Senior Compliance and Privacy Analyst

Requirements:

• 5+ years of experience of Compliance, IT audit, IT risk management and/or IT compliance
• Bachelor’s degree in Information Technology, Management Information Systems or equivalent
• ISACA CISA, CISM, CRISC certification and/or (ISC)² CISSP certification and/or IAPP CIPT certification
• Understanding of control requirements associated with regulatory compliance including EU GDPR, SSAE 18 SOC, HIPAA, GLBA, CCPA and PCI DSS
• Operational understanding of Federal Communications Commission (FCC)/Federal Trade Commission (FTC) telemarketing rules
• Telecommunications Industry, Information Technology and SaaS hosting experience a plus.
• Excellent customer communications (written and oral), analytical, technical, risk assessment and IT audit skill
• Excellent organizational and documentation skills
• Ability to work both as a member of a team and independently

Key Responsibilities:

• Perform annual IT audit procedures including Third-Party Partner and Vendor Assessments, Internal control audits and testing of control design and operating effectiveness
• Facilitate Annual Five9 SOC2 Type2 Audit
• Partner with Partners and Vendors to drive remediation of all Third-Party Assessments         
• Evaluate and test the design and operating effectiveness of Cloud Operations controls
• Identify control deficiencies and weaknesses and drive required remediation or improvements
• Create, manage and report on corrective action plans (CAPs) assigned to various business units
• Investigate reports of non-compliance and provide recommendations for corrective actions
• Document and report and drive remediation of compliance issues and incidents
• Ability to research, document and propose impact of country and region-specific Telecommunication, Business, and Privacy Laws and Regulations
• Respond to RFPs, RFQs and Vendor Security Questionnaires as they relate to data protection, security and compliance practices within Five9
• Meet with and present to Commercial Customers discussing Five9’s Security, Privacy and Compliance
• Partner with Five9 Commercial to support all Five9 Security, Privacy and Compliance questions.
• Develop communications for executive-level reporting
• Manage a process for continuous improvement of Cloud Operations Controls
• Provide edits to Legal customer contracts including MSA security and compliance requirements, Data
• Protection Agreements, Business Associate Agreements and other legal agreements which are impacted by Compliance, Information Security and Cloud Operations processes and procedures
• Co-host Customer onsite audits

Five9 embraces diversity and is committed to building a team that represents a variety of backgrounds, perspectives, and skills.  The more inclusive we are, the better we are.  Five9 is an equal opportunity employer.