As a Security Compliance Analyst, your role is crucial in ensuring that Fortinet's information systems and processes comply with relevant security standards, regulations, and policies. You will be responsible for evaluating, developing, and maintaining the organization's security compliance framework, conducting audits and assessments, and recommending corrective actions to mitigate risks. Your expertise in security compliance will help safeguard Fortinet's sensitive data and maintain a robust security posture.
As a Security Compliance Analyst, your role is crucial in ensuring that Fortinet's information systems and processes comply with relevant security standards, regulations, and policies. You will be responsible for evaluating, developing, and maintaining the organization's security compliance framework, conducting audits and assessments, and recommending corrective actions to mitigate risks. Your expertise in security compliance will help safeguard Fortinet's sensitive data and maintain a robust security posture.
Duties and Responsibilities
Compliance Assessment: Perform regular assessments and audits of the organization's security controls, policies, and procedures. Identify potential vulnerabilities, risks, and compliance gaps through comprehensive reviews and analysis. Evaluate compliance with relevant regulatory frameworks, such as SOC2, ISO27001, GDPR, HIPAA, PCI DSS, and others. Collaborate with stakeholders to understand business requirements and ensure compliance measures align with industry standards.
Perform regular assessments and audits of the organization's security controls, policies, and procedures.
Identify potential vulnerabilities, risks, and compliance gaps through comprehensive reviews and analysis.
Evaluate compliance with relevant regulatory frameworks, such as SOC2, ISO27001, GDPR, HIPAA, PCI DSS, and others.
Collaborate with stakeholders to understand business requirements and ensure compliance measures align with industry standards.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
The Inside Sales Representative (ISR) is a key member of Fortinet’s sales organization, responsible for driving growth within an assigned territory. In this role, you will partner closely with Field and Inside Sales Acco
We are seeking an AI Infrastructure Engineer to build, operate, and continuously enhance the Linux and GPU-based infrastructure that powers our AI platforms and performance testing environments. This is a highly hands-on
At Fortinet, we believe AI will fundamentally optimize how work gets done. We are seeking an HR AI & Automation Analyst to help lead the transformation of the People Function by leveraging AI, automation, and process red
Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to saf
The Inside Sales Representative (ISR) is a key member of Fortinet’s sales organization, responsible for driving growth within an assigned territory. In this role, you will partner closely with Field and Inside Sales Acco
In this key role, you will manage and drive direct sales engagements into a set of Named Fortune 1000 accounts and strategic Partners. Your focus will be to create and implement strategic account plans focused on attaini
Join Fortinet, a cybersecurity pioneer with over two decades of excellence, as we continue to shape the future of cybersecurity and redefine the intersection of networking and security. At Fortinet, our mission is to saf
The Inside Territory Account Manager (ITAM) will manage an assigned territory in support of the SLED team. The ideal candidate will have experience in the networking and/or security sectors of technology. The ITAM will c
Compliance Framework Development: Develop and maintain an effective security compliance framework that aligns with organizational goals and objectives. Create and update policies, standards, and guidelines to address emerging security threats and regulatory changes. Design and implement security controls, procedures, and technical safeguards to ensure compliance across the organization.
Develop and maintain an effective security compliance framework that aligns with organizational goals and objectives.
Create and update policies, standards, and guidelines to address emerging security threats and regulatory changes.
Design and implement security controls, procedures, and technical safeguards to ensure compliance across the organization.
Risk Assessment and Management: Conduct risk assessments to identify potential security vulnerabilities and recommend appropriate risk mitigation strategies. Collaborate with cross-functional teams to implement risk management frameworks and ensure compliance with risk management policies. Provide guidance and support to stakeholders in understanding and addressing security-related risks. Monitor and report on the effectiveness of risk mitigation strategies.
Conduct risk assessments to identify potential security vulnerabilities and recommend appropriate risk mitigation strategies.
Collaborate with cross-functional teams to implement risk management frameworks and ensure compliance with risk management policies.
Provide guidance and support to stakeholders in understanding and addressing security-related risks.
Monitor and report on the effectiveness of risk mitigation strategies.
Documentation and Reporting: Prepare comprehensive reports and documentation related to security compliance assessments, audits, and findings. Maintain accurate records of compliance activities, audit results, and corrective actions taken. Provide regular reports to management, stakeholders, and regulatory bodies as required.
Prepare comprehensive reports and documentation related to security compliance assessments, audits, and findings.
Maintain accurate records of compliance activities, audit results, and corrective actions taken.
Provide regular reports to management, stakeholders, and regulatory bodies as required.
Qualifications and Experience
Bachelor degree in Information Security/Systems, Computer/Electronic Engineering, Communications Engineering or related field, and eight (8) years of experience in information security, audit, compliance, risk management or related occupation
Proven experience in security compliance, risk management, or a similar role
In-depth knowledge of security standards, frameworks, and regulations (e.g., SOC2, ISO27001, GDPR, HIPAA, PCI DSS).
Experience in design and implementation of information security policies and controls
Experience with core security technologies such as security information and event monitoring systems (SIEM), firewalls, network and host intrusion prevention and detection systems, proxies, vulnerability scanners, and anti-virus solutions
Experience with cloud security management
Demonstrated ability to understand and interpret audit, as well as security requirements
Superior interpersonal and communication skills
One or more of the following certifications preferred: ISO 27001 LA, CISSP, CCSP, CISA, and PMP
The Canada base salary range for this full-time position is expected to be between $106,700 - $130,500 annually. Wage ranges are based on various factors including the labour market, job type, and job level. Exact salary offers will be determined by factors such as the candidate’s subject knowledge, skill level, qualifications, and experience.
Fortinet strives to provide you and your family with a comprehensive benefits package. Benefits eligibility starts on your first day of hire and comprises of 100% company paid medical, dental, and vision coverage, including a Health Spending Account and a Personal Spending Account that gives you flexibility to spend where you need it the most. Our Employee & Family Assistance Plan (EFAP) offers you and your family access to various services like counseling, legal advice, mental health resources etc. We also provide critical illness, disability, and life insurance, as well as a Group Registered Retirement Savings Plan (RRSP) with a company match to help you save faster for retirement. We offer competitive Paid Time Off and flexible leave policies, including paid health days, to help you take care of yourself and your family members.
All roles are eligible to participate in the Fortinet equity program. Bonus eligibility is reviewed at time of hire and annually at the Company’s discretion.
About Fortinet Inc.
Software & SaaS14138 employeesFounded 2000
Cybersecurity company providing integrated network security and protection solutions.