GRC Security

Welcome to the future of cloud networking and security!

Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by networking and security pioneer Shlomo Kramer (Check Point, Imperva) and early investor (Palo Alto Networks, Exabeem, Trusteer and more). Cato’s unique technology inspired a brand-new product category, later named “SASE” by Gartner and a market expected to reach $28.5 billion by 2028.

This is your opportunity to get on the rocket ship and join a company that is building a cutting-edge enterprise network and secure cloud platform, and is on a fast track to becoming the worldwide market leader – don’t miss it!

We are looking for a GRC Security Specialist to join us. In this critical role, you will be deploying common governance, risk, and compliance processes, controls, conducting audits, documenting, and ensuring that technologies and business operations are structured and configured for data protection and compliance.

Responsibilities:

• Proactively protect the availability, integrity, and confidentiality of all customer and company data.

• Directly responsible for policies, procedures, and controls to assure compliance with applicable regulatory, legal, and audit requirements as well as good business practices.

• Develop a compliance strategy and approach, and ensure compliance with contractual requirements and globally recognized standards and guidelines.

• Identify regulatory, legislative, and industry-specific compliance requirements and define controls that can be used to meet those requirements.

• Act as a compliance officer and serve as the intake on compliance-related inquiries, and coordinate with subject matter experts.

• Conduct periodic internal reviews or audits to ensure that compliance procedures are followed.

• Conduct or direct the internal investigation of compliance issues.

• Assess product, compliance, or operational risks and develop risk management strategies. Discuss emerging compliance issues with management or employees.

• File appropriate compliance reports with regulatory agencies and disseminate written policies and procedures related to compliance activities.

• Advise internal management or business partners on the implementation or operation of compliance programs.

• Provide employee training on compliance-related topics, policies, or procedures.

• Monitor compliance systems to ensure their effectiveness.

• Prepare management reports regarding compliance operations and progress.

• Keep informed regarding pending industry changes, trends, and best practices and assess the potential impact of these changes on organizational processes.

• Design or implement improvements in communication, monitoring, or enforcement of compliance standards.

• Develop an awareness program. Create and deliver awareness materials to all Employees.

Requirements:

• At least 3+ years of hands-on experience in Governance, Risk, and Compliance.

• Demonstrated knowledge of authoritative industry sources such as FedRAMP, PCI DSS, SOC2, ISO standards, etc.

• Experience with software development and QA life cycle. SaaS experience preferred.

• Knowledge of complex application, network, host, and virtual system operations.

• Ability to relate business requirements and risks to policy and technology implementation.

• Expert-level knowledge of risk assessment and remediation methodology, processes, and procedures.

• Ability to manage projects and implementations across organizations.

• Ability to effectively interface with technical staff, senior management, and customers.

• Strong project management experience