• Seek to understand the company data, infrastructure, and software architecture, especially related to our SDLC and security touch points, with an emphasis on compliance-related requirements.
• Investigate and make recommendations to strengthen our security posture across data, SDLC, and infrastructure, particularly in relation to compliance frameworks like FedRAMP.
• Work with stakeholders to respond promptly to security-related questions or questionnaires from clients or prospects, ensuring compliance with industry standards and frameworks, including FedRAMP when applicable.
• Ensure the tech security landscape is fully understood and communicate any significant changes or developments to stakeholders and decision-makers.
• Hands-on work with integrating security tooling and systems when required, ensuring alignment with security policies and applicable regulatory frameworks.
• Perform ad-hoc investigations into security issues, including those that could impact regulatory compliance.
• Develop, track, and regularly report on security metrics and KPIs for the platform, ensuring they reflect key compliance requirements.
• Provide advice and support on security concerns to any interested parties within the organization, helping ensure the implementation of necessary controls.
• Use security tooling to prepare and send vulnerability reports regularly, ensuring that reporting is in line with our compliance obligations.
• Collaborate with finance and stakeholders when appropriate on the procurement of security-related software tools.
• Work with stakeholders to identify and address security process or policy gaps, including those related to compliance with regulatory standards like FedRAMP.

Required Qualifications:

• 5+ years in a hands-on security or software engineering-related role.
• Experience responding to data security questionnaires and ensuring compliance with industry standards.
• Experience investigating and addressing software or infrastructure security issues, with some focus on regulatory or compliance-driven requirements.
• Strong understanding of software development and infrastructure common practices, especially related to the SDLC.
• Hands-on experience with security software and tooling, including those supporting compliance efforts.
• Proven ability to communicate security concepts to senior stakeholders in both written and oral form.

Preferred Qualifications:

• A technical background rather than a pure compliance background is preferable, with experience in compliance frameworks such as FedRAMP, NIST-800-53, ISO 27001, SOC 2 Type 2, PCI DSS, HIPAA, etc.
• Understanding of relational databases and security best practices, including those relevant to compliance frameworks.
• Familiarity with ETL, data warehouse, and reporting systems, and related security practices.
• Knowledge of AWS services and security tools would be advantageous, especially in supporting compliance initiatives.

What’s in it for you?

Join an ever-growing, market disrupting, global company where the teams – comprised of the best of the best – work in a fast-paced, collaborative, and creative environment! As the market leader, every day at NICE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. If you are passionate, innovative, and excited to constantly raise the bar, you may just be our next NICEr!

Enjoy NICE-FLEX!

At NICE, we work according to the NICE-FLEX hybrid model, which enables maximum flexibility: 2 days working from the office and 3 days of remote work, each week. Naturally, office days focus on face-to-face meetings, where teamwork and collaborative thinking generate innovation, new ideas, and a vibrant, interactive atmosphere.