GET TO KNOW OKTA

Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth.
At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences.
Join our team! We’re building a world where Identity belongs to you.
The Security Compliance team’s mission is to strengthen Okta’s position as the leading Identity-as-a-Service solution through a security-first approach to compliance. We are looking for someone with a strong compliance background and experience in the technical implementation of security controls from SOC2, ISO 27001, and other international frameworks. The right candidate will have participated in a mature ISMS program and will play a key role in providing customers with confidence in Okta’s leadership in the identity space. As a Principal Compliance Analyst, you will support security initiatives by engaging various process owners in the design, documentation, implementation, monitoring of the appropriate controls in our computing environments, and demonstrating those controls to external auditors. In addition you will plan and lead the private sector compliance initiatives.
The ideal candidate will have hands-on experience with the technical implementation of SOC2 and ISO controls in a cloud-based environment using tools such as Salesforce, Okta, ServiceNow, JIRA and others. This position requires a unique set of skills including project management, and an eye towards future standards and regulations that will impact our customers. If you’re a self-starter who wants to make a difference in global cloud security, we want you on board.

MINIMUM REQUIRED KNOWLEDGE, SKILLS, AND ABILITIES:

• Bachelor’s degree or higher in Computer Science, Management Information Systems or Accounting, or equivalent experience
• Comprehensive understanding of IT Security practices and the Governance, Risk, and Compliance lifecycle
• In-depth knowledge in IT security frameworks and best practices, such as NIST publications, FedRAMP, ISO 27001, CCM, IRAP Protected, ISMAP, BSI-C5, TISAX, SOX, HIPAA, ENS, HDS, and SOC2 Trust Principles and Criteria
• Understanding of IT methodologies, such as software development lifecycle and operations
• Strong analytical and problem-solving skills and the ability to “think-out-of-the-box”
• Strong oral, written and presentation communication skills
• Able to work independently or with a team

HELPFUL CERTIFICATIONS / SKILLS:

• Certified Information System Auditor (CISA)
• Certified Information Systems Security Professional (CISSP)
• Certificate of Cloud Security Knowledge (CCSK)
• Familiarity with JIRA and Okta
• Technical background
  Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: https://rewards.okta.com/can.
  The annual base salary range for this position for candidates located in Canada is between:$114,000—$172,000 CAD

• Participate in Security Compliance Assessments of the company’s computing environment, with focus on security controls
• Interpret requirements across multiple compliance frameworks
• Collaborate to manage and maintain common controls framework for Okta
• Scheduling compliance walkthroughs
• Ensuring consistent operations and communications across compliance teams
• Ensuring visibility into key compliance projects through reporting and metrics
• Analyze gaps between current status and future compliance framework needs
• Perform controls testing and develop recommendations based on confirmed observations
• Work with process and control owners to help them understand the audit results, identify remediation options, and prioritize their closure
• As needed, develop appropriate security documentation, including system security plans, information security policies, and risk assessment procedures
• Assess security impact on changes to the systems and applications
• Identify opportunities for improvement within the Compliance program and build plans to address them.