Spektra Systems is an innovation leader in cloud computing products and services. Our mission is to enable people and businesses to achieve more with the help of effective technological solutions. Our four revolutionizing products are designed to help Cloud partners run and grow their businesses efficiently. a) CSP Control Center (www.cspcontrolcenter.com) Automating CSP business. Enabling growth. C3 streamlines the entire business & technical lifecycle for Microsoft CSP partners. The platform provides an effortless self-service experience that scales productivity and business development. b) CloudLabs (https://cloudlabs.ai/) Transforming virtual learning through immersive technology. CloudLabs is a self-service, end-to-end learning experience platform that delivers Microsoft Azure hands-on workshops at scale. Designed for training providers, ISV’s and system integrators, Cloudlabs has transformed the way cloud workshops and demonstrations are conducted. c) SaaSify (https://saasify.ai/) Helping ISVs and SaaS companies grow their business. SaaSify is a one-of-its-kind solution built to simplify, streamline and accelerate revenue growth on cloud marketplaces. The platform enables companies to optimize, list, sell and manage their software offerings — cost-effectively. d) Spektra Academy (https://spektraacademy.com/) Empowering individual learners through hands-on lab training and certification. Along with advanced solutions, we offer end-to-end services comprising advisory and consulting, product customization, and managed services. We’re headquartered in Seattle, the United States with offices in Canada, India, and Mexico and clients worldwide. Check us out at www.spektrasystems.com

Job description

This is a remote position.

Spektra Systems is looking for Corporate Audit & Compliance Consultant to drive security and privacy initiatives for Spektra’s SaaS products. You will be responsible for keeping Spektra’s products and processes compliant and secure and keep our audit status. Also need to ensure all the documentation is completed and continuously compliant.

Responsibilities:

·        Develop strategy on security & privacy for SaaS offerings and based on that, create/modify security policies, procedures, and any other required artefacts
·        Identify gaps in SaaS offerings security architecture and create a plan to close the gaps by means of updated processes, procedures, industry certifications etc.
·        Lead the response to security & privacy related clients’ questionnaire on SaaS offerings
·        Monitor access to all systems and maintains access control profiles on computer network and systems. Track documentation of access authorizations to all resources.
·        Prepare for security and compliance related audits including but not limited to GDPR, SOC1, SOC2, Microsoft SSPA, CCPA and other related compliance and security audits.
·        Conduct Internal audits and keep evidence
·        Responsible for representing and driving all external audits.
·        Responsible for staying abreast of the latest industry security practices and technologies
·        Meet with clients and Business Owners to analyse, document, and define requirements associated with new development or maintenance and enhancements to existing security roles and permissions.
·        Review completed roles/permissions with users to ensure requirements are fully met.
·        Deliver services that meet regulatory specifications.
·        Work with internal and external auditors to document and confirm that all security administrative duties are properly performed as well as demonstrate overall compliance.
·        Work with internal stakeholders and keep the audit compliance documents updated from time to time
·        Work with internal auditors & ensure the internal audit happens as per the schedule
·        Monitor the risk register & drive the open items to closure
·        Ensure project and client alignment with company security standards where applicable.
·        This is an individual contributor role where you will be responsible for defining the security and privacy policies and keep required artifacts to ensure we are always compliant and ready for audits.

Requirements

· 3 to 5 years of experience in information security and privacy related role for SaaS or related technology segment.
· Must have experience in handling SOC 2 or GDPR or CCPA or ISO or other similar level for audits.

Required profile