Staff Info Security Engineer

The Security Compliance team’s mission is to strengthen Okta’s position as the leading Identity-as-a-Service solution through a security-first approach to compliance.  We are looking for someone with a strong compliance background and experience in the technical implementation of security controls from ISMAP, IRAP Protected, SOC2, ISO 27001, and other international frameworks.  The right candidate will have participated in a mature ISMS program, delivered ISMAP compliance, and will play a key role in providing customers with confidence in Okta’s leadership in the identity space.  As a Staff Security Compliance Analyst, you will support security initiatives by engaging various process owners in the design, documentation, implementation, monitoring of the appropriate controls in our computing environments, and demonstrating those controls to external auditors.  In addition you will plan and lead the private sector compliance initiatives.

The ideal candidate will have hands-on experience with the technical implementation of ISMAP, SOC2 and ISO controls in a cloud-based environment using tools such as Salesforce, Okta, ServiceNow, JIRA and others.  This position requires a unique set of skills including project management, and an eye towards future standards and regulations that will impact our customers.  If you’re a self-starter who wants to make a difference in global cloud security, we want you on board.

Job Duties and Responsibilities:

Participate in Security Compliance Assessments of the company’s computing environment, with focus on security controls

Facilitate Okta’s ISMAP compliance assessment

Interpret requirements across multiple compliance frameworks

Collaborate to manage and maintain common controls framework for Okta

Scheduling compliance walkthroughs

Ensuring consistent operations and communications across compliance teams

Ensuring visibility into key compliance projects through reporting and metrics

Analyze gaps between current status and future compliance framework needs

Perform controls testing and develop recommendations based on confirmed observations

Work with process and control owners to help them understand the audit results, identify remediation options, and prioritize their closure

As needed, develop appropriate security documentation, including system security plans, information security policies, and risk assessment procedures

Assess security impact on changes to the systems and applications

Identify opportunities for improvement within the Compliance program and build plans to address them

Knowledge, Skills, and Abilities:

5-7+ years of experience in Information Technology or similar, preferably in a Security Governance, Risk, or Compliance (GRC) focused role

Comprehensive understanding of IT Security practices and the Governance, Risk, and Compliance lifecycle

Fluent in English and Japanese

Experience at ISMAP compliant organization(s), or performing ISMAP assessments

Familiarity with Japanese cybersecurity laws and regulations

Knowledge in IT security frameworks and best practices, such as NIST publications, FedRAMP, ISO 27001, CCM, IRAP Protected, ISMAP, BSI-C5, TISAX, SOX, HIPAA, ENS, HDS, and SOC2 Trust Principles and Criteria

Understanding of IT methodologies, such as software development lifecycle and operations

Strong analytical and problem-solving skills and the ability to “think-out-of-the-box”

Strong oral, written and presentation communication skills

Able to work independently or with a team

Bachelor’s degree or higher in Computer Science, Management Information Systems or Accounting, or equivalent experience

#P26228_3602148

#LI-hybrid