InfoSec Governance & Risk Specialist — Remote-Eligible

Zoox Inc.; Foster City (CA); Hybrid; Confidential; Full time

Job summary

Zoox Inc. in Foster City, CA seeks an Information Security Governance Specialist to support day-to-day assurance operations, policy compliance, and risk management across diverse IT environments including cloud and on-premises data centers.

The role requires a Master’s degree in a relevant field and at least 3 years of GRC, security auditing, or consulting experience. Telework is permitted within commuting distance to the worksite.

Qualifications

• Master’s degree or foreign equivalent in Computer Science, Information Security, Cybersecurity or a relevant information security specialty.
• Requires 3 years of experience in Governance Risk and Compliance, Information Security Audit or Information Security Consulting.
• Performing third party security assessments and risk management activities.
• Working with NIST 800-53 or NIST-CSF and ISO 27001 and CIS controls.
• Working with SOC2 and performing trust service criteria assessments.
• Working with enterprise IT data centers, large-scale transaction processing environments, external hosted services and cloud computing environments.
• Working with security management tools, vulnerability scanners, file integrity monitoring or configuration monitoring and perimeter technologies, router, firewalls, web proxies or intrusion prevention.

Responsibilities

• Support the day-to-day assurance operations related to policy compliance, organizational policies and security requirements, process and risk management functions, and information security consulting.
• Collect and manage data from multiple systems to allow for proper reporting of the Information Security program effectiveness through risk analysis and trends.
• Work with diverse IT architectures and enterprise IT data centers, large-scale transaction processing environments, external hosted services, and cloud computing environments.
• Perform risk assessments and execute tests related to governance, risk, and compliance.

Skills

Governance & Compliance

Security auditing

Risk management

Policy compliance

Education

Master's degree in CS/Info Security

Tools

Vulnerability scanners

File integrity monitoring

Configuration monitoring

Perimeter security

Firewalls

Web proxies

Intrusion prevention

Job description

Zoox Inc. in Foster City, CA seeks an Information Security Governance Specialist to support day-to-day assurance operations, policy compliance, and risk management across diverse IT environments including cloud and on-premises data centers.

The role requires a Master’s degree in a relevant field and at least 3 years of GRC, security auditing, or consulting experience. Telework is permitted within commuting distance to the worksite.