Kenna Security is revolutionizing cyber risk with a SaaS-based platform that uses data science to combine vulnerability data with exploit intelligence to measure risk, predict attacks and prioritize remediation. We are leading the way in helping enterprises reduce their risk while increasing their efficiency and preventing attacks. Kenna Security was recently named one of the top 10 hottest start-ups and named to the Inc. 500 fastest growing companies list.

We are looking for a Sr. Compliance Analyst to join our growing Security team. This person will work closely with multiple groups including systems, legal, finance, HR, sales, and software engineering to develop sound processes and implement necessary controls to meet customer needs, satisfy external audit requirements, and address internal business objectives.

This is an excellent opportunity for a strong Individual Contributor to have a hand in elevating compliance and security as both a business and sales enabler, and to integrate a deep understanding of product into the compliance space. This is a team effort, and so bringing your team members, leadership and customers along for the ride is integral to your success.

RESPONSIBILITES:

• Function as technical SME during external audits.
• Develop and Implement an automated testing and evidence collection system.
• Centralize and map all compliance requirements to standardized controls.
• Develop and track compliance and remediation project plans and track successful completion of work, ensuring alignment with the product roadmap.
• Contribute to the development of customer-facing materials covering topics related to security and compliance.
•  Interpret regulatory, compliance and audit requirements and develop easy-to-consume work definitions for the product, HR, legal, IT and engineering teams
• Lead development of continuous compliance testing, design remediation, and risk mitigation solutions.
• Above all, you'll be getting your hands deep into the work and identifying new ways to solve problems and provide services through automation and technical validation.

QUALIFICATIONS:

• Demonstrated success working in and supporting multiple compliance frameworks: FedRAMP/NIST, ISO 27001:2013, SOC 1/SOC 2, ISO 27k, PCI.
• 5+ years prior work experience in requirements development, program management, and/or process improvement efforts in a technical company, preferably at a SaaS provider.
• 5+ years experience designing, implementing and/or monitoring control environments using project plans to track and negotiate commitments with experience escalating blocking issues constructively.
• Continuous testing experience and development of tooling
• Experience working in a customer-facing capacity in a SaaS/PaaS/IaaS business model.
• Ability to develop and use metrics/KPIs to assess program performance.
• The ability to partner with and effectively communicate to security, engineering and systems staff.
• Adept at project management and analysis work, including facilitation, interpretation, note-taking and documentation.

Our ideal candidate takes an extremely pragmatic approach to compliance, functions as part of a growing team, and is able to balance the needs of a very dynamic culture with that of protecting the company and customer data.

#LI-AA1

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex or national origin.