conferences, seminars, and workshops, ensuring that you stay up-to-date with the latest developments and trends in information security and risk management.
- Opportunities for career advancement, as we continue to grow and expand our services, providing a clear path for professional development and advancement.
Work Environment and Company Culture
At PurpleBox, we pride ourselves on our collaborative and dynamic work environment, where our team members are encouraged to share their ideas, expertise, and experiences. We foster a culture of innovation, creativity, and continuous learning, providing a supportive and inclusive environment that allows our team members to thrive. As an Information Security Risk and Compliance specialist, you will be part of a talented team of professionals who are passionate about delivering exceptional results and making a meaningful impact in the field of information security and risk management.
Compensation, Perks, and Benefits
We offer a competitive compensation package, including a salary range that reflects your experience and qualifications, as well as a range of benefits, including:
- Comprehensive health insurance, providing peace of mind and financial security for you and your family.
- Retirement savings plan, helping you to plan for your future and achieve your long-term financial goals.
- Paid time off, providing opportunities for rest, relaxation, and rejuvenation.
- Professional development opportunities, including training, education, and conference attendance, ensuring that you stay up-to-date with the latest developments and trends in information security and risk management.
Conclusion
If you are a motivated and talented professional with a passion for information security and risk management, we encourage you to apply for this exciting opportunity. As an Information Security Risk and Compliance specialist at PurpleBox, you will have the chance to work with a dynamic team of experts, contribute to the growth and development of our company, and make a meaningful impact in the field of information security and risk management. Don't miss out on this opportunity to take your career to the next level – apply now and join our team of talented professionals!
Apply now and take the first step towards an exciting and rewarding career in information security and risk management!
Apply Now