Lead Security Compliance Analyst

OPENTEXT - THE INFORMATION COMPANY

As the Information Company, our mission at OpenText is to create software solutions and deliver services that redefine the future of digital. Be part of a winning team that leads the way in Enterprise Information Management. 

The Opportunity:

The Lead Security Compliance Analyst will have the opportunity to meaningfully contribute to the OpenText Compliance Program in accordance with ISO 27001, ISO 27017, PCI-DSS, SOC1/2/3, HIPAA, SOC2+HITRUST, SOX, CyberEssentials PLUS, and FedRAMP.

The Lead Security Compliance Analyst plays a key role in the continued development and maturity of an ever-growing Security Compliance Program that supports the delivery of compliance certifications to support customer security requirements.
In this role, you will be involved in managing/supporting and sustaining the various compliance programs by working collaboratively with internal teams, SMEs, external customers, vendors, auditors (external & internal), and other stakeholders.

You Are Great At:

• Interfacing with auditors, articulating control implementation and impact, and establishing considerations for applying security and compliance concepts to a technical cloud environment.
• Performing the role of trusted advisor with technology and business stakeholders to drive, track, and resolve all aspects of compliance readiness and audit execution.
• Collaborating with other team members to support the delivery of multiple, simultaneous audits and certifications (both new and existing) within the OpenText portfolio
• Supporting the delivery of audit milestones to ensure audit timelines stay on target by proactively identifying, escalating, and coordinating the resolution of roadblocks and compliance risks.
• Effectively communicating compliance activity results, including status, workflow steps, remediation, and reporting, to a broad audience including peers and senior leaders.
• Contributing to metrics and dashboards for reporting on compliance program statuses.
• Participating in, or potentially leading, gap assessment, compliance readiness, and compliance monitoring activities.

What It Takes:

• 4+ years of experience in IT audit/compliance or infosec-related roles
• Detailed understanding of evaluating the design and effectiveness of controls and experience working with auditors/regulators for compliance assessments
• Experience with preparation for and/or assisting assessment activities (SOC 1/2/3, ISO 27001, ISO 27017, PCI DSS, HIPAA/HITRUST, SOX, Cyber Essentials Plus, FedRAMP, etc.) through planning, fieldwork, and final report delivery
• Experience with leading/assisting multiple, simultaneous audit engagements for a Cloud Service Provider, encompassing multiple frameworks
• Strong technical, analytical, interpersonal, communication, and writing skills.
• Strong personal characteristics as demonstrated by the following: owners’ mindset, achievement-oriented, self-controlled, self-confident, flexible, approachable, and dedicated.  
• Ability to work both independently and within a global team environment
• Demonstrated strength in working in a high-change environment. 
• Bachelor’s degree in information technology, Business, or related vocations.
• Experience with GCP, AWS, Azure, or other Cloud Service Providers is a plus
• Experience with GRC Tools & Compliance Automation is a plus.
• Industry-standard certifications (CISSP, CISA, ISO 27001 Lead Implementer/Auditor) or equivalent is a plus
• Experience working on nightshifts is a plus
   

OpenText's efforts to build an inclusive work environment go beyond simply complying with applicable laws. Our Employment Equity and Diversity Policy provides direction on maintaining a working environment that is inclusive of everyone, regardless of culture, national origin, race, color, gender, gender identification, sexual orientation, family status, age, veteran status, disability, religion, or other basis protected by applicable laws. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please contact us at hr@opentext.com.