The WP Engine GRC initiatives have wide ranging visibility and provides a unique opportunity to actively partner with departments across the organization. As the GRC Analyst you will contribute to WP Engine's ability to achieve compliance reporting goals through control framework development and implementation which will in turn directly affect our ability to effectively engage customers and grow the business. GRC falls within the Security team, within which we promote and embrace the importance of collectively managing and reporting technical and procedural risk. Join a team with a truly collaborative and coordinated approach to IT security risk management!

• Maintain information security policies and conduct regular self-assessments against policy. Clearly document and communicate self-assessment procedures, results and process improvement recommendations.
• Actively work with stakeholders to develop and track process improvements in line with policy, compliance reporting objectives and industry best practice methodology.
• Review policies on a regular basis and apply relevant updates when required.
• Contribute to the further development of the WP Engine risk management program. Conduct regular IT risk assessment procedures and provide analysis and suggested control implementation solutions.
• Liaise with Finance and Accounting to understand business processes and assist with IT controls development and implementation.
• Display intimate and working knowledge of regulatory and compliance reporting and frameworks such as SOX, SOC 1, SOC 2, PCI and ISO27002.
• Track and clearly report progress of initiatives.
• Work with members of our R&D group to align with SOC 2 criteria and actively document controls and process improvements within the environment. Work with stakeholders to remediate identified control process improvements and potential gaps.
• Provide regular status updates to GRC Manager and Director of Security related to IT security risk assessments, policy self-assessments, policy documentation, controls implementation within the environment, etc.
• Assist with the creation of Security Awareness Training material by collaborating with Security Engineers and Learning and Development.
• Work with our Sales and Marketing teams to prepare customer questionnaire responses related to WP Engine security programs, processes and control environment.
• Partner with external audit firms on audit and compliance initiatives.
• Provide input to weekly Security Council meeting agenda and participate when necessary.

• Roles at this level require a university/college degree
• 3-5 years relevant experience in an IT audit/risk management role
• Must have experience with IT controls implementation in the context of SOX and SOC 2/3
• Should have experience with identifying, tracking, reporting and remediating IT procedural and technical risk
• Working knowledge of web based technologies and cloud environments is desired to achieve success in this role
• Big-4 is a plus
• CISA certification is a plus

• Compensation (We offer market competitive salaries)
• Stock Options (Every employee is an owner in the company)
• Health Benefits (100% Paid Employee Medical, Dental, and Vision)
• 401(k) (Make the most of retirement)
• Life and Disability Insurance (100% Paid Life, STD, LTD and AD&D)
• Generous Vacation Time (Who doesn't like time off)
• Transportation (Downtown parking or commuter reimbursement)
• Lunch (Provided Monday – Thursday)
• Gym membership discount