At a glance
- Workplace
- Onsite
- Location
- Austin
About the role
- As a member of the Information Security team, you will lead the Security Governance and Customer Trust domains of Sonar's security risk management program.
- The primary goal of the role is to build trust with a rapidly growing customer base by ensuring the organization meets a high level of security.
- You will also support security incidents from time to time as needed.
Responsibilities
- Manage a straightforward process for answering security and technical questions from customers and internal users.
- Enhance and maintain the Trust Center to proactively answer customer questions and serve as a go-to resource.
- Collaborate closely with Engineering, Product, go-to-market, and Information Security teams to translate complex technical and architectural details into clear, accurate, and friendly responses.
- Review customer contracts, MSAs, and DPAs, partnering with Legal and Sales teams to provide feedback, redlining, and negotiation support on security clauses.
- Keep customer trust systems accurate and support a federated security approach across Sonar.
- Drive exciting improvements and add new capabilities to customer trust system tooling.
- Develop and refine prompts and automated workflows using LLMs to ensure security information systems stay valid and up to date.
Requirements
- View security as a way to enable people and build solutions that help teams innovate and move fast.
- Solid experience reviewing, redlining, and providing feedback on security clauses and technical language in customer contracts.
- Communicate effectively and partner with Engineering to validate technical details while translating complex security requirements for non-technical peers.
- Comfortable and experienced working directly with senior leaders, especially a CISO, to communicate strategy, report trust metrics, and give advice on risk.
- Deep experience across several security domains, which might include GRC, Cloud Security, IAM, or Application Security.
- Familiarity with common compliance frameworks like SOC 2, ISO 27001, and GDPR.
- Proven ability to use AI tools and create complex prompts to solve security problems and automate governance tasks.
- Strong organizational skills to juggle multiple high-stakes projects, audit reviews, and contract negotiations with minimal supervision.
Benefits
- Flexible comprehensive employee benefit package
- 25 days of PTO per calendar year on a pro-rated basis, with additional time for sickness, life events, and holidays
- 401(k) plan with a 4% match
- Generous discretionary Company Growth Bonus, paid annually
- Fully paid parking in downtown Austin, Texas
- Annual global kick-off event
- Monthly catered events and team events
Workplace
- Role is based in Sonar's Austin office.
Skills
- GRC
- Cloud Security
- IAM
- Application Security
- SOC 2
- ISO 27001
- GDPR
- AI Tools
- LLMs
- Prompt Engineering
