Governance, Risk, Compliance Analyst

San Francisco, CA

Share on Twitter.
Share on Facebook.
Share on LinkedIn.
Apply For This RoleBrowse open rolesLearn About Sentry

About Sentry

Bad software is everywhere, and we’re tired of it. Sentry is on a mission to help developers write better software faster, so we can get back to enjoying technology.

With more than $127 million in funding and 70,000 organizations that believe we’re on to something, we're building performance and error monitoring tools that help companies like Disney, Microsoft, and Atlassian spend less time fixing bugs and more time building products. If you like to selfishly build things that make your digital life better, come help us build the next generation of software monitoring tools.

Sentry is looking for a GRC Analyst to help us maintain the utmost level of trust with our customers, and this role will play a critical part.

As a GRC Analyst, you will be a part of the customer trust process from start to finish – drafting and updating policies, mapping controls, conducting internal audits, risk and vendor assessments, and remediation efforts, driving external audits, and communicating results to customers via RFIs, customer questionnaires, and sales enablement guidance.

In this role you will:

Audit:

  • Conduct compliance, remediation, and audit-readiness assessments
  • Build sustainable processes for internal/external audit evidence collection and documentation
  • Drive remediation efforts, track and report on progress
  • Document control deficiencies and remediation
  • Work closely with internal teams on managing and supporting external audits

Policy:

  • Author and maintain security policies, procedures, and controls
  • Assist with policy training and awareness efforts

Third Party/Vendor Risk Management:

  • Perform vendor due diligence to meet information security, data protection, and compliance requirements
  • Conduct ongoing audits of the vendor management program to detect compliance issues, identify trends, and assess risk

Sales Enablement:

  • Interface with with both technical (engineering) and non-technical (sales/marketing) teams
  • Respond to customer RFIs, questions, and technical documentation requests
  • Assist with sales and marketing material representing product security and compliance

You'll love this job if:

  • Love developing and giving customers the information and tools they need to be assured that Sentry is a cloud product that meets their data security and compliance requirements
  • Have the ability to communicate clearly and effectively to customers, suppliers, and internal stakeholders
  • Enjoy working with stakeholders to design and implement practical controls that meet compliance requirements without impeding engineering or business operations
  • Keep your commitments and practice transparency
  • Demand the highest standards, drive for result, and act like an owner

Qualifications

  • At least 5 years relevant experience
  • Hands on assessment and documentation work in a relevant role
  • Demonstrable experience with ISO 27001, SOC 2 Type I and II, HIPAA, NIST, and FedRAMP
  • Ability to navigate complex technical environments and a rapidly developing product
  • Ability to draft customer facing documents and statements
  • Excitement to work with our legal, sales, marketing, engineering and IT partners
  • Self starter with a high degree of autonomy
  • Familiarity with Jira and Confluence a plus

Benefits

  • Competitive salary and meaningful equity
  • 100% medical, dental, and vision coverage for employees, 75% company-paid for dependents
  • Monthly commuter subsidy
  • 401k program
  • Learning & Development stipend
  • Charitable matching program
  • Generous parental leave policy
  • Flexible working schedule and vacation policy, work from home policy, and real work/life balance
  • Catered lunches
  • Company events (Hack Weeks, All Hands, quarterly social events) and friends and family events
  • Relocation assistance - you are living in, or willing to relocate to the San Francisco Bay Area

COVID Vaccine Required - Reasonable Accommodations for Medical or Religious Reasons Considered

Sentry values diversity and inclusivity in our company and is an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Apply For This Role
© 2021 • Sentry is a registered Trademark
of Functional Software, Inc.