Compliance Analyst

Company: InterActiveCorp
Location: New York
Posted on: February 25, 2021

Job Description:

As a Compliance Analyst at Vimeo, you'll work to ensure compliance with regulatory and industry mandates that include Sarbanes-Oxley (SOX), PCI, GDPR, ITGC, ePrivacy and others. You'll be responsible for the day-to-day aspects including scoping, enforcing controls, supporting all review exercises, updating and maintaining documentation, as well as working with all departments to complete assessments! You will also be a core member of the security organization embedded within the compliance team. You will serve as a guiding hand for organizational level initiatives such as security awareness and compliance best practices.-- What you'll do:

• Support all aspects of the Vimeo IT General Controls (ITGC) to ensure our continued compliance.
• Maintain processes to support the controls and ensure that control self-assessments and audits are conducted in a timely manner ensuring completeness and accuracy.
• Aid and monitor the effort to ensure compliance with Sarbanes-Oxley (SOX), PCI, ITGC, and others related frameworks.
• Perform audits and risk assessments of third parties such as vendors, services providers, consulting organizations, etc.
• Educates and mentors technical teams on embedding compliant practices into the way Vimeo operates to help foster a compliance culture.
• Must be able to build relationships with technology and business teams across the company. Skills and knowledge you should possess:
  • 1-2 years' experience in an information security compliance, audit, risk management or ISA/QSA role with hands-on experience in a multitude of compliance initiatives.
  • Must be familiar with AICPA standards and working knowledge of accepted Audit frameworks such as COBIT.
  • Understanding of Sarbanes Oxley (SOX Compliance requirements), PCI and IT General Controls.
  • Familiarity with CCPA, GDPR and ePrivacy.
  • Familiarity with a broad range of IT and Information Security products and technologies such as identity and access management, vulnerability management, encryption and key management, logging and monitoring and application security.
  • Familiarity with cloud-based environments and technologies with associated auditing methodologies.
  • Strong attention to detail, influencing and problem resolution skills. Bonus Points (nice skills to have, but not needed):--
    • At least one of CISSP, CISA, CISM, CSA, QSA preferred.
    • Experience running a large scale security awareness program. About us: Vimeo is the world's leading all-in-one video software solution. Our platform enables any professional, team, and organization to unlock the power of video to create, collaborate and communicate. We proudly serve our growing community of over 200 million users - from creatives to entrepreneurs to the world's largest companies. Vimeo is headquartered in New York City with offices around the world.--At Vimeo, we believe our impact is greatest when our workforce of over 650 passionate, dedicated people, represents our diverse and global community. We're proud to be an equal opportunity employer where diversity, equity and inclusion is championed in how we build our products, develop our leaders, and strengthen our culture. Are you 18 Years of age or older? If not, can you provide authorization of your eligibility to work? --*
      -- If you are related to anyone at our company or any of our affiliates, please provide employee name, company name and department:
      Desired Compensation: --*
      Vimeo Diversity, Equity & Inclusion: Voluntary Demographics We work hard to enable creators of all kinds to succeed, and to that end, we prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and creativity. We're committed to building a company and a community where people thrive by being themselves and are inspired to do their best work every day. Below is a set of voluntary demographic questions that are part of our inclusion efforts. If you choose to fill them out, the responses will be used (in aggregate only with no ability to see on a per candidate basis) to help us identify areas for improvement in our process. Your responses, or your choice to not respond, will not be associated with your specific application and cannot in any way be used in the hiring decision. I identify my gender as:
      Woman
      Man
      Non-binary / other gender (inclusive of bigender, agender, androgynous, gender fluid, gender non-conforming)
      I prefer to self-describe
      I prefer not to say
      I identify as transgender:
      Yes
      No
      I prefer to self-describe
      I prefer not to say
      I identify my sexual orientation as:
      Asexual
      Bisexual, pansexual and/or queer
      Gay and/or lesbian
      Heterosexual
      I prefer to self-describe
      I prefer not to say
      I identify my ethnicity as (mark all that apply):
      Alaskan Native / American Indian / Indigenous American / Native American
      Black / of African descent
      East Asian (inclusive of Chinese, Japanese, Korean, Mongolian, Tibetan, and Taiwanese)
      Latinx
      Middle Eastern
      Pacific Islander
      South Asian (inclusive of Bangladeshi, Bhutanese, Indian, Nepali, Pakistani, and Sri Lankan)
      Southeast Asian (inclusive of Burmese, Cambodian, Filipino, Hmong, Indonesian, Laotian, Malaysian, Mien, Singaporean, Thai, and Vietnamese)
      White
      I prefer to self-describe
      I prefer not to say
      Veteran Status
      Yes, I am a veteran
      No, I am not a veteran
      I prefer to self-describe
      I prefer not to say
      I have a physical disability:
      Yes
      No
      I prefer to self-describe
      I prefer not to say
      

Keywords: InterActiveCorp, New York , Compliance Analyst, Professions , New York, New York