Information Security Operations Specialist

Quantifind; Palo Alto (CA); Hybrid; USD 130,000 - 155,000; Full time

Benefits offered by this job

Competitive salary

Equity

Benefits package

Flexible PTO

401k match

Work-life balance

Job summary

Quantifind in Palo Alto, CA, is seeking an Information Security Operations Specialist to join our Information Security Operations Team. You will help assess risks across business and technical processes and systems in a fast-paced, Agile environment with regular compliance milestones.

Our development culture blends on-site collaboration with remote work, supported by a practical, security-first approach and a focus on regulatory obligations.

Qualifications

• Bachelor’s degree in a technical field with 3+ years in security compliance.
• CISA, CISSP, CRISC, CISM certifications preferred.
• Outstanding technical writing and verbal communication skills.
• Interpersonal skills for mapping between business and technical stakeholders.
• Understanding of IT security principles and practices.
• Experience evaluating risks and controls in multi-tenant SaaS architectures.
• Experience with SOC 2 or PCI controls and evidence submission.
• Familiar with NIST and ISO 27001 frameworks.
• Knowledge of data privacy regulations (GDPR, CCPA, CPRA).
• Know-how on risk assessment lifecycle from intake to finish.
• Ability to create/update technical security policies.
• Experience interviewing SMEs for security questionnaires.
• Writing narratives on network architecture.
• Customer and vendor management experience.
• Knowledge of evolving cybersecurity best practices.
• Experience with SDLC and change control policies.
• Familiar with JIRA/Confluence; Drata a plus.
• CMMC/FISMA exposure a plus.
• Team player; can work independently; self-prioritize.
• US work authorization without sponsorship.

Responsibilities

• Support risk assessments of the business and technical processes and systems.
• Work in a fast-paced, Agile environment with regular compliance milestones.
• Collaborate across teams in Palo Alto and remote settings to improve security operations.

Skills

Security compliance

Auditing

Written communication

Stakeholder mapping

IT security principles

Multi-tenant SaaS risk

NIST/ISO 27001

Data privacy (GDPR/CCPA/CPRA)

Risk assessment process

Security policies

Security questionnaires

Network architecture writing

Customer/vendor mgmt

CMMC/FISMA (plus)

Independent work

Team collaboration

US work authorization

Education

Bachelor’s degree in a technical field

Tools

JIRA

Confluence

Job description

Who You Are

You are a technical writer in the security compliance career track who wants to work at a SaaS company with a culture of compliance. You can ask Engineers and Data Scientists questions and convert their subject matter expertise into technical content an auditor will understand. You can annotate a diagram showing Layer 2 switching and Layer 3 routing, network segmentation using VLANs, or secure data transfer and storage. You like adding to and maintaining an internal control environment which enables us to manage our technology risk and comply with our regulatory obligations while supporting the rapid growth and development objectives of the business. The NIST 800 series is one of your go-to references.

Who You Are

You are a technical writer in the security compliance career track who wants to work at a SaaS company with a culture of compliance. You can ask Engineers and Data Scientists questions and convert their subject matter expertise into technical content an auditor will understand. You can annotate a diagram showing Layer 2 switching and Layer 3 routing, network segmentation using VLANs, or secure data transfer and storage. You like adding to and maintaining an internal control environment which enables us to manage our technology risk and comply with our regulatory obligations while supporting the rapid growth and development objectives of the business. The NIST 800 series is one of your go-to references.

Who We Are

Quantifind helps some of the world’s biggest banks catch money laundering and fraud. Quantifind also works with government agencies to use the same platform to uncover criminal networks and combat adversarial foreign ownership and influence in critical industries. Unlike other players in this space, Quantifind delivers results as Software-as-a-Service (SaaS) with consumer-grade user experiences.

Quantifind is a data science technology company whose AI platform uncovers signals of risk across disparate and unstructured text sources. In financial crimes risk management, Quantifind’s solution uniquely combines internal financial institution data with public domain data to assess risk in the context of Know Your Customer (KYC), Customer Due Diligence (CDD), Fraud Risk Management, and Anti-Money Laundering (AML) processes. Today these compliance processes are burdened by ever-increasing regulatory responsibilities and an expectation of frictionless transactions. Legacy technologies demand increasingly more human resources as the operations expand; Quantifind’s SaaS solution offers a way to cut through the inefficiency and enhance effectiveness simultaneously.

We process terabytes of data each day on our own dedicated Hadoop clusters. We use real-time data services to enable interactive investigations in our APIs and web applications. We use Kubernetes and Docker for our container ecosystem and we develop standalone services in Scala and Python and use Spark for MapReduce jobs.

To help you succeed, we provide a supportive environment that fosters collaboration between teams and team members, where learning and professional growth are considered a key part of your success, and of ours. We offer a flexible work environment with a family friendly work-life balance.

What a Great Candidate Looks Like

• You hold a Bachelor’s degree in a technical field and have 3+ years of experience in a security compliance role
• You hold a professional audit and/or information security certification (CISA, CISSP, CRISC, CISM)
• Outstanding technical writing and verbal communication skills
• Great interpersonal skills for mapping between business and technical stakeholders, both inside and outside of your organization
• Thorough understanding of IT security principles and procedures
• Professional experience evaluating the various risks and requisite controls associated with multi-tenant SaaS architectures
• Professional experience with SOC 2 or PCI controls and evidence submission to auditors
• Professional experience using NIST frameworks and ISO 27001
• Professional experience with Data Privacy compliance concepts and requirements including GDPR, CCPA, and CPRA
• Familiar with the risk assessment process from intake to completion
• Professional experience creating, reviewing and making necessary updates to technical security policies and procedures
• Professional experience interviewing technical subject matter experts to generate the content for responding to complex security compliance questionnaires
• Professional experience in technical writing about network architecture, including writing narratives and annotations
• Professional experience with customer and vendor management
• Conversant with evolving cybersecurity best practices
• Professional experience with formal SDLC and change control policies
• Experience with JIRA and Confluence is strongly preferred
• Familiarity with Drata or another security assurance platform is a plus
• Some exposure to CMMC and FISMA is a plus
• A team player who succeeds in a collaborative environment
• Able to work independently and can self-prioritize across multiple ongoing initiatives
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future

The Opportunity We Offer

As a Information Security Operations Specialist at Quantifind on our Information Security Operations Team in Palo Alto, California, you will work on supporting risk assessments of our business and technical processes and systems. You can expect a fast-paced, Agile environment with regular compliance milestones to measure our collective success.

Quantifind’s development team is centered in Palo Alto, California, and we have a satellite office in Washington, D.C. Quantifind is currently using a hybrid mix of working from home and in the office, with regular in-person touchpoints and shared office space.

A Highlight Of Our Benefits

• Competitive salary
• Company Equity
• Exceptional benefits package
• Flexible Vacation & Paid Time Off
• Employer-matched 401(k) plan
• A fun environment where work-life balance is valued

The base salary range for this full-time position is $130,000 to $155,000. Our salary ranges are determined by role, level, and location, and the range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location, role-related knowledge and skills, depth of experience, relevant education or training, and additional role-related considerations.

We are an equal opportunity employer; we have a fun place to work and a devotion to succeeding together.