Information Security Analyst

Job Description

Proudly voted a Great Place to Work, we are a dynamic startup in the SaaS space that is revolutionizing the way businesses communicate. Our team is made up of 500 energetic and passionate Unifones who are dedicated to delivering the best possible experience to 5000+ customer-centric companies.We pride ourselves on our fun and collaborative work environment, where creativity and new ideas are constantly encouraged. As shareholders in the business, were so much more than a group of passionate communicators. We are Unifones. Join our team and be a part of something big!Meet the team!Our Engineering team is responsible for designing, developing, and maintaining the systems and technologies that drive Unifonics solutions. We work closely with other departments to ensure our products and services meet the needs of our customers. If you are passionate about technology and are excited about working on cutting-edge communication and engagement solutions, we want you on our team.As an Information Security Analyst, you will collaborate with cross-functional teams (security engineers and analysts, technical program managers, business stakeholders, and risk & compliance teams) to help maintain security controls and policies within Unifonic.Help Us Shape The Future Of Communications By

• Understanding how security is crucial for operations across the organization and advising on best practices.
• Maintaining security controls and policies within Unifonic.
• Working with stakeholders across the organization to make sure compliance needs are met. Also, implementing the information security roadmap.
• Maintenance of ISMS and all related systems.
• Performing security reviews and gap analysis.
• Maintaining risk registers and assisting in treating security risks.
• Maintaining up-to-date knowledge of ISO standards, security threats, countermeasures, industry good practices, and assistive technologies.
• Assisting in replying to Unifonics customers security due diligence and RFI.
• Supporting the Legal team when theres the need to respond to security incidents.
• Supporting the Compliance team when needed to provide input on everything related to Information Security.
• Understanding how data should be managed so that an organization can be compliant with security standards.

• Hands-on 3+ years of work experience in information security, program/project management, or similar capacities.
• Knowledge of ISO 27001, 27017, 27018 (preferably certified practitioner).
• Knowledge of SOC2 (has gone through at least one audit process).
• Understanding of IT (systems, cloud, etc).
• Experience working with start-ups while helping them on their information security journey while they scale up is a plus.
• Knowledge of GDPR, ISO9000, CSA, and PCI is nice to have.
• Superb communication skills with an ability to describe technical and security issues/solutions to technically and non-technically minded people.
• Excellent written language skills to be used both in technical and non-technical contexts.
• An inquisitive, analytical mind.
• Great organizational skills.
• Ability to work on projects concurrently and under tight deadlines.
• Self-motivated with a determination to provide solutions.
• Ability to follow procedures as well as suggest improvement ideas.
• BA/BS in Computer Science, Information Systems, or equivalent work experience.

• Competitive salary and bonus.
• Unifonic share scheme (we are all owners!).
• 30 holiday days after your first anniversary.
• Your Birthday off!
• We pay all the GOSI costs on your behalf.
• Flexible working arrangements.
• Spend up to 10 weeks per year working from anywhere in the world!
• Paid leave for new parents.
• Linkedin learning license.

Keyskills :
Gdpr Iso 27001 Pci Csa SOC2 IT

About Company

Baker Hughes Company is an American international industrial service company and one of the world's largest oil field services companies. The company provides the oil and gas industry with products and services for oil drilling, formation evaluation, completion, production and reservoir consulting.