DESCRIPTION

Sprout Social is looking to hire a GRC Analyst focused on Partnership Compliance for the IT team.

WHAT YOU’LL DO

• Create monitoring processes for changes in our social network partners’ terms of service
• Respond to technical assessments from our social network partners
• Pair with other members of the GRC, Legal, and Engineering teams to create, remediate, and monitor a set of internal controls built on the requirements from our social network partners
• Implement access governance over the social networks’ developer portals
• Participate in internal and external audits–testing, maturing, and automating our security controls along the way
• Support our Sales and Success teams in assuring customers of our industry-leading security and privacy posture with your knowledge of cybersecurity and procurement

The minimum qualifications for this role include:

• 5+ years of combined experience in security, IT audit, risk management, legal, or similar roles supporting a cloud-based environment
• Experience with system/tool administration and a deep understanding of role-based access controls
• Experience with reviewing and interpreting legal documents
• Experience in developing, implementing, and testing controls in support of compliance or privacy frameworks (e.g., SOC 2, SOX, NIST, ISO, CSA, GDPR, etc

Preferred qualifications for this role include:

• Attention to detail and a willingness to learn the technicalities of people, processes, and systems
• Strong interpersonal skills and ability to work independently across distributed teams
• Experience at social media, marketing, or similar companies
• Deep knowledge of security frameworks and processes
• Certifications in security (Security+, CISSP) or GRC (CISA, CRISC)
• Experience working closely with Security, Legal, Engineering, and Sales teams in supporting of company-wide objectives, internal and external audits, and the sales lifecycl

Within 12 months, you’ll make this role your own by:

• Own our partnership compliance program and independently lead technical assessments from our social network partners, testing controls and gathering evidence.
• Independently perform user access reviews and participate in internal and external audits, all while identifying and assessing gaps or issues
• Fully support our broader compliance and governance initiatives.
• Assist in defining the roadmap for future work.
• Surprise us! Use your unique ideas and abilities to change our GRC program in ways that we haven’t considered yet