The Sr. Security Analyst is the cornerstone of Validity’s information security compliance and governance efforts.&nbsp; Working under the Sr. Director, Security, and Privacy, the Sr. Security Analyst will help set and maintain security standards, organize company-wide education and awareness, manage incident response and disaster recovery/business continuity programs and activities, and work to extend ISO 27001 certification and SOC 2, type 2 assessments across the company’s brands.&nbsp; Essential Position Duties and Responsibilities<ul>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Coordinate and conduct internal security audits in alignment with ISO 27001/27018 and SOC 2 standards and principles.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Organize and manage Validity’s external SOC 2 and ISO 27001/27018 assessments.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Conduct third-party/supplier audits, client RFP/due diligence reviews, and organize 3rd party vulnerability assessments/pen tests.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Design and implement systems and processes to track, monitor, and report compliance with information security policies and procedures as well as security program performance.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Collaborate with upper management and key stakeholders on information security program development, maintenance, and enforcement to minimize Validity’s risk exposure through security by design.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Act on KPI results to make continuous security program improvements.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Keep abreast of changes to security industry best practices, applicable laws, and security alerts from relevant vendors and sources (ex: US-CERT).</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Work with stakeholders to define and refine Validity’s security policies and procedures to enable proactive security approach.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Coordinate investigation and reporting of security incidents.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Coordinate and conduct regular incident response tabletop activities.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Responsible for the company security awareness program which includes:</li>
<ul style="list-style-type: disc">
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Evaluating and ensuring mandatory security training content aligns with appropriate frameworks, company policies, and culture; ensuring compliance with completion timelines</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Vendor selection (if applicable)</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Spreading security awareness through tech talks, lunch and learns, regular communications to the company, community/industry involvement, and specialized training.</li>
</ul>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Subject matter expert (SME) to internal and external customers by providing expertise, advice, support on security-related inquiries and incidents.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Have a thorough understanding of Validity’s products and services to identify where new compliance and security efforts could minimize operational risk.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Recommend and evaluate third party technology and/or services to enhance Validity security.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Assist in the implementation, adoption, and support of technology as needed.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Investigate alerts and analyze data from monitoring tools to identify and mitigate malicious activity.</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Participate in 24/7 incident response on-call rotation.</li>
</ul> Experience/Skills<ul>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Minimum 5 years of work experience in an information security-based role</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Experience with fraud and abuse investigations, incident response</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Security-related certifications (eg. CompTia Security+, CISSP, CISM, CEH)</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Ability to maintain professional, positive demeanor in high-pressure circumstances</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Ability to look creatively at the big picture, to follow trends beyond obvious attributes</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Collaborative mindset – a track record of cross-functional success in a team&nbsp;environment</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Experience with risk assessment, controls identification and testing, and/or state/federal&nbsp;regulatory audits</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Knowledge and experience with ISO 27001/SOC2 frameworks</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Familiarity with Unix/Linux environments, basic working knowledge of security testing&nbsp;tools (Kali Linux, nmap, Nessus, Burpsuite)</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Manage multiple projects/issues concurrently</li>
<li style="margin: 0px; font-stretch: normal; font-size: 12px; line-height: normal; font-family: &quot;Helvetica Neue&quot;;">Excellent written and verbal communication skills</li>
</ul>&nbsp;About ValidityFor over 20 years, tens of thousands of organizations across the world have relied on Validity solutions to target, contact, engage, and retain customers – using trustworthy data as a key advantage. Validity’s flagship products – <a href="https://www.validity.com/products/demandtools/">DemandTools</a>, <a href="https://www.validity.com/products/briteverify/">BriteVerify</a>, <a href="https://www.validity.com/products/returnpath/">Return Path</a>, <a href="https://www.validity.com/products/trustassessments/">Trust Assessments</a>, and <a href="https://www.validity.com/products/gridbuddy/">GridBuddy </a>– are all highly rated, #1 solutions for sales and marketing professionals. These solutions deliver smarter email campaigns, more qualified leads, more productive sales, and ultimately faster growth. Validity is a truly unique company - massive revenue growth, top-tier investors, 5-star product ratings, proven ability to acquire and integrate top tech companies and welcome them into the Validity family, winning culture, and a work environment that fosters hard work, trust, and fun.Headquartered in Boston, Validity has offices in Tampa, Denver, Indianapolis, London, and Sydney. For more information, visit connect with us on <a href="https://www.linkedin.com/company/validityinc/">LinkedIn</a>, <a href="https://www.instagram.com/trustvalidity/">Instagram, </a>and <a href="https://twitter.com/TrustValidity">Twitter</a>.

