Conga is seeking a Senior Information Security Analyst to shape and maintain our robust information security program. In this role, you'll work closely with stakeholders to identify and remediate security issues, promote awareness, and ensure compliance, directly supporting secure innovation and customer trust.
What You'll Do
- Work with stakeholders across the company to identify and remediate security issues.
- Promote security awareness and ensure compliance with legal, regulatory, and customer requirements.
- Manage security alerts, vulnerabilities, incident response, and risk assessments.
- Conduct hands-on security operations and continuous improvement of security practices.
- Monitor evolving threat landscapes and proactively recommend mitigation strategies.
- Build strong relationships across Cloud Ops, Engineering, and IT teams.
- Communicate priorities, trade-offs, and goals clearly to technical and non-technical stakeholders.
- Ensure accuracy in security assessments, documentation, and incident response processes.
- Prioritize tasks and manage multiple security initiatives simultaneously.
- Drive cross-functional collaboration to meet project deadlines.
What We're Looking For
- 4–6 years of experience in information security, ideally with a focus on IT and product security.
- Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent experience.
- Strong knowledge of cloud security (AWS, Azure, GCP), DevSecOps, and secure SDLC.
- Experience with application security and vulnerability management.
- Knowledge of security/compliance frameworks (ISO 27001/27701, SOC, PCI, HIPAA).
- Understanding of privacy regulations (GDPR, CCPA, CPRA).
- Strong communication and interpersonal skills, comfortable initiating collaborative discussions.
- Ability to build strong relationships across Cloud Ops, Engineering, and IT teams.
- Detail-oriented with accuracy in security assessments and documentation.
- Strong project management skills, able to prioritize tasks and manage multiple initiatives.
Nice to Have
- SaaS industry experience.
- CISSP or other relevant certifications.
Technical Stack
- AWS, Azure, GCP
Team & Environment
You will be part of the Security & Compliance Team, reporting to the Director, Compliance and Information Security. Conga fosters a community where colleagues can thrive, offering opportunities to innovate and support growth in an environment where every voice is heard, grounded in the Conga Way framework.
Work Mode
This role operates in a local-country work mode and is based in Canada.
Conga is proud to be an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants regardless of race, color, religion, gender, gender identity, age, national origin, disability, parental or pregnancy status, marriage and civil partnership, sexual orientation, veteran status, or any other characteristic protected by law.
