Information Security Analyst II

We are seeking a skilled and experienced Information Security Analyst II. This individual will support Datadog’s ability to respond, add, and maintain compliance with various security compliance frameworks. This analyst will coordinate PCI-DSS audit activities and develop and deliver evidence from subject matter experts and Datadog tools. Additionally, we encourage a mindset of innovation and continuous improvement, looking to refine and enhance our approaches wherever possible.

At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them.

What You’ll Do: 

• Coordinate the completion of PCI-DSS audit activities, including managing the audit contractor, delivering of evidence, and conducting quality reviews of auditor documentation

• Serve as a key liaison and manage expectations between internal teams (including Engineering, Product) and internal/external auditors.

• Synthesize complex customer and regulatory standards into concrete requirements for the Datadog Engineering, Legal and Business teams.

• Assist Engineering teams with creation and implementation of security controls to address security compliance risks.

• Foster strong collaboration across teams to drive successful compliance outcomes and ensure alignment with organizational goals.

• Build and maintain robust relationships with stakeholders to understand their needs and deliver exceptional service.

• Continuously enhance technical expertise by staying updated with industry trends and emerging technologies.

• Facilitate open communication to share knowledge and insights, promoting a learning environment.

Who You Are: 

• Minimum of 3-5 years’ work experience in risk management, security compliance and/or auditing with significant hands-on control experience.

• A background in auditing or managing security compliance for SaaS based tech (AWS, GCP, Azure, and other SaaS based vendors like Salesforce, Workday, ServiceNow, etc.).

• Thorough understanding of one or more security compliance frameworks (e.g., FedRAMP, PCI-DSS, SOX, ISO 27001, SOC).

• Experience assessing control implementation across a technical environment to identify potential risks and proven ability to identify areas that require additional risk mitigation.

• Experience developing, guiding, implementing, and documenting security and control solutions that address compliance requirements.

• You are passionate about reading and writing, particularly when it comes to translating complex technical controls into language that resonates with both business and engineering audiences.

• You thrive in a collaborative culture where teamwork and shared learning are at the forefront. 

• Efficiency is a core value for you, and you consistently seek ways to optimize processes and outcomes.

• Your ability to bridge communication between different teams allows you to drive organizational success.

Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply.

Benefits and Growth: 

• New hire stock equity (RSUs) and employee stock purchase plan (ESPP)

• Continuous professional development, product training, and career pathing

• Intradepartmental mentor and buddy program for in-house networking

• An inclusive company culture, ability to join our Community Guilds (Datadog employee resource groups)

• Access to Inclusion Talks, our internal panel discussions

• Free, global mental health benefits for employees and dependents age 6+

• Competitive global benefits

Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog.