Simplify Logo

Full-Time

GRC Analyst

Posted on 9/9/2024

Pax8

Pax8

1,001-5,000 employees

Cloud marketplace for IT service providers

Data & Analytics
Enterprise Software

Compensation Overview

$76kAnnually

Mid

United States

Category
Cybersecurity
IT Project Management
IT & Security
Required Skills
Communications
Management
Requirements
  • At least three (3) years of experience in IT security role with incident management or response related experience.
  • Proven experience in resilience and security incident response efforts (e.g. understand asset criticality, data classification, business impact, key stakeholder engagement and strong cross-functional communications).
  • Understanding of public cloud deployments and associated security risks and controls.
  • Experience working in a Zero Trust focused security program.
  • Strong understanding of security best practices and frameworks (e.g., MITRE ATT&CK, NIST Cybersecurity Framework, ISO 27001:2022 and SOC2 audit efforts).
  • Excellent communication, interpersonal, and leadership skills.
  • B.A./B.S. in a related field or equivalent work experience.
  • Risk Focused Certifications such as CISA, CRISC, CISSP is a plus
Responsibilities
  • Manage inquiries and requests related to incident response through cross-functional team coordination.
  • Oversee execution of incident response tabletop exercises.
  • Participate in security program improvements and tool selection efforts aligned with the security incident response and resilience.
  • Develop and maintain security procedures for incident management and response by defining and documenting security best practices for managing an incident management process.
  • Stay up-to-date on industry trends and best practices by continuously learning and adapting the security program to address evolving threats.
  • Collaborate with other departments by partnering with IT, engineering, legal, data management office, HR, and other departments to ensure security considerations are integrated into all business processes.
  • Measure and report on security performance by tracking key metrics (KPIs/KRIs), identifying areas for improvement, and reporting to the GRC leader and other stakeholders.
  • Collaborate on building out an improved third-party risk management program that supports risk reviews of our internal suppliers and marketplace vendors.
  • Perform risk assessments on third parties, track security risks, and promote strong compliance practices.

Pax8 operates a cloud marketplace that connects businesses with a variety of cloud-based solutions, including software and infrastructure services from major vendors like Amazon Web Services and Microsoft. Clients such as IT service providers, managed service providers (MSPs), and value-added resellers (VARs) use Pax8's platform to access these solutions and enhance their service offerings. The marketplace not only provides cloud solutions but also includes educational resources like the Pax8 Academy, which helps clients understand and utilize cloud technology effectively. Unlike many competitors, Pax8 emphasizes building a collaborative ecosystem where partners and vendors can work together, offering insights and coaching to help businesses grow. The company's goal is to empower its clients by providing the tools and knowledge they need to succeed in the cloud computing market, generating revenue through subscription fees and sales of cloud services.

Company Stage

N/A

Total Funding

$395.5M

Headquarters

Greenwood Village, Colorado

Founded

2011

Growth & Insights
Headcount

6 month growth

-1%

1 year growth

9%

2 year growth

35%
Simplify Jobs

Simplify's Take

What believers are saying

  • Winning the 2024 Microsoft Americas Partner of the Year Award highlights Pax8's strong industry reputation and potential for continued growth.
  • The appointment of a Chief AI Officer and the launch of an AI-enabled marketplace demonstrate Pax8's commitment to innovation and staying ahead of technological trends.
  • Partnerships with companies like Exium and FlexPoint provide MSPs with advanced tools for cybersecurity and financial management, enhancing operational efficiency and client satisfaction.

What critics are saying

  • The rapidly evolving cloud services market requires constant innovation, and Pax8 must continuously update its offerings to stay competitive.
  • Dependence on partnerships for advanced features could pose risks if these partnerships dissolve or fail to deliver expected benefits.

What makes Pax8 unique

  • Pax8's marketplace uniquely combines cloud solutions with educational resources and support, setting it apart from competitors who primarily focus on product offerings.
  • The Pax8 Academy provides specialized cloud-based education, ensuring clients are well-equipped to navigate cloud technology, a feature not commonly found in other cloud marketplaces.
  • Strategic partnerships with companies like Exium and FlexPoint enhance Pax8's platform by integrating advanced cybersecurity and automated billing solutions, offering a more comprehensive service to MSPs.

Benefits

Medical, dental, and vision (most plans covered at 100%)

Employee Assistance Program

Paid holidays and Extended Holiday Program

Flexible vacation and paid sick time

Military, parental, and family care leave

401(k) with company match

Bonus program

Employer-paid life insurance, short-term, and long-term disability

Home-office allowance

Transportation benefits

Pet adoption reimbursement