Cloud Security Analyst

3 settimane fa


Milano, Italia Docebo A tempo pieno

About This Opportunity: The role of Docebo's Security Compliance Analyst II is focused on demonstrating the business value of solid compliance and security programs to prospects and customers, working closely with the Sales & Legal teams so that the Company's Cybersecurity posture will improve customer experience and unlock business value. It is essential to ensure that Docebo adheres to regulatory frameworks and maintains robust security measures. Collaborating with internal teams and external stakeholders, they effectively address compliance and security requirements, safeguarding the company's operations and reputation. This role involves continuous improvement efforts and updating on emerging compliance regulations, security threats, and industry best practices. The Security Compliance Analyst also provides training and guidance to internal teams on compliance requirements and security protocols. Reports to: Business Enablement Manager - Security Location: Biassono (hybrid) Responsibilities: Customer Engagement and Response: respond to customers' security and privacy-related inquiries, compile comprehensive responses (mainly RFI, RFP, and RFQ), and address compliance questionnaires, ensuring timely and accurate information dissemination and actively supporting the sales process. Customer Audit Support and Documentation: Coordinate Docebo's activities related to customer compliance audits, assist with agreement and term reviews, and prepare management reports on compliance and security initiatives in collaboration with the GRC team. Support Internal Compliance Management: maintain internal compliance documentation, and coordinate the conduction of risk assessments and internal company audits to ensure organizational readiness in collecting the needed evidence. Vendor Risk Assessment and Monitoring: Support the evaluation of company third-party vendor-associated risks, monitor security controls, and maintain risk management reporting dashboards to mitigate risk and effectively qualify company suppliers; in collaboration with the GRC team. Security Awareness: develop and coordinate the implementation of security & privacy awareness programs to promote a culture of security consciousness; in collaboration with the GRC team. Cross-functional collaboration: collaborate across the company departments to align compliance, security, and privacy efforts with business objectives; consult the company's departments to assess changes and compliance obligations and support updating company compliance programs and controls. Documentation and Reporting: Maintain comprehensive documentation of compliance activities, including policies, procedures, and audit findings, and prepare reports for management and regulatory authorities; in collaboration with the GRC team. Trust Page management: support the definition of content, and keep it updated. Gather information regarding clients' and prospects' requests related to the content of the Trust Page to offer expertise and feedback to other departments to ensure that the content is relevant and up to date with the latest standards. Requirements: Fluent knowledge of English, working experience with contracts and documentation in English, and effective communication and presentation skills. 4 years of relevant work experience. Working experience supporting audits and compliance & security activities for SaaS companies. Working knowledge of information security principles, trends, and best practices, specifically cloud environments and services (eg: AWS, Azure, GCloud). Knowledge of GDPR requirements and other data privacy laws (eg: CCPA, PIPL). Knowledge of ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701, ISO 9001, and AICPA/ISAE 3000 SOC 2 & PCI. Knowledge of CFR21 Part 11. Nice to have: Bachelor's degree in computer science, information security, auditing, law, or similar. Certified Information Systems Auditor (CISA). Certified Information Privacy Professional (CIPP, IAPP or CIPT). CompTIA Security. Proficiency in tools such as Drata, RFP.io, and similar. Working experience implementing, evaluating, and assessing cybersecurity and compliance standards for the National Institute of Standards and Technology (NIST) or FedRAMP to further the assessment and secure operation of the FedRAMP cloud-based systems. J-18808-Ljbffr



  • Milano, Italia Coreview A tempo pieno

    Milan, Metropolitan City of Milan, ItalyCoreView delivers a unified approach to delegated administration and automated governance to help organizations of every size achieve more with Microsoft 365.CoreView is the Global Leader in Effortless M365 Security, Governance, and Administration, offering an end-to-end solution that stretches across the whole M365...


  • Milano, Italia Coreview A tempo pieno

    Milan, Metropolitan City of Milan, ItalyCoreView delivers a unified approach to delegated administration and automated governance to help organizations of every size achieve more with Microsoft 365.CoreView is the Global Leader in Effortless M365 Security, Governance, and Administration, offering an end-to-end solution that stretches across the whole M365...


  • Milano, Italia Coreview A tempo pieno

    Milan, Metropolitan City of Milan, ItalyCoreView delivers a unified approach to delegated administration and automated governance to help organizations of every size achieve more with Microsoft 365.CoreView is the Global Leader in Effortless M365 Security, Governance, and Administration, offering an end-to-end solution that stretches across the whole M365...


  • Milano, Italia Buscojobs A tempo pieno

    The role of Docebo's Security Compliance Analyst II is focused on demonstrating the business value of solid compliance and security programs to prospects and customers, working closely with the Sales & Legal teams so that the Company's Cybersecurity posture will improve customer experience and unlock business value.It is essential to ensure that Docebo...


  • Milano, Italia Docebo A tempo pieno

    About This Opportunity: The role of Docebo’s Security Compliance Analyst II is focused on demonstrating the business value of solid compliance and security programs to prospects and customers, working closely with the Sales & Legal teams so that the Company's Cybersecurity posture will improve customer experience and unlock business value. It is...


  • Milano, Italia Docebo A tempo pieno

    About This Opportunity: The role of Docebo's Security Compliance Analyst II is focused on demonstrating the business value of solid compliance and security programs to prospects and customers, working closely with the Sales & Legal teams so that the Company's Cybersecurity posture will improve customer experience and unlock business value. It is essential...

