Information Security Analyst
Posted on 4/3/2024
ForgeRock

501-1,000 employees

Comprehensive digital identity and access management solutions
Company Overview
ForgeRock stands as a global leader in digital identity, providing comprehensive Identity and Access Management solutions that enable secure access to the connected world for consumers, employees, and things. The company's ability to manage and secure the complete lifecycle of identities, from dynamic access controls to storing authoritative data, is a testament to its technical prowess and industry leadership. With a proven track record of scalability and efficiency, demonstrated by its rapid growth to 160,000 customers in less than a year, ForgeRock offers a robust and secure platform that is adaptable to any cloud or hybrid environment.
AI & Machine Learning

Company Stage

N/A

Total Funding

$481.5M

Founded

2010

Headquarters

San Francisco, California

Growth & Insights
Headcount

6 month growth

-43%

1 year growth

-43%

2 year growth

-34%
Locations
Remote in USA
Experience Level
Entry
Junior
Mid
Senior
Expert
CategoriesNew
IT & Security
Cybersecurity
Requirements
  • 3+ years of experience working with risk assessments, security controls, and compliance audits.
  • Understanding of effective security controls at the systems, network, and application level and how to apply with cloud-based services.
  • Knowledge of industry standard control frameworks and guidelines.
  • Experience applying risk management principles to security organizations.
  • Experience with vendor security reviews and security terms in vendor contracts.
Responsibilities
  • Evaluate compliance with regulatory and compliance requirements.
  • Manage audits of services and solutions and maintain adherence to compliance and regulatory frameworks, such as ISO 27001, ISO 27017, ISO 27018, HIPAA, SOC 2, GDPR and CCPA.
  • Perform vendor security reviews for new and existing vendors.
  • Provide subject matter technical expertise on areas of security, privacy and regulatory compliance to support Ping Identity's interactions with customers while promoting assurance of Ping Identity's security and privacy program.
  • Perform recurring information security and compliance activities, including internal controls reviews. Review and update policies, procedures, and other security documents.
  • Develop audit runbooks to ease cross-training and audit preparation. Collaborate with control owners to assess audit evidence efficiency and control effectiveness.