Browse
Employers / Recruiters

Security Risk and Compliance Specialist

xero · 30+ days ago
Negotiable
Full-time
Continue
By pressing the button above, you agree to our Terms and Privacy Policy, and agree to receive email job alerts. You can unsubscribe anytime.
Our Purpose 
At Xero, we’re here to help you supercharge your business. We do this by automating routine tasks, surfacing actionable insights and connecting businesses with the right data, advisors and apps. When that happens, we’re not only making life better for small business, we’ll be building a stronger economy that can change the world.

About the role

The Security Risk and Compliance Specialist will bring their experience to a team working with all parts of the business to improve Xero’s security risk and compliance posture, to reduce the risk of security incidents and improve the efficiency and effectiveness of Xero’s security controls.

What you'll do

  • Support contributors across Xero in conducting risk assessments to identify potential security threats and vulnerabilities, and evaluate security risks across all areas of Xero’s business, including product and technology, and third party software and services, to ensure these are well understood and managed within Xero’s risk tolerance. 
  • Ensure security compliance obligations with applicable laws, regulations and standards such as ISO 27001, SOC 2, PCI-DSS or other international or regional frameworks, are understood and met across Xero. 
  • Support product teams in performing threat modeling of new/updated product features. 
  • Perform risk assessments for Ecosystem partners and third party suppliers, ensuring that security risks are assessed and understood prior to, and during the engagement with the third party. 
  • Using the security risk management framework, ensure risks are documented, quantified, owned, communicated and escalated as appropriate across Xero. 
  • Provide input to responses to customer and supplier security assessments. 
  • Monitor and assess emerging security threats that could affect Xero, and propose strategies to mitigate them.
  • Support process improvement and automation using technical skills and experience.
  • Foster cross-disciplinary understanding of security risk and compliance and raise awareness of risk 

What success looks like

  • Changes to Xero’s product and corporate infrastructure are in compliance with the IT Security Policy and standards and meet Xero’s compliance obligations. 
  • Risks are identified and managed according to Xero’s risk appetite, in a timely manner and in alignment with business objectives.
  • Security assessments are completed and documented for all new third party software and technology services. 
  • Audits and other compliance assessment activities are completed successfully, and compliance is maintained with required standards. 
  • Management has timely and appropriate visibility of Xero’s security risk status. 

What you'll bring

  • 3+ years in a role in an information security and risk management practice
  • Experience with ISO27001:2022, SOC 2 Type 2 or PCI-DSS compliance frameworks
  • Recognised as a high performer and leading contributor in your team.
  • Experience working with AI and data to drive automation.
Why Xero? 
Offering very generous paid leave to use however you’d like (plus statutory holidays!), dedicated paid leave to care for your physical and mental wellbeing as well as an Employee Assistance Program to access mental health care for you and your family, life insurance, employee resource groups, 26 weeks of paid parental leave for primary caregivers, an Employee Share Plan, beautiful offices with weekly fitness and yoga classes, flexible working, career development,  and many other benefits that reflect our human value, you’ll do the best work of your life at Xero.

Our collaborative and inclusive culture is one we’re immensely proud of. We know that a diverse workforce is a strength that enables businesses, including ours, to better understand and serve customers, attract top talent and innovate successfully. So, from the moment you step through our doors, you’ll feel welcome and supported to do the best work of your life. At Xero we embrace diversity and inclusion and value a #challenge mindset.

Research has shown that women and underrepresented groups are less likely to apply to jobs unless they meet every single competency or experience. If you are excited about this role, but your past experience doesn't align perfectly, we encourage you to apply anyway. You could be just the right person for this role and Xero. If you have any support or access requirements, we encourage you to advise us at time of application and throughout the interview process.

Last updated on Dec 17, 2024

See more

About the company

More jobs at xero

Analyzing

Copenhagen

 · 

30+ days ago

 · 

30+ days ago

 · 

30+ days ago

 · 

30+ days ago

More jobs like this

Analyzing
Process and Controls Expert
6
6hjdnwe6452jxyopb8yrghazw5r3c707c9urp8igk5pjwt0ln301k8r8fwh0eg85

Sydney, Nova Scotia

 · 

30+ days ago

Calgary, Alberta

 · 

30+ days ago

Remote

 · 

30+ days ago

 · 

30+ days ago

Privacy Analyst
3
3djdnw5yqdh8wl3frr5t6561tvvokq01affwpxt3lcutzo4f8yt1aeiy3msk02or

British Columbia

 · 

30+ days ago

Production and Allocation Analyst
D
dhjdnwh4qm62pb5vm2o4tbd72ej7oa01f47beu0d9d984ckrwi58r2ocg36n82t5

Longueuil, Quebec

 · 

30+ days ago

Contractor-Operations
S
svjdnwzkulao5hqo7t0ifgvj8s71sf01d7dtgdstyhdixakxt6ty85zljsdyhgz2

Montreal, Quebec

 · 

30+ days ago

Business Analyst - Derivates
Y
y8jdnwm02brvbaihj7ymk4ocvur6fb09851yb1ruy8o9fr665q6wp8x5452fuwku

Toronto, Ontario

 · 

30+ days ago

Associate, Strategy & Operations - Drive CA$80,000+
DoorDash ·  Food delivery and takeout service.

Vancouver, British Columbia

 · 

30+ days ago

Compliance Specialist
V
visiersolutionsinc

Vancouver, British Columbia

 · 

30+ days ago

Developed by Blake and Linh in the US and Vietnam.
We're interested in hearing what you like and don't like! Live chat with our founder or join our Discord
Changelog
🚀 LaunchpadNov 27
Create a site and sell services based on your resume.
🔥 Job search dashboardNov 13
Revamped job search UI with a sortable grid, live filtering, bookmarks, and application tracking.
🫡 Cover letter instructionsSep 27
New Studio settings give you control over AI output.
✨ Cover Letter StudioAug 9
Automatically generate cover letters for any job.
🎯 Suggested filtersAug 6
Copilot suggests additional filters above the results.
⚡️ Quick applicationsAug 2
Apply to jobs using info from your resume. Initial coverage of ~200k jobs in Spain, Germany, Austria, Switzerland, France, and the Netherlands.
🧠 Job AnalysisJul 12
Have Copilot read job descriptions and extract out key info you want to know. Click "Analyze All" to try it out. Click on the Copilot's gear icon to customize the prompt.
© 2024 RemoteAmbitionAffiliate · Privacy · Terms · Sitemap · Status