Senior Analyst, Information Security Risk and Compliance

ChargePoint; United States; Remote; USD 110,000 - 140,000; Full time

Job summary

ChargePoint is seeking a Senior Analyst, Information Security Risk and Compliance to enhance ITGCs, automate governance, risk and compliance processes and maintain SOX, FedRAMP, PCI compliance. The role focuses on coordinating with internal and external auditors, improving control execution, and driving an audit-ready culture across IT systems.

The ideal candidate has extensive experience in IT controls within SAAS environments, strong communication skills, and a proactive, risk-based mindset to

Qualifications

• Bachelor’s degree in General Business, Information Systems, Engineering, Science or a related field with minimum 5 years’ relevant experience.
• 8+ years of internal controls and risk management experience including ITGC SOX, SOC 1/2/3, or IT Internal Audit activities.
• Good knowledge of Sarbanes-Oxley, NIST 800-53, FedRAMP, ISO 27001, NIST CSF.
• Solution-oriented mindset with risk-based approach to identifying and addressing compliance risks.
• Experience working with internal and external auditors.
• Familiarity with SAAS-based applications (NetSuite, Workday, Salesforce, Github) and cloud providers (AWS, Google Cloud).
• Strong written and verbal communication skills and ability to influence stakeholders.
• Excellent organizational skills.

Responsibilities

• Enhance ITGCs and automate processes for efficient GRC program.
• Maintain compliance with SOX, FedRAMP, PCI and other standards.
• Continue building the GRC program with innovation and streamlined compliance efforts.
• Provide leadership to internal functions in access management, change management, and operational procedures.
• Collaborate with auditors and control owners to ensure audit-readiness and effective controls.
• Build reporting to track GRC and security project status for monthly/quarterly reviews.

Job description

About Us

With electric vehicles expected to be nearly 30% of new vehicle sales by 2025 and more than 50% by 2040, electric mobility is becoming a reality. ChargePoint (NYSE: CHPT) is at the center of this revolution, powering one of the world’s leading EV charging networks and a comprehensive set of hardware, software and mobile solutions for every charging need across North America and Europe. We bring together drivers, businesses, automakers, policymakers, utilities and other stakeholders to make e-mobility a global reality.

Since our founding in 2007, ChargePoint has focused solely on making the transition to electric easy for businesses, fleets and drivers. ChargePoint offers a once-in-a-lifetime opportunity to create an all-electric future and a trillion-dollar market.

At ChargePoint, we foster a positive and productive work environment by committing to live our values of Be Courageous, Charge Together, Love our Customers, Operate with Openness, and Relentlessly Pursue Awesome. These values guide how we show up every day, align, and work together to build a brighter future for all of us.

Join the team that is building the EV charging industry and make your mark on how people and goods will get everywhere they need to go, in any context, for generations to come.

Reports To

Senior Manager, Security Risk and Compliance

What You Will Be Doing

ChargePoint is looking for a Senior Analyst, Information Security Risk and Compliance, who will enhance ITGCs and automate processes for efficient and mature Governance, Risk and Compliance program, while maintaining compliance with SOX, Fedramp, PCI and other standards and frameworks, such as ISO 27001, SOC2, and NIST 800-53 as needed based on customer or other needs.

Great opportunity to continue building our GRC program while adding innovation and streamlining compliance efforts. The individual will possess deep IT and Information Security audit, compliance and risk management knowledge and use of automated tools and techniques to build into projects and assessments.

What You Will Bring to ChargePoint

• Introduce innovative, differentiating capabilities that enhance our overall GRC program and align risk strategies with business priorities, including collaborating with the team for operationalizing the common control framework approach to achieve our various compliance needs
• Enhance internal processes, policies and programs by incorporating AI or other automation to streamline compliance efforts while ensuring compliance requirements are maintained
• Provide leadership to internal functions in the application, maintenance and improvement of access management, change management and operational procedures and department specific processes for both current and future IT systems that come into scope
• Establish credibility and maintain a strong working relationship with key stakeholders across the business, internal and external auditors to understand their current and planned activities that impact ITGC SOX, FedRamp, and PCI
• Partner with control owners and operators to validate the completeness and accuracy of ITGC control execution, ensuring ITGC’s are designed, ChargePoint documentation and teams are audit-ready, and controls executed and monitored effectively
• Build reporting to track and monitor overall GRC and other security project status as needed for monthly and quarterly reporting to senior management

Requirements

• Bachelor’s degree in General Business, Information Systems, Engineering, Science or a related field and with a minimum of 5 years’ relevant experience
• 8+ years of internal controls and risk management experience including working with ITGC SOX, SOC 1/2/3, or IT Internal Audit activities and programs to support compliance efforts
• Good knowledge of Sarbanes-Oxley, NIST 800-53, Fedramp, ISO 27001, NIST CSF and commonalities across frameworks and standards
• Solution-oriented mindset and risk-based approach to identifying, evaluating and addressing critical compliance risks, operational technology risks and the relevant business and governance processes
• Experience working with and managing both internal and external auditors
• Familiarity with SAAS-based applications, such as NetSuite, Workday, Salesforce, Github, and infrastructure providers – AWS, Google Cloud from IT controls perspective and ability to understand in-house developed systems and CI/CD development processes
• Good written and verbal communication skills with the ability to influence broad range of stakeholders (Engineering, IT, Legal, Auditors, Product, Finance, etc.) and report policy and compliance results and risks
• Excellent organizational skills

Location

Remote

We are committed to an inclusive and diverse team. ChargePoint is an equal opportunity employer. We do not discriminate based on race, color, ethnicity, ancestry, national origin, religion, sex, gender, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status or any legally protected status.

If there is a match between your experiences/skills and the Company needs, we will contact you directly.

ChargePoint is committed to fostering an inclusive workplace that welcomes and supports all qualified individuals. In alignment with this commitment, we ensure that persons with disabilities are provided with reasonable accommodations throughout the employment process.

If you need a reasonable accommodation to participate in the application or interview process, to perform essential job functions, or to access any other benefits and privileges of employment, please contact us at [e-mail].

ChargePoint is an equal opportunity employer.
Applicants only - Recruiting agencies do not contact.