The Sr. Security Analyst is the cornerstone of Validity’s information security
compliance and governance efforts.  Working under the Sr. Director, Security,
and Privacy, the Sr. Security Analyst will help set and maintain security
standards, organize company-wide education and awareness, manage incident
response and disaster recovery/business continuity programs and activities,
and work to extend ISO 27001 certification and SOC 2, type 2 assessments
across the company’s brands.

 ****  

 **Essential Position Duties and Responsibilities**

  * Coordinate and conduct internal security audits in alignment with ISO 27001/27018 and SOC 2 standards and principles.
  * Organize and manage Validity’s external SOC 2 and ISO 27001/27018 assessments.
  * Conduct third-party/supplier audits, client RFP/due diligence reviews, and organize 3rd party vulnerability assessments/pen tests.
  * Design and implement systems and processes to track, monitor, and report compliance with information security policies and procedures as well as security program performance.
  * Collaborate with upper management and key stakeholders on information security program development, maintenance, and enforcement to minimize Validity’s risk exposure through security by design.
  * Act on KPI results to make continuous security program improvements.
  * Keep abreast of changes to security industry best practices, applicable laws, and security alerts from relevant vendors and sources (ex: US-CERT).
  * Work with stakeholders to define and refine Validity’s security policies and procedures to enable proactive security approach.
  * Coordinate investigation and reporting of security incidents.
  * Coordinate and conduct regular incident response tabletop activities.
  * Responsible for the company security awareness program which includes:
    * Evaluating and ensuring mandatory security training content aligns with appropriate frameworks, company policies, and culture; ensuring compliance with completion timelines
    * Vendor selection (if applicable)
    * Spreading security awareness through tech talks, lunch and learns, regular communications to the company, community/industry involvement, and specialized training.
  * Subject matter expert (SME) to internal and external customers by providing expertise, advice, support on security-related inquiries and incidents.
  * Have a thorough understanding of Validity’s products and services to identify where new compliance and security efforts could minimize operational risk.
  * Recommend and evaluate third party technology and/or services to enhance Validity security.
  * Assist in the implementation, adoption, and support of technology as needed.
  * Investigate alerts and analyze data from monitoring tools to identify and mitigate malicious activity.
  * Participate in 24/7 incident response on-call rotation.

****  

**Experience/Skills**

  * Minimum 5 years of work experience in an information security-based role
  * Experience with fraud and abuse investigations, incident response
  * Security-related certifications (eg. CompTia Security+, CISSP, CISM, CEH)
  * Ability to maintain professional, positive demeanor in high-pressure circumstances
  * Ability to look creatively at the big picture, to follow trends beyond obvious attributes
  * Collaborative mindset – a track record of cross-functional success in a team environment
  * Experience with risk assessment, controls identification and testing, and/or state/federal regulatory audits
  * Knowledge and experience with ISO 27001/SOC2 frameworks
  * Familiarity with Unix/Linux environments, basic working knowledge of security testing tools (Kali Linux, nmap, Nessus, Burpsuite)
  * Manage multiple projects/issues concurrently
  * Excellent written and verbal communication skills

** **

 **About Validity**

For over 20 years, tens of thousands of organizations across the world have
relied on Validity solutions to target, contact, engage, and retain customers
– using trustworthy data as a key advantage. Validity’s flagship products –
[DemandTools](https://www.validity.com/products/demandtools/),
[BriteVerify](https://www.validity.com/products/briteverify/), [Return
Path](https://www.validity.com/products/returnpath/), [Trust
Assessments](https://www.validity.com/products/trustassessments/), and
[GridBuddy ](https://www.validity.com/products/gridbuddy/)– are all highly
rated, #1 solutions for sales and marketing professionals. These solutions
deliver smarter email campaigns, more qualified leads, more productive sales,
and ultimately faster growth.

  

Validity is a truly unique company - massive revenue growth, top-tier
investors, 5-star product ratings, proven ability to acquire and integrate top
tech companies and welcome them into the Validity family, winning culture, and
a work environment that fosters hard work, trust, and fun.

Headquartered in Boston, Validity has offices in Tampa, Denver, Indianapolis,
London, and Sydney. For more information, visit connect with us on
[LinkedIn](https://www.linkedin.com/company/validityinc/), [Instagram,
](https://www.instagram.com/trustvalidity/)and
[Twitter](https://twitter.com/TrustValidity).

