Governance, Risk, and Compliance Specialist - Customer Assurance (Remote) at Crowdstrike

Washington, United States

Apply Now

Not SpecifiedCompensation

Junior (1 to 2 years)Experience Level

Full TimeJob Type

UnknownVisa

Cybersecurity, SoftwareIndustries

Requirements

Practical experience with policy and regulatory mandates such as SOC 1/SOC 2, CSA-CCM, ISO27001/27002/22301/27017/42001, GDPR, CCPA, PCI-DSS, the NIST Risk Management Framework, and associated standards such as NIST SP(s) 800-34/800-53 Revision 5/800-171, FedRAMP, CMMC 2.0
Understanding of Third Party Risk Management concepts such as organizational risk impact, determining data classification, evaluating control implementations, and assessing adequacy of compensating controls
Experience in typical office applications including Microsoft Word, Excel, and the Google Workspace Suite
Fundamental technical understanding of key technologies such as Windows, Linux, and Apple operating systems, networks, application development, databases, virtualization, and cloud infrastructures
3-5 years relevant experience, or a BA or BS / MA or MS degree in a related field (e.g. Computer Science, Data Analytics, Cybersecurity)

Responsibilities

Responding to CrowdStrike and customer questions regarding GRC, information security, privacy, and related topics
Assisting with internal and external audits and assessments including control assessment, monitoring, and reporting including collection and organization of evidence
Working with various internal teams and external parties to define and prioritize remediation efforts, tracking remediation activities, and inspecting/validating solutions that have been implemented
Conducting third party controls evaluation to determine risk
Performing other duties within the scope of governance, risk, and compliance as needed

Skills

Key technologies and capabilities for this role

Risk AssessmentComplianceSecurityAuditCustomer AssuranceTrust PortalProcess Automation

Questions & Answers

Common questions about this position

Is this position remote?

Yes, this is a remote position as indicated by the job title.

What salary or compensation does this role offer?

This information is not specified in the job description.

What experience or knowledge is required for this role?

Practical experience with policy and regulatory mandates such as SOC 1/SOC 2, CSA-CCM, ISO27001/27002/22301/27017/42001, GDPR, CCPA, PCI-DSS, NIST Risk Management Framework, and associated standards including NIST SP 800-34/800-53 Revision 5/800-171, FedRAMP, and CMMC 2.0 is required, along with understanding of Third Party Risk Management concepts like organizational risk impact, data classification, and control evaluation.

What is the company culture like at CrowdStrike?

CrowdStrike cultivates a culture that gives every CrowdStriker flexibility and autonomy to own their careers, with a focus on limitless passion, relentless innovation, and fanatