Requirements: - 5+ years of experience of Compliance, IT audit, IT risk management and/or IT compliance
- Bachelor’s degree in Information Technology, Management Information Systems or equivalent
- ISACA CISA, CISM, CRISC certification and/or (ISC)² CISSP certification and/or IAPP CIPT certification
- Understanding of control requirements associated with regulatory compliance including EU GDPR, SSAE 18 SOC, HIPAA, GLBA, CCPA and PCI DSS
- Operational understanding of Federal Communications Commission (FCC)/Federal Trade Commission (FTC) telemarketing rules
- Telecommunications Industry, Information Technology and SaaS hosting experience a plus.
- Excellent customer communications (written and oral), analytical, technical, risk assessment and IT audit skill
- Excellent organizational and documentation skills
- Ability to work both as a member of a team and independently
Key Responsibilities: - Perform annual IT audit procedures including Third-Party Partner and Vendor Assessments, Internal control audits and testing of control design and operating effectiveness
- Facilitate Annual Five9 SOC2 Type2 Audit
- Partner with Partners and Vendors to drive remediation of all Third-Party Assessments
- Evaluate and test the design and operating effectiveness of Cloud Operations controls
- Identify control deficiencies and weaknesses and drive required remediation or improvements
- Create, manage and report on corrective action plans (CAPs) assigned to various business units
- Investigate reports of non-compliance and provide recommendations for corrective actions
- Document and report and drive remediation of compliance issues and incidents
- Ability to research, document and propose impact of country and region-specific Telecommunication, Business, and Privacy Laws and Regulations
- Respond to RFPs, RFQs and Vendor Security Questionnaires as they relate to data protection, security and compliance practices within Five9
- Meet with and present to Commercial Customers discussing Five9’s Security, Privacy and Compliance
- Partner with Five9 Commercial to support all Five9 Security, Privacy and Compliance questions.
- Develop communications for executive-level reporting
- Manage a process for continuous improvement of Cloud Operations Controls
- Provide edits to Legal customer contracts including MSA security and compliance requirements, Data
- Protection Agreements, Business Associate Agreements and other legal agreements which are impacted by Compliance, Information Security and Cloud Operations processes and procedures
- Co-host Customer onsite audits
Five9 embraces diversity and is committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better we are. Five9 is an equal opportunity employer. |
