Cybersecurity Analyst

Description

Trupanion is a leading provider of medical insurance for cats and dogs in North America. Our mission is to help loving, responsible pet owners budget and care for their pets. At Trupanion, we offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.

Position Summary:

Join Trupanion as an Cybersecurity Analyst and make a difference to the security posture of our organization. Help protect the business from potential threats and ensure our IT systems and information assets remain secure. With your extensive experience in evaluating risks, responding to incidents, conducting security reviews, managing the onboarding of vendors, and adhering to governance, risk, and compliance frameworks, you will help establish and implement robust security measures that align with industry standards.

• Develop, implement, review, and update Information Security policies and procedures in accordance with regulatory requirements and industry standards.
• Ensure that policies and policy requirements are effectively communicated and clearly articulated across the organization.
• Support design, implementation and review of the Control Framework.
• Conduct risk assessments and implement appropriate mitigation strategies.
• Collaborate with business units to align Information Security initiatives with organizational goals and objectives.
• Support internal and external audits.
• Lead incident response efforts and collaborate with cross-functional teams.
• Perform security reviews of systems, networks, and applications.
• Lead vendor risk programs, and the onboarding and offboarding of relationships, continually assessing their security practices.
• Maintain the information security training program and awareness campaigns.
• Handle non-conformity and exceptions to policy.
• Continually improve our security governance practices, GRC tooling, and risk treatment approach.
• Produce security reports and maintain dashboard metrics.

• Bachelor's degree or equivalent experience in Computer Science, Cybersecurity, or a related field.
• 4+ years of experience in relevant GRC functions related to compliance & risk management.
• 2+ years of experience in incident management
• IT technical background.
• Involvement with security standards ISO, NIST and CIS.
• Familiarity with maintaining multiple legal and regulatory frameworks, including PCI DSS SOX, NYDFS, and OSFI.
• Excellent communication, documentation, and collaboration skills

• The pay range for this position is $100,000 - $120,000 on a full-time schedule.
• Along with base salary, Trupanion employees may be eligible for monthly bonuses.
• We want all employees to be invested in Trupanion's success, so we grant Restricted Stock Units to all new team members. Our new hire grants vest over 4 years.

• Full medical, dental, and vision benefits at no cost to the employee
• Four weeks of paid time off and 9 paid float holidays (you can decide which days are most important to you!)
• Five-week sabbatical after five years of employment
• Open, casual, pet-friendly, and fun office environment
• Free medical health insurance for your pet (1 dog or cat)
• Paid time off to volunteer at nonprofit organizations
• Seattle Office Amenities: Free on-site gym, free dog walking services for office pets during business hours, free parking, and paid ORCA cards.