Sub-Saharan AfricaThis position reports to:? Head of SecEng or CISOSub-Saharan Africa

Sub-Saharan AfricaWe’re looking for a highly motivated, collaborative and technically experienced Cyber Security Professional with the ability to understand and influence cloud operational and security processes, effectively communicate our organisation’s controls including intent, and drive changes within the organisation through effective testing. The successful candidate must be reliable, resourceful and have a positive attitude.

Sub-Saharan AfricaIn this position, you will be involved in leading and managing the IRAP compliance program for our organization. This will include liaising with government agencies, third party auditors, internal engagement with SMEs. So it requires a holistic level understanding of regulatory requirements and how it can be implemented within a cloud environment.Sub-Saharan Africa

Sub-Saharan AfricaYou will be a key member of our team and you will play an important role in defining the framework for the Smartsheet IRAP compliance effort, including identification of documentation requirements and a schedule for continuous monitoring. In this role you will be required to demonstrate the ability to analyse difficult problems, think out-of-box and provide pragmatic solutions and recommendations.

Sub-Saharan AfricaOur current compliance initiatives are focused on, but not limited to Spain’s ENS, Germany’s TISAX, Japan’s ISMAP, Australia’s IRAP, Singapore MTCS, and other important global programs such as ISO 27001, ISO 27002, ISO 27017, ISO 27018, PCI, SSAE 18, and SOC 2.Sub-Saharan Africa

Sub-Saharan AfricaYou WillSub-Saharan Africa

• Sub-Saharan AfricaPerform activities to help measure and monitor IRAP compliance with company policies and procedures
• Sub-Saharan AfricaPerform gap analysis of IRAP requirements in comparison with our existing NIST 800.53 security controlsSub-Saharan Africa
• Sub-Saharan AfricaFacilitate certifier and assessor requests and information gathering for audit activities and lead the audit processSub-Saharan Africa
• Sub-Saharan AfricaCraft and revise security policies and procedures to enhance compliance with IRAP and other relevant security frameworks.Sub-Saharan Africa
• Sub-Saharan AfricaConduct activities to comply with the various Government Cyber Security requirements within the Australia and wider APAC regionSub-Saharan Africa
• Sub-Saharan AfricaSuccessfully drive security compliance testing activities across various teams within the organisation
• Sub-Saharan AfricaCoordinate with various internal teams (IT, legal, CorpIT, etc.) and external stakeholders to ensure alignment and understanding of compliance requirements and strategies.Sub-Saharan Africa
• Sub-Saharan AfricaContribute by enhancing and maturing the existing common control?frameworkSub-Saharan Africa
• Sub-Saharan AfricaLiaise with Risk Management team and assist with security risk assessment?activities and development of security controls and documentation, as neededSub-Saharan Africa
• Sub-Saharan AfricaMonitor regulatory changes relevant to IRAP and adjust compliance strategies as necessary.Sub-Saharan Africa
• Sub-Saharan AfricaAdvocate for best practices in security and complianceSub-Saharan Africa
• Sub-Saharan AfricaContribute towards enhancing the policies and processes that are a part of our compliance requirements to and understand how they meet compliance business needsSub-Saharan Africa
  
  

Sub-Saharan AfricaYou HaveSub-Saharan Africa

• Sub-Saharan Africa8+ years working in the field of cyber security compliance, security risk or audit
• Sub-Saharan AfricaDirect and current working experience with Australian IRAP and at least one other compliance program from among the following: UK Cyber Essentials Plus, ISO 27001, PCI, MTCS, SSAE18, and/or SOC2Sub-Saharan Africa
• Sub-Saharan AfricaPrior experience working in the Security and Compliance group at a SaaS/Cloud company or with Security and Risk practice of a reputable auditing firm
• Sub-Saharan AfricaRelevant professional certifications such as CISSP, CISA, CISM are desirableSub-Saharan Africa
• Sub-Saharan AfricaDemonstrated experience working on large projectsSub-Saharan Africa
• Sub-Saharan AfricaExperience using a GRC tool or system is desirableSub-Saharan Africa
• Sub-Saharan AfricaExcellent writing skills, ability to prepare and deliver compliance presentations and delivery of associated metrics
• Sub-Saharan AfricaExcellent verbal and written communication skills
• Sub-Saharan AfricaAbility to work effectively as a member of the Compliance Team to drive results for the Information Security ProgramSub-Saharan Africa
  
  

Sub-Saharan AfricaThe candidate must be an Australian citizen currently holding a baseline security clearance, or willing to obtain a baseline security clearance.Sub-Saharan Africa

Sub-Saharan AfricaGet to Know UsSub-Saharan Africa

Sub-Saharan AfricaAt Smartsheet, we’ve created a place where everyone is welcome — people from all over the world, all backgrounds, all ages, all colours, and all beliefs working side by side. Here, everyone can make a difference and empower others to do the same. You’re encouraged to apply even if your experience doesn’t precisely match our job description—if your career path has been nontraditional, that will set you apart. At Smartsheet, we empower everyone, everywhere to change the way the world works—join usSub-Saharan Africa

Sub-Saharan AfricaEqual Opportunity EmployerSub-Saharan Africa

Sub-Saharan AfricaSmartsheet is an Equal Opportunity Employer committed to fostering an inclusive environment with the best employees. We provide employment opportunities without regard to any legally protected status in accordance with applicable laws in the US, UK, Australia, Japan, Costa Rica, and Germany. If there are preparations we can make to help ensure you have a comfortable and positive interview experience, please let us know.Sub-Saharan Africa

Sub-Saharan Africa#BI-RemoteSub-Saharan Africa

Sub-Saharan Africa