Clearwater Analytics is looking for a hands-on Technology Risk and Compliance Analyst within our growing Information Security team. This role will help drive the compliance and assurance efforts for Clearwater and assist with responding to third party security assessments and support quarterly access review testing.

Responsibilities:

Drive quarterly user access reviews and coordinate test findings with external auditorsAssists in the production of response to security questions in “request for proposals” (RFP’s) or customer assessmentsActs as first point of escalation for security/compliance questions for current and prospective customersReview third party vendors for security and compliance controls; review proposed client engagement terms and conditions and apply the company risk profile, providing the appropriate feedback as to any changes needed and documenting exceptions to the processIdentifies efficiency improvements in the security customer engagement process.Communicates strategies, standards, policies, procedures, communications, and awareness efforts with all business partners.Takes actions as directed to ensure compliance of global business units in actions necessary to ensure compliance with applicable frameworks.Ability to manage time effectively by hitting assigned deadlines and milestonesRequires minimum supervisor to work on daily tickets and tasks, can use documentation and team resources to complete most tasksWillingness and ability to maintain a positive, quality-oriented, reliable and flexible attitude

Requirements:Experience with identity access management reviews, external auditing, and development of policies and proceduresKnowledge of SOC 2 and ISO 27001 control frameworksDemonstrated experience with SOC 1 and/or SOC 2 audits and monitoring control activitiesExperience communicating technical controls and processes with customers and stakeholdersExcellent verbal, written and interpersonal communication skillsExperienced in Atlassian (JIRA) and Microsoft Excel