Twilio is looking for a Security Compliance Associate Analyst to play a key role in maturing our Security and Compliance posture. You will work closely with Product teams to ensure they are compliant with security regulations and industry best practices, providing advisory services and preparing internal stakeholders for certification activities.
What You'll Do
- Work effectively with numerous cross-functional stakeholders across the company to drive improvements in Security and Compliance controls, standards, process design, continuous monitoring, project management and documentation.
- Advise on Security and Compliance control designs and architecture patterns, working with technical security teams and their business counterparts to implement controls, metrics, and automation.
- Evaluate technology solutions and identify security gaps against security baselines and compliance requirements, partnering with cross-functional teams to clarify risk, recommend remediation, and escalate issues.
- Improve internal processes to promote consistent conclusions and leverage project management tools for metrics and reporting standardization.
What We're Looking For
- 3+ years of Compliance, Assurance, and/or Risk Management experience, working with frameworks such as HIPAA, HITRUST, FedRAMP, ISO/IEC 27001, PCI DSS, NIST CSF, NIST 800-53 and/or IRAP.
- 1+ years of working with technical security and Engineering/IT to implement technical control solutions, preferably within code deployment pipelines and public cloud solutions.
- 1+ years of project management experience in security or another technical field, including defining project scope, tracking performance, and communicating status.
- Ability to work in a dynamic, fast-paced environment that requires constant prioritization.
- Strong verbal and written communication skills, with the ability to translate complex technical or security requirements into business language.
- Ability to think critically, solve problems, and create win-win solutions.
- Experience using or creating collateral to effectively tell a compliance or security "story", using various formats and visuals.
Nice to Have
- Experience and familiarity with cloud security techniques and working with public cloud solutions including but not limited to AWS and GCP.
- Experience and familiarity with securing code deployment pipelines and Infrastructure as Code (IaC).
- CISA, CISM, GIAC, CISSP or other Information Security related certification.
Technical Stack
- AWS
- GCP
- Infrastructure as Code (IaC)
- Code deployment pipelines
Team & Environment
You will be a key member of the Security Compliance & Assurance program at Twilio.
Benefits & Compensation
- Competitive pay
- Generous time off
- Ample parental and wellness leave
- Healthcare
- A retirement savings program
Work Mode
This is a remote position based in Ireland.
Twilio is proud to be an equal opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics.
