Information security analyst

Bizagi is a fast-growing market leading provider of BPM Enterprise software. Our exciting triple digit growth means we need to recruit the best talent in the industry. We are truly passionate about our products and market opportunity and looking for like-minded people.
Bizagi has an innovative go-to-market strategy by generating substantial market interest through its free modelling software, downloaded by over 2 million companies to date. The Information Security Analyst is responsible for supporting CSO on implementing corporate security and compliance initiatives.

Information security analyst in developing information security and privacy policies, standards and procedures, as well as any other documentation related with compliance projects and security/privacy models (ISO 27001, FedRAMP, SOC, HIPAA, GDPR etc).

Information security analyst in conducting information security risk assessments, vulnerability assessments and incident handling procedures.

Work in collaboration with different Bizagi´s departments in monitoring information security controls effectiveness.
Develop information security control tests across the Company, reporting results to CSO.
Stay up-to-date on new and emerging cloud security technologies and propose security solutions to meet Bizagi`s needs.

Respond Request for Proposals questionnaires associated to information security practices and controls.

Measure, analyze and propose improvements associated with information security KPIs.

Bachelor’s degree in information technology, computer science, management information systems, or a related field.

Optional Information Security Postgraduate degree or information

security industry certifications (ISO 27001, CCSP, ITIL, CISA).

Experience

4 years of general professional experience. At least 3 years of information security specific experience.
Mandatory participation on at least 1 process of implementation and certification of ISO
27001:2013.

Skills

Industry certifications as ISO 27001 Internal/Lead Auditor, CISSP,
CCSP, among others.
Experience in cloud security.
Experience in implementation of information security/privacy models/standards.

Languages
English Advanced level

Profesional Senior

Universitaria

Ingeniería de sistemas Computación

Ingeniería electrónica

4 años de experiencia

1 Vacante