ISO27001 Compliance Analyst

About us

At Viasat, the work you do helps people stay connected in ways that matter, from everyday moments to critical missions across air, land, sea, and space.

We’re a place for people who are curious, bold, and motivated by meaningful work. Here, you'll have the opportunity to make an impact, explore new possibilities, and grow your career in ways that align with your interests and goals. When you're ready to take on something new, you'll find leaders who support your development and help you turn your ambition into action.

What you'll do

We are seeking an Information Security Analyst to help maintain a continuous state of compliance for the ISO 27001:2022 framework . You will work within our greater security organization working with the business to implement, assess, and audit security practices and technical configurations to ensure compliance goals across the company. Your responsibilities i nclude e nsuring we are complyi ng with applicable program regulations and standards and ensurin g proper securit y contro ls are op erating effectively. You will also help develop performance metrics to measur e our suc cess. And as technology changes, you will be contin uously tuning the progr am for optimal effectiveness.

You are a self-starter, that can work independently, prioritize work based on the impact to the business, and manage multiple efforts simultaneously.  You will poss ess a b road knowledge of modern technology and security best practices, superior analytical skills, attention to detail, and discipline to ensure consistency and accuracy.   Excellent verbal and written communication skills are critical to buil d and main tain rel ationships with stakeholders.

The day-to-day

Communicating with interested parties across several product lines and technologies on compliance activities

Support engineering and IT requests related to security and compliance impacting changes within the target environments.

Own the resolution of identified information security and data issues.

Facilitating the ISO27001 ISMS or similar activities as the second line of defense, providing advisory activities for Company systems

Assist in the development, maintenance and automation of security, risk, and compliance artifacts and documentation, including all exceptions and alternative controls implemented to address non-standard use cases.

Develop and implement comprehensive control effectiveness testing programs to validate ISO27001 compliance

Identify and lead security control ownership across all ISO27001 Annex A requirements

Lead internal audits and coordinate external certification reviews including audit scheduling, execution, and follow-up

Interacting with auditors to determine context of the risk associated with findings

Stay informed of industry changes, trends, and guidelines related to information security

Performing formal and informal risk assessments

What you'll need

8+ years experience in the risk and compliance field focusing on ensuring that the company adheres to federal, state and industry laws and benchmarks

8 + years experience working with ISO27001:2022 including auditing and/or implementation of controls

ISMS Lead Auditor or Lead Implementor certified or capable of acquiring certification upon hire

Ability to prepare disparate development teams for the rigors of IT framework controls

Deep understanding of laws and regulations related to enterprise security and risk

Broad knowledge of infrastructure, networking, security, and endpoint technologies.

Excellent administrative and interpersonal skills with attention to detail and a high degree of accuracy, together with the ability to lead several simultaneous projects

Exceptional interpersonal and communication skills, both oral and written; with an ability to ask clear, concise questions involving sophisticated technology to get requisite answers from business partners and colleagues.

Experience with a GRC tool to optimize risk, compliance, and audit functions.

Knowledge of risk management and governance control implementation in both cloud and on-premise based technologies

Ability to travel up to 4 0 %

What will help you on the job

BA or BS or equivalent experience in a related field preferred

Security and audit industry certifications, including CISA, CIA, CISM, CISSP, SANS, CPA, etc.

Previous experience as, or interacting with, a third-party audit team auditing PCI DSS, NIST SP 800-171 / CMMC , and/or IT SOX

Project Management experience

Experience with teamwork and problem-solving

Mature knowledge of information technology: applications, back-office integrations, operations, and key business processes is required

Salary range

$147,000.00 - $232,000.00 / annually. For specific work locations within San Jose, the San Francisco Bay area and New York City metropolitan area, the base pay range for this role is $183,000.00- $274,000.00/ annually

At Viasat, we consider many factors when it comes to compensation, including the scope of the position as well as your background and experience. Base pay may vary depending on job-related knowledge, skills, and experience. Additional cash or stock incentives may be provided as part of the compensation package, in addition to a range of medical, financial, and/or other benefits, dependent on the position offered. Learn more about Viasat’s comprehensive benefit offerings that are focused on your holistic health and wellness at https://careers.viasat.com/benefits. EEO Statement

Viasat is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, ancestry, physical or mental disability, medical condition, marital status, genetics, age, or veteran status or any other applicable legally protected status or characteristic. If you would like to request an accommodation on the basis of disability for completing this on-line application, please click here .

Communicating with interested parties across several product lines and technologies on compliance activities

Support engineering and IT requests related to security and compliance impacting changes within the target environments.

Own the resolution of identified information security and data issues.

Facilitating the ISO27001 ISMS or similar activities as the second line of defense, providing advisory activities for Company systems

Assist in the development, maintenance and automation of security, risk, and compliance artifacts and documentation, including all exceptions and alternative controls implemented to address non-standard use cases.

Develop and implement comprehensive control effectiveness testing programs to validate ISO27001 compliance

Identify and lead security control ownership across all ISO27001 Annex A requirements

Lead internal audits and coordinate external certification reviews including audit scheduling, execution, and follow-up

Interacting with auditors to determine context of the risk associated with findings

Stay informed of industry changes, trends, and guidelines related to information security

Performing formal and informal risk assessments

8+ years experience in the risk and compliance field focusing on ensuring that the company adheres to federal, state and industry laws and benchmarks

8 + years experience working with ISO27001:2022 including auditing and/or implementation of controls

ISMS Lead Auditor or Lead Implementor certified or capable of acquiring certification upon hire

Ability to prepare disparate development teams for the rigors of IT framework controls

Deep understanding of laws and regulations related to enterprise security and risk

Broad knowledge of infrastructure, networking, security, and endpoint technologies.

Excellent administrative and interpersonal skills with attention to detail and a high degree of accuracy, together with the ability to lead several simultaneous projects

Exceptional interpersonal and communication skills, both oral and written; with an ability to ask clear, concise questions involving sophisticated technology to get requisite answers from business partners and colleagues.

Experience with a GRC tool to optimize risk, compliance, and audit functions.

Knowledge of risk management and governance control implementation in both cloud and on-premise based technologies

Ability to travel up to 4 0 %