Sr. SOC Support Analyst

• The estimate above represents the candidate's typical compensation range at the time of hire. Several factors may be utilized to determine your salary including but not limited to years of experience and specific skillsets compared to employees in this role. Candidates typically start at the lower half of the estimated range.
• This role is eligible to enroll in both Mondo's health insurance plan and retirement plan. In addition to this, this role is entitled to company-paid holidays, paid time off and Mondo's FUEL program.

SOC Audit Analyst - Responsibilities would Include:

• Review/upgrade audit framework documentation, testing flows, and procedures.
• Actively participate in the process of obtaining requested evidence.
• Initiate the requests for information evidence for business owners involved in the regions
• Perform and follow up the checkpoints as documented in the testing procedures
• Be a contact point between Global and Regional control owners for the controls in scope
• Prepare the answers/requirements for external auditors
• Review quarterly/monthly the controls execution and perform follow-ups with the control owners
• Gather SOC metrics for publication and to support the audit function
• Access rights/provisioning/de-provisioning/segregation of duties/ reviews
• Privileged access rights challenges
• Direct access to databases or data files
• Different access levels/Operating System/Application/Web Application/Database/Active Directory
• High-level knowledge regarding networks/cloud/on-prem -hybrid
• Batch jobs processing /scheduling (configurations/updates/backups)
• Real time-processing (config changes/transactions recording/completeness)
• Endpoint security (antivirus/antimalware/data loss prevention)
• Logs and logs management challenges
• Incidents and problem management
• Change management
• Disaster recovery and business continuity
• Skills, experience, and qualifications
• Ability to communicate clearly with colleagues at all levels.
• Well-developed listening and questioning techniques supported by analytical skills.
• Team player.
• Project management skills nice to have.
• Looking for continuous improvement.
• CISA/SOX/ISO certifications or related are a plus.
• IT Audit, SOX, ISO previous experience is a plus.
• Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field
• Relevant and practical experience and related education
• Excellent written and spoken English
• Ability to work independently with low-level supervision and in a global team distributed geographically
• Strong organization skills (set priorities meet deadlines, multiple simultaneous projects) and excellent documentation skills
• Excellent analytical and diagnostic problem-solving skills with the ability to provide solutions to identified problems
• Ability to communicate problems in terms that are understandable to end users at all levels
• Demonstrated experience in understanding, designing, delivering, and demonstrating compliance with information security requirements

Must Haves:

• Must be in EST or CST timezone

• Looking for a hands-on individual, this is not a manager or supervisor role

• Risk assessment process and procedures

• ISO 27001 has multiple controls required to be implemented, around 100 - Change management control is only one of them.

• Experience auditing and creating processes for INFOSEC

• From Day 1 ability to work on their own & don't need any handholding minimally 2+ years with ISO27001

• Designing processes, making links between processes, documentation & requirements

• Knowledge of key terms in the infosec space

• Experience working in large, complex infrastructures

Nice to Haves:

• Certs

• SOX (Sarbanes Oxley Act)

• Cyber Security framework