Lead, Information Security & Compliance – Arcules – Irvine, CA

Job title: Lead, Information Security & Compliance Company: Arcules Job description: Lead, Information Security & Compliance $135000 - $165000 / year About the Company We're Arcules: an innovative, bold member of the Canon family. We move fast, operate on trust, and value our employees. Our engineering team is passionate about what they do at work and play. So come as you are, and join us on this path to transform video into intelligence with cloud-native development and bleeding-edge technologies. Let's grow together. Arcules offers excellent benefits, including top-tier PPO and HMO medical plans, four weeks of vacation, three weeks of sick leave, 401(k) plan after three months of employment (4% company match), an on-site gym and game pavilion, an awesome work environment and more. Overview of the Job As an Information Security & Compliance Lead, you will work in a cross-functional team environment with a variety of team members including Product, Finance, Marketing and more. You will be part of the Arcules Information Security Program Office (AISPO) and participate in all aspects of managing client and vendor risk assessments and ensuring compliance with client contractual, regulatory and legal security requirements. You will help execute sound risk management processes and technical controls to meet customer needs, satisfy external audit requirements and address internal security objectives. Responsibilities • Develop, implement and maintain policies, processes and controls to raise the overall security and compliance posture of the Arcules Information Security Program. • Maintain and grow our day to day threat and vulnerability management, identify risk tolerances, implement treatment plans, and communicate information about residual risk. • As directed, drive risk analysis and operate controls and help implement industry best practices for teams across the organization. • Engagement with Arcules team members in detailed research and analysis of technical and process centric requirements in support of new initiatives, continuous improvement, and remediation efforts as related to security and risk management initiatives. • Drive documentation of processes, risks and controls. • Coordinate with stakeholders to ensure all policy exceptions/risk acceptances are managed in accordance to Arcules Information Security policies and standards. • Other duties as assigned Minimum Qualifications • Bachelor's degree (Masters preferred) in business administration, computer science, information technology, law or legal studies, or a related field of study, or equivalent work experience. • Experience with at least one industry-standard risk/control framework such as: • AICPA SOC 2, CIS Top 20, COSO, NIST, CSA, etc. • Knowledge and experience with information security standards, rules and regulations related to information security and data confidentiality: APPI, GDPR, CCPA, etc Skills/Training Desired • Familiarity with at least one of the industry authoritative sources such as NIST, SOC2, ISO27001, COBIT or CCPA standards • Familiarity of cloud based security framework such as CSA Star or HITRUST CSF desirable • CISA and or CRSC Qualifications • 5+ years of experience working in the technology risk and compliance field • Experience working in or with a technology organization is preferred • Good understanding of key information security concepts and principles • Being Awesome! PI194139251 Expected salary: $135000 - 165000 per year Location: Irvine, CA Job date: Fri, 14 Oct 2022 04:20:30 GMT Apply for the job now! Apply tot his job