The database market is massive (the IDC estimates it to be $89B+ by 2024!) and MongoDB is at the head of its disruption. The MongoDB community is transforming industries and empowering developers to build amazing apps that people use every day. We are the leading modern data platform and the first database provider to IPO in over 20 years. Join our team and be at the forefront of innovation and creativity.

Team Description

The MongoDB Information Security organization is responsible for understanding the Cyber Security risks and threats that the business faces, and implements policies, processes and technology that reduces risk in alignment with business priorities. Cyber Security is a fast changing discipline, applies to every single employee and is a critical concern for our customers.

You will be part of the growing InfoSec Program Management & Strategy Team, focusing on cybersecurity education, awareness, and behavior. As the Cyber Security Education and Advocacy Analyst, you will be responsible for managing MongoDB's champions program and supporting programs to ensure our internal employees and external customers have the appropriate educational resources, awareness and security focus required in order to make MongoDB successful. This role will also provide exposure to assisting with the triage of publicly reported security issues in MongoDB products.

While the InfoSec team is responsible for securing aspects of MongoDB, we can only be truly successful if we are able to engage with our employees across various teams and utilize these relationships to better understand the concerns of everyone. The security champion program is intended to help identify those non-security team employees who wish to work with us in helping improve the security of their particular focus within the firm to develop stronger security controls. Having a global, proactive security program gives us unprecedented insight into our company security program culture, allowing us to enhance and improve our program more quickly and effectively.

The right candidate for this role will be

• Experienced with 2-3 years working in a technical organization, whether in a development, support, education or administrative role
• Experienced working in cyber security, technical program/project management, and or education design/curriculum design
• Passionate about learning modern Information Security and Cyber Security threats, mitigations and control frameworks
• Desire to improve one’s professional development, by obtaining security certificates in appropriate security domains
• Inspired to identify areas of improvement with respect to better ways to educate and enable our customer base (internal and external)
• Skilled at communicating across a diverse set of stakeholders (technical and non-technical)
• Enjoys sharing information engagingly and enthusiastically to inspire employees to take an interest in security
• Hyper-organized and capable of juggling multiple high-priority projects concurrently
• High sense of ownership, urgency, and drive
• Flexible and adaptable; able to work in ambiguous situations

Position Expectations

• Support and execute Company internal training, education and awareness initiatives, to ensure MongoDB employees are educated in Information Security Best practices and Company Policies
• Work with multiple stakeholders to develop “security champions programs” curriculum and ongoing awareness activities
• Coordinate MongoDB’s Security Champions Program: manage membership, project manage curriculum development, drive on-going engagement to develop a consistent and active Security Champions community
• Assist in triage of publicly reported security issues in MongoDB products
• Project manages the lifecycle of customer-facing documentation and resources pertaining to Security efforts within MongoDB and MongoDB’s Products

Success Measures

• Implement, manage, and maintain a consistent and active Security Champions Program. Coordinate Security Champions Program (process shepherding, project managing curriculum development, coordinating meetings, activities, and membership)
• Support ongoing cyber security educational initiatives
• Support development of security training playbooks and maintain and update internal education content (wiki) documentation
• Identify various Cohorts within MongoDB, understand their current concerns and risks, and work w/ Security Team members to develop cohort-specific training
• Assist in triage of publicly reported security issues in MongoDB products
• Project Manage the life cycle management of Product Security Documents (process shepherding, and quality control)
• In 3 months you’ll have fully ramped up to understand the Information Security Organization’s goals, and have implemented the new security champions program
• In 6 months you’ll have taken ownership of managing and growing the global security champions program
• In 12 months you’ll have identified and implemented a subset of areas for improvement within the InfoSec Education and Advocacy organization

To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!

MongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.