Security Compliance Analyst

奥決歩穩; Santander; A distancia; EUR 40.000 - 80.000; Jornada completa

Descripción de la vacante

An established industry player is seeking a Security Compliance Analyst to join their Information Security team. This role is pivotal in ensuring compliance with security standards and regulations while collaborating with global teams. You will guide and support compliance efforts, educate stakeholders on emerging security laws, and maintain comprehensive documentation. The ideal candidate will have a strong background in information security, experience with compliance frameworks, and proficiency in Python scripting. Join this innovative firm and contribute to a diverse and supportive work environment that values respect and equal opportunities.

Formación

• 4+ years of experience in information security with compliance focus.
• Proficient in Python scripting and SQL for database analysis.

Responsabilidades

• Provide guidance on compliance, policy, and regulatory matters.
• Collaborate to identify and mitigate risks ensuring security compliance.

Conocimientos

Information Security

Compliance

Python Scripting

SQL

GDPR Knowledge

Analytical Skills

Educación

Bachelor's degree in Information Technology

Professional certifications (CISSP, CISM, CISA)

Herramientas

OneTrust

Security Assessment Tools

Descripción del empleo

Scopely is looking for a Security Compliance Analyst to join our Information Security team in Barcelona on a remote basis.

At Scopely, we care deeply about what we do and want to inspire play, every day - whether in our work environments alongside our talented colleagues, or through our deep connections with our communities of players. We are a global team of game lovers who are developing, publishing and innovating the mobile games industry, connecting millions of people around the world daily.

What You Will Do

• Work with global teams and business partners to provide guidance and support with compliance, policy, and regulatory matters
• Research and educate teams on emerging security and privacy laws
• Develop and maintain comprehensive documentation of compliance activities, policies, and procedures
• Provide remediation guidance and prepare management reports to track remediation activities
• Assist with security configuration standards for systems and business applications to meet compliance requirements
• Develop and maintain up-to-date knowledge of industry standards, including ISO 27001, GDPR, HIPAA, SOC 2, and other relevant security / compliance frameworks
• Define and document business process responsibilities and ownership of the controls in a GRC tool
• Participate in technical and non-technical projects requiring information security oversight and to ensure policies, procedures and standards are met
• Collaborate with various teams and departments to identify and mitigate risks, ensuring security compliance across all functions
• Maintain and identify areas of opportunity for compliance automation tasks
• Support vendor due-diligence process and help to lead and define overall third party risk management efforts
• Keep up to date and educate stakeholders about the industry’s latest security and technology developments

What We’re Looking For

• Bachelor's degree in Information Technology, Cybersecurity, or a related field. Advanced degree or professional certifications (e.g., CISSP, CISM, CISA) preferred
• Minimum of 4 years of experience in information security, with at least 1 year in a compliance-focused role
• Proficient in creating automation scripts in Python
• Understanding of database construction, querying, and analysis (e.g SQL and similar languages)
• General understanding of Big Data
• Familiarity with OneTrust or similar compliance management platforms
• Strong understanding of privacy laws (such as GDPR, CCPA) and experience in implementing policies to comply with these and other regulations
• Knowledge of best practice standards (e.g. NIST, ISO 27001 / 2, COBIT)
• Strong analytical skills and experience with security assessment tools and methodologies
• Basic knowledge of information security solutions, data loss prevention, intrusion detection and prevention, network security monitoring, vulnerability management, and security testing

At Scopely, we create games for everyone - and want to ensure that the people behind our games reflect that! We are committed to creating a diverse, supportive work environment where everyone is treated with respect. We are committed to providing equal employment opportunities and welcome individuals from all backgrounds to join us & embrace the adventure!

J-18808-Ljbffr