  • Cloud Security Engineer

    3 settimane fa


    Milano, Italia Coreview A tempo pieno

    Milan, Metropolitan City of Milan, Italy CoreView delivers a unified approach to delegated administration and automated governance to help organizations of every size achieve more with Microsoft 365. CoreView is the Global Leader in Effortless M365 Security, Governance, and Administration, offering an end-to-end solution that stretches across the whole M365...


  • Milano, Italia Coreview A tempo pieno

    Milan, Metropolitan City of Milan, Italy CoreView delivers a unified approach to delegated administration and automated governance to help organizations of every size achieve more with Microsoft 365. CoreView is the Global Leader in Effortless M365 Security, Governance, and Administration, offering an end-to-end solution that stretches across the whole M365...


  • Milano, Italia Coreview A tempo pieno

    Milan, Metropolitan City of Milan, Italy CoreView delivers a unified approach to delegated administration and automated governance to help organizations of every size achieve more with Microsoft 365.CoreView is the Global Leader in Effortless M365 Security, Governance, and Administration, offering an end-to-end solution that stretches across the whole M365...


  • Milano, Italia CoreView A tempo pieno

    Milan, Metropolitan City of Milan, Italy CoreView delivers a unified approach to delegated administration and automated governance to help organizations of every size achieve more with Microsoft 365. CoreView is the Global Leader in Effortless M365 Security, Governance, and Administration, offering an end-to-end solution that stretches across the whole...

  • Cloud Security Analyst

    4 settimane fa


    Milano, Italia Buscojobs A tempo pieno

    The role of Docebo’s Security Compliance Analyst II is focused on demonstrating the business value of solid compliance and security programs to prospects and customers, working closely with the Sales & Legal teams so that the Company's Cybersecurity posture will improve customer experience and unlock business value. It is essential to ensure that...


  • Milano, Italia Docebo A tempo pieno

    About This Opportunity: The role of Docebo’s Security Compliance Analyst II is focused on demonstrating the business value of solid compliance and security programs to prospects and customers, working closely with the Sales & Legal teams so that the Company's Cybersecurity posture will improve customer experience and unlock business value. It is...


  • Milano, Italia Oliver James Associates A tempo pieno

    Cloud Security Architect Our client, a leading company in the Insurance industry, is currently seeking a talented Cloud Security Architect to join their Security Team. Role & Responsibilities: - Develop and implement cloud security strategies and solutions - Monitor and assess security vulnerabilities in cloud environments - Ensure compliance with...

  • Cloud Migration

    7 mesi fa


    Milano, Italia Wyser A tempo pieno

    Il nostro Cliente, è una realtà specializzata nella progettazione e realizzazione di soluzioni e servizi innovativi basati su Cloud, attraverso competenze consolidate e molti anni di esperienza nella creazione e gestione di soluzioni Cloud Infrastructure as a Service (IaaS), Software as a Service (SaaS) e Platform as a Service (PaaS), supporta importanti...


  • Milano, Lombardia, Italia CoreView A tempo pieno

    Job Summary: We are seeking a skilled Cloud Security Engineer to join our team at CoreView. The ideal candidate will have expertise in designing and implementing secure cloud services, as well as experience with cloud monitoring, vulnerability remediation, and incident detection.This is a unique opportunity to work on building and maintaining robust security...

  • Cloud Migration

    1 settimana fa


    Milano, Italia Wyser A tempo pieno

    Il nostro Cliente, è una realtà specializzata nella progettazione e realizzazione di soluzioni e servizi innovativi basati su Cloud, attraverso competenze consolidate e molti anni di esperienza nella creazione e gestione di soluzioni Cloud Infrastructure as a Service (IaaS), Software as a Service (SaaS) e Platform as a Service (PaaS), supporta importanti...


  • Milano, Italia AXA A tempo pieno

    AXA's Cyber Security team is looking for a **Cyber Security Cloud specialist** with expertise in Cloud Security domain, who will be responsible to support the design, implementation and evolution of cloud security solutions with particular focus to AWS cloud. In this position, you are a passionate and talented security expert with very deep understanding...


  • Milano, Italia Energent Spa A tempo pieno

    **Energent Spa**, società di Information&Technology del **Gruppo EIES**, cerca un **Network Security / NOC Analyst Junior**. Il profilo ideale è in possesso di un diploma e/o laurea in informatica o equivalenti, che abbia maturato esperienza mínima nell’ambito Networking. **Requisiti richiesti**: competenze di network security per: - gestione di...

  • Security Analyst

    21 ore fa


    Milano, Italia MC Engineering A tempo pieno

    **MC Engineering**, società di consulenza specializzata in servizi di Ingegneria e Information Technology, per il potenziamento della propria struttura e del proprio team, ricerca: **Security Analyst** - diploma tecnico o laurea; - esperienza nell’interpretazione di report WAPT (Web Application Penetration Test); - competenze di analisi sulla compliance...


  • Milano, Italia Avanade A tempo pieno

    Come join us Nel ruolo di Cloud & Infra Security Consultant ti occuperai di proteggere il cyber space delle aziende clienti, garantendo la sicurezza di dati/informazioni e rilevando eventuali vulnerabilità e falle dei sistemi Skills and experiences - Hai un’esperienza pregressa nel campo della sicurezza, con particolare focus alla sicurezza IT in ambito...