Everbridge is looking for a highly technical information security risk analyst focused on methodically managing risk within the company. You will be responsible for evaluating and documenting control implementation with regard to FedRAMP and ISO 27001 requirements, assisting with internal security reviews, and working with internal teams to address compliance and audit issues.

Job Duties Include:

•  Participate in evaluating Everbridge SaaS-based Platform & Service offerings against FedRAMP Moderate control baseline and provide support for on-going compliance testing and reporting.

• Participate in Internal audits of Corporate Systems and Third-Party Vendor Services.

• Routinely analyze and report on the state of key controls reviewed as part of Everbridge’s Continuous Monitoring Plan (ConMon).

• Ensure compliance with risk-based governmental and industry standards and security compliance frameworks such as FISMA, FedRAMP, ISO 27001, BSI C5, and SSAE 16 SOC 2 Type II.

• Assist in tracking Corrective Action Plans (CAP’s) and Plan of Actions and Milestones (POA&Ms) towards remediation.

• Provide support for corporate information security, compliance & risk management projects and processes.

• Enhance existing processes via process engineering and workflow automation.

Required Qualifications:

• Deep knowledge of NIST SP 800-53 rev 4, Moderate Impact Systems and FedRAMP-Defined Assignment and Selection Parameters and control testing.

• Deep knowledge of ISO-27001 standards and control testing.

• Experience applying general security and risk management concepts to globally deployed cloud-based SaaS platform.

• Experience with managing and supporting an Enterprise Risk Management Lifecycle, Processes and Procedures.

• Experience with managing risks associated with Third-Party Vendor Cloud Service integrations.

• Experience with participating in Disaster Recovery Planning and Management in an Information Security, Compliance or Risk Management supporting role.

• Experience in preparing and managing compliance auditing workpapers such as document request lists, standard test cases and audit test plans.

• Ability to articulate compliance standards and specifications to technical and non-technical audiences to assist in the design of technical controls to meet regulatory requirements

• U.S. Citizenship is required

Preferred Qualifications:

• Ability to work and effectively prioritize in a highly dynamic work environment.

• Experience using Atlassian Jira for team workload assignment and prioritization.

• Experience balancing multiple Key Priority Initiatives (KPI’s) and workload assignments through Scrum or Kanban project management.

• Experience using SumoLogic or similar solutions for Security Audit and Compliance Analysis and management reporting.

• Experience configuring, managing and providing support for GRC or IRM tools such as Archer, ZenGRC or RSAM.

• CISSP, CISM, CRISC, CISA or ISO Lead Implementor Certification.

About Us:

Our team makes a difference during the most difficult times and challenging situations.  Our people are dedicated to solving problems.  Our software was built to save lives. Our unifying mission is to keep people safe and businesses running. 

Headquartered in the great cities of Boston and Los Angeles, with operations all over the world, our team of 500+ dedicated employees support over 3,400 global customers every day in their most crucial moments. During public safety threats such as active shooter situations, terrorist attacks or severe weather conditions, as well as critical business events such as IT outages or cyber-attack incidents, customers rely on our SaaS-based platform to quickly and reliably aggregate and assess threat data, locate people at risk and responders able to assist, automate the execution of pre-defined communications processes, and track progress on executing response plans.

Our culture is all about “Making a Difference,” and we are proud to serve:

• 8 of the 10 largest U.S. cities

• 9 of the 10 largest U.S.-based investment banks

• 25 of the 25 busiest North American airports

• 6 of the 10 largest global automakers

• Over 1,000 Hospitals

As we continue to grow and transform the field of critical event management, we need passionate, committed individuals to help us carry out our mission. Click here to learn more about what we do.  Do you think you have what it takes to make a difference? Apply to be a part of our award-winning team today! 

Everbridge is an Equal Opportunity/Affirmative Action Employer. All qualified Applicants will receive consideration for employment without regard to race, creed, color, religion, or sex including sexual orientation and gender identity, national origin, disability, protected Veteran Status, or any other characteristic protected by applicable federal, state, or local law.