Leveraging our knowledge from companies like apple, bcg, and ideo, we’ve rethought how people interact with spaceLatch delivers a full-building operating system designed to help owners, residents, and third parties like guests, couriers, and service providers, seamlessly experience the modern buildingWe’ve done this by combining software, devices, and services into a holistic platform that makes spaces more efficient, enjoyable, and profitable.
The next chapter of the latch story will be our most exciting yet, and we’re looking for more talented team members to help fuel our growth.
Our team is in search of a security compliance engineer to help us change the way digital products are secured.
About the team:
Our experienced security team manages all areas of product security, platform security, compliance, audit, and riskWe build and protect the systems that enable companies to create designs that make everything possibleYou will be part of a unique team that develops and manages compliance with audit requirements and other frameworks, creates and enhances audit automation as well as the identification of risk that doesn`t inhibit speed and innovation for product developmentThis position will report to the director of security compliance.
Responsibilities:
Help us be compliantDevelop roadmap initiatives based on business needs (e.g.: gdpr, soc 2, iso 27001, etc.) and drive them through readiness and gap assessments, control implementation, and third party audits
Delight in the detailsRespond to questionnaires, emails, conduct research, lead calls, and communicate with internal/external stakeholders using explicit technical details and professionalism
Understand risky businessTake traditional risk management concepts and apply them to out of the box situations and complex technologies that drive acceptable business resolutions as a co-owner
Build knowledge, not perfectionAbility to create diagrams or necessary customer artifacts including policies, standards and procedures, and surface work to build on areas that need improvement
Work harder, not longerEstablish process improvements utilizing automation for audit testing, task creation, evidence validation and establishing in-scope system apis
Empower othersShare information, build relationships, and collaborate across all aspects of security, sales, legal, finance and engineering with candor and compassion
Qualifications:
5+ years experience in information security
3+ years experience in areas of compliance, audit, and risk; preferably at a saas startup
2+ years experience with audit testing, control validation and automation
2+ years experience with continuous monitoring and api integrations, such as tugboat logic
Polished professionalism developed through consulting or engaging directly withcustomers, auditors, and third-parties
Self-directed and motivated to foster creative problem solving as well as out of the box thinking
Working understanding of how compliance operates with cloud-native
Technology stacks in balance with business needs
Broad exposure to complex and cutting edge technologies such as containerization, real-time threat detection, secrets management, continuous deployment, code repository change controls and aws/devsecops tools
Founded in 2014, latch now has 300+ team members working to make spaces better places to live, work, and visitOver half of our team members work in product development roles, and our team leverages established expertise in over 55 professional disciplines.
We offer unlimited paid time off, a comprehensive benefits package, mental health support, and an environment where employees are surrounded by creative, empowered, and dynamic peers.
In conjunction with our core values: contagious determination, humility, trust, inclusion, action with intent, and privacy, we approach our work with care and a sense of duty, to make the world a better space.
We embrace diversity and strive to create an inclusive and equitable environment for all.
