[Hiring] Security Compliance Specialist @JetBrains

Role Description

As part of our team, you will:

• Handle customer requests related to vendor due diligence processes.
• Evaluate third parties (vendors, suppliers, etc.) to make sure they comply with JetBrains' security requirements.
• Improve security checks of suppliers during the procurement process.
• Help our Legal team review contract sections related to security.
• Collaborate with internal teams to address security compliance gaps and remediate issues.
• Take part in projects related to security compliance certifications, including external audits and internal self-assessments.
• Draft and maintain security compliance documentation.
• Implement and monitor security compliance procedures, following the SOC 2 requirements and industry best practices.
• Execute a robust information security risk management program, including by conducting risk assessments in accordance with SOC 2, the NIST RMF, and industry best practices.
• Provide guidance to remediate identified risks and ensure ongoing compliance.

Qualifications

• Proven experience in security compliance.
• Knowledge of various security and privacy standards and regulations (SOC 2, ISO 27001, NIS 2, DORA, the NIST CSF, the NIST SSDF, etc.).
• A degree in computer science, information technology, or a relevant discipline.
• Fluent level of English with good writing skills.
• Analytical and problem-solving skills, as well as a results-oriented approach.

Requirements

• Experience passing security compliance audits (SOC 2, ISO 27001).
• Skills and experience in web, network, and infrastructure security approaches.
• Experience in process automation.
• Experience with JetBrains products.
• Relevant security certifications (CRISC, CISA, CISSP, etc.).