
Sr. Security Analyst I (Governance, Risk & Compliance) at Tandem Diabetes Care. Location Information: San Diego, California, United States. . GROW WITH US: . . Tandem Diabetes Care creates new possibilities for people living with diabetes, their loved ones, and their healthcare providers through a positively different experience. We’d love for you to team up with us to “innovate every day,” put “people first,” and take a “no-shortcuts” approach that has propelled us to become a leader in the diabetes technology industry.. . STAY AWESOME:. . Tandem Diabetes Care is proud to manufacture and sell the t:slim X2 insulin pump with Control-IQ technology. We’re also so much more than that. Our company’s human-centered approach to design, development, and support delivers innovative products and services for people who use insulin. Since many of our own team members live with type 1 diabetes, or have a loved one impacted by diabetes, the work is personal, and we are committed to the cause. Learn more at tandemdiabetes.com.. . A DAY IN THE LIFE:. . The Sr. Security Analyst will implement Tandem’s computer cyber security applications, configure changes in relation to security issues, evaluate and install security software, and document any security configurations, issues, or breaches. Requires significant in-depth experience in the cyber security field and be up to speed on current trends in the cyber security landscape. Additional responsibilities include assisting in external and internal audits, ensuring overall adherence to policy standards. The Senior Analyst will work closely with the Director of Cybersecurity GRC to develop, implement, and maintain a robust cybersecurity posture, ensuring the protection of sensitive data and systems. This role requires a deep understanding of cybersecurity principles, risk management methodologies, and regulatory compliance frameworks.. . . Design and deliver the technical configuration and implementation of security projects within Identity and Access Management, Provisioning, Authentication, Authorization, Monitoring & Certifications, Auditing and Reporting. In alignment with the established organizational framework and best practices.. . Conduct regular assessments to ensure compliance with internal policies and external regulations.. . Investigate security breaches and other cyber security incidents, and document all work performed to resolution; collaborate with various departments to ensure excellent communication in a timely manner.. . Maintain a comprehensive risk register and track the status of identified risks and remediation efforts.. . Developing and implementing a comprehensive training strategy that educates employees on cybersecurity best practices, company policies, and how to recognize and respond to security threats.. . Install and configure security tools and operate within corporate policy to protect systems and information infrastructure, including firewalls and data encryption and key management best practices.. . Develop, implement, and maintain cybersecurity policies, standards, and procedures in alignment with industry best practices and regulatory requirements (e.g., NIST, ISO 27001, SOC 2, HIPAA, PCI DSS).. . Assist with development of company-wide policies, procedures, standards, and best practices for. . Assess company against applicable security compliance and regulatory mandates and provide meaningful remediation suggestions and solutions within a dynamic and collaborative atmosphere.. . Monitor computer networks for security issues and monitor for problems relating to the confidentiality, availability, and integrity of corporate data. Establish a tracking and alert plan.. . Assist in the preparation for and coordination of internal and external audits, providing necessary documentation and support.. . Research security enhancements and make recommendations to management, including development of reports and analysis of trends/metrics.. . Provide guidance and support to various departments on GRC-related matters.. . Developing and implementing a risk-based framework to assess, monitor, and manage third-party vendors throughout their lifecycle, ensuring alignment with regulatory requirements, cybersecurity standards, and organizational risk appetite.. . Ensures compliance with company policies, including Privacy/HIPAA, and other legal and regulatory requirements.. . . YOU’RE AWESOME AT. :. . . Hands-on experience with the technical configuration and implementation of security projects within Identity and Access Management, Provisioning, Authentication, Authorization, Monitoring & Certifications, Auditing and Reporting.. . Hands-on experience in implementing or assessing security in Office 365 and Microsoft Azure Cloud environments.. . Proficiency in using GRC tools and platforms.. . Excellent analytical, evaluative, and problem-solving abilities.. . In-depth understanding and experience performing cyber security implementations.. . Demonstrated working knowledge of risk assessment as it is applied to cyber security.. . Experience with industry-based cyber security and/or control frameworks (NIST Cyber Security Framework, HIPAA, SOX, NIST Risk Management Framework, CIC CSC, GDPR, ISO 27001&2, SSAE18 (SOC1&2), SANS Top 20, etc.).. . Ability to communicate technical issues to non-technical end users in a concise and clear manner.. . . . EXTRA AWESOME:. . . B.S. in information security, cyber security computer science or related field or equivalent combination of education and applicable job experience.. . One or more of the following certifications preferred: CISSP, CCSP/CISM, GSEC or relevant SANS GIAC Certs, CompTIA Security+, CEH.. . 5 years information security/cyber security experience.. . Technical delivery experience executing cyber security implementations.. . Hands-on experience in two or more of the following technologies preferred: Okta, SailPoint IdentityIQ, Saviynt IGA, Oracle IAM, and Azure AD.. . . WHAT’S IN IT FOR YOU?. . In addition to innovative technology, we have a culture that fosters the idea that the happiest people are the most productive people. Not only do we hire forward-thinking achievers to join our workforce; we reward, develop, and retain them too. Just one of the many reasons of how we #StayAwesome! To learn more about our culture and benefits please visit . https://www.tandemdiabetes.com/careers. .. . BE YOU, WITH US!. . We embrace the value that every single one of us brings to the table. But sometimes we forget that when we don’t meet 100% of a job description’s criteria – maybe you’re feeling that way right now? We encourage you to apply anyway. Because we want you to be you, with us. . Tandem is firmly committed to being an equal opportunity employer and does not discriminate on the basis of age, disability, sex, race, religion or belief, gender identity or expression, marriage/civil partnership, pregnancy/maternity, or sexual orientation. We are an inclusive organization, and we welcome applications from a wide range of candidates. Selection for roles will be based on individual merit alone. . . COMPENSATION & BENEFITS: . . The starting base pay range for this position is $95,800.00 - $119,800.00 annually. Base pay will vary based on job-related knowledge, skills, experience and may also fluctuate depending on candidate’s location and the overall job market. In addition to base pay, Tandem offers a competitive compensation package that includes bonus, and a robust benefits package. . Tandem offers health care benefits such as medical, dental, vision, health savings accounts and flexible saving accounts. You’ll also receive 11 paid holidays per year, a minimum of 20 days of paid time off (starting in year 1) and have access to a 401k plan with company match. Learn more about Tandem’s benefits . here!. . YOU SHOULD KNOW: . . Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable state and local Fair Chance laws and regulations. A conditional offer of employment from Tandem is contingent upon successful completion of a thorough screening process comprised of a drug test (excluding Marijuana) and background check, which includes a review of criminal history information. Tandem has good cause to conduct a review of criminal history information of candidates for this position, as this role may involve access to proprietary, sensitive and/or confidential information, including customer protected health information. This review is required to ensure that individuals in such roles uphold high standards of trust and integrity so as to protect the interests of our customers, employees, and stakeholders.. . REFERRALS: . . We love a good referral! If you know someone that would be a great fit for this position, please share!. . If you are applying for this job and live in California, please read Tandem’s CCPA Notice: . https://www.tandemdiabetes.com/careers/california-consumer-privacy-act-notice-for-job-applicants. . . . #LI-KT1 . #LI-Remote. . . SPONSORSHIP: . . Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.. . . The position will be posted until a final candidate is selected for the requisition or the requisition has a sufficient number of applications.. .