Full-Time
Information Security Analyst I
Posted on 7/25/2024
Smarsh
1,001-5,000 employees
Cloud-based archiving and compliance solutions
Compensation Overview
$85k - $105kAnnually
Entry, Junior
Pleasanton, CA, USA
Hybrid position in Pleasanton.
- 1+ years of Information Security professional experience.
- Bachelor's degree is desired.
- Demonstrated experience of being an effective team player.
- Demonstrated successful experience with risk assessment and vendor management tasks.
- Experience producing reporting.
- Have built a network of peers in their field and have various industry experiences.
- Be able to share their knowledge of the relevant regulatory environment and clearly articulate risk management concepts and the process of risk assessments.
- Data analytical skills and know where to seek Information Security risk reporting guidance.
- Can highlight situations when their ethics were strengthened by experiences.
- Be able to prove their effectiveness as a team player.
- Have curiosity about how we protect information.
- Conduct Due Diligence / RFP Security Questionnaire Response and annual response quality certification.
- Gain proficiency in Smarsh products knowledge for compliance evidence and audits.
- Support InfoSec GRC leader to develop the ISO27001 program strategy, charter, and ISMS Manual.
- Support technical risk reporting based on monitoring internal and external vulnerabilities, ensuring timely resolution, and creating vulnerability assessment reports.
- Test and manage vendor risk assessment tools and processes.
- Contribute to establishing an Information Security Policy program for ISO27001 ISMS audits and assisted in developing an ISMS reporting dashboard for the council.
- Supported the launch of firm-wide cybersecurity awareness training and reported on completion metrics.
- Helped support the Smarsh Business Continuity Charter, Strategy, Program, and Test planning across products and Corp IT.
- Help develop performance metrics and a Risk reporting dashboard.
Smarsh provides archiving and compliance solutions specifically designed for financial services, government agencies, and other regulated industries. Their main product is a cloud-based archiving system that allows organizations to securely store, search, and manage their communications data, including emails, text messages, and social media interactions. This system helps businesses meet complex security, data privacy, and regulatory requirements. Smarsh differentiates itself from competitors by offering a scalable Software-as-a-Service (SaaS) model that caters to both large enterprises and smaller organizations, ensuring that clients can efficiently manage their communication data and stay compliant with evolving regulations. The company's goal is to help organizations navigate the complexities of compliance and data management while focusing on security and ease of use.
Company Stage
Acquired
Total Funding
$42.4M
Headquarters
Portland, Oregon
Founded
2001
6 month growth
↑ 10%1 year growth
↑ 10%2 year growth
↑ 4%
Simplify's Take
What believers are saying
- Smarsh's global expansion includes a new office in Costa Rica for enhanced support.
- Integration with OpenAI's ChatGPT API enhances Smarsh's AI compliance capabilities.
- Partnership with Verizon simplifies mobile compliance procurement for Verizon's clients.
What critics are saying
- Integration with OpenAI's API may pose compliance and security challenges.
- EU's AI Act requires significant adjustments to Smarsh's AI systems.
- Expansion into Latin America may expose Smarsh to regional instability.
What makes Smarsh unique
- Smarsh offers cloud-native, context-aware archiving solutions for regulated industries.
- The company integrates with popular tools like Microsoft Teams for seamless compliance.
- Smarsh serves 9 of the top 10 banks, showcasing its industry trust.
Help us improve and share your feedback! Did you find this helpful?