As a Governance, Risk, & Governance Compliance Analyst at Vimeo, will support in educating, establishing, & maintaining Information Security Governance, Risk Management, & Compliance (GRC) workflows coordinate risk audit & risk compliance projects, as well as help maintain standards, policies, & policies that govern the information security program for the company.

You will also be a member of the security organization on the GRC team, & a guiding hand for organizational level initiatives such as security awareness & vulnerability assessment & management. 

What youll do:

• Enhance GRCs capabilities such as cyber risk management, vendor security assessment, security training & communications, & our compliance program.
• Establish processes to support the controls & ensure that information security risk impact assessments & risk mitigation strategies are implemented throughout the organization with a specific focus on ensuring proper implementation of product features.
• Collaborate with cross-functional teams to design, implement, & maintain SSO integrations using Okta, ensuring seamless & secure access to various applications & services.
• Facilitate the automated provisioning & synchronization of user identities across platforms & applications.
• Collaborate with team members & stakeholders to understand or identify defined work problems & program goals, obtain prioritized deliverables, & discuss program impact
• Perform audits & risk assessments of Vimeo systems & vendors to understand privacy implications & make recommendations for vendor risk mitigation 
• Educate & mentor technical teams on identifying security risks to foster more secure products & services. 
• Establish continuous monitoring capabilities, report on key performance indicators, identify, track & monitor control exceptions & draft audit responses.
• Must be able to build relationships with technology & business teams across the company.

Skills & knowledge you should possess:

• 4-6 years of full-time work experience in audit, risk management, or identity access management. Experience in leading security assessments & risk assessments.
• Technical architecture experience integrating identity management, access management & access governance software into clients' infrastructure & applications
• Experience configuring & managing Okta Identity Cloud, including SSO integrations, user provisioning, & authentication protocols (e.g., SAML, OAuth).
• Advanced technical knowledge of cloud technology (AWS, GCP, Azure), security controls, database systems, network systems, auditing & compliance software & tools, & IT infrastructure. 
• Familiar with security compliance frameworks & requirements, e.g., SOC 1/2, HITRUST, FedRAMP, IRAP, PCI, ISO27001, NIST CSF
• Highly motivated, strong work ethic, attention to detail, & organizational skills.
• Thorough understanding of risk management principles & methodologies.
• Ability to translate abstract & vague regulatory requirements into cohesive actionable compliance tasks.
• Ability to collaborate in a team setting & moderate conversations involving cross-functional groups.

Targeted Base Salary Range: $105,300 to $160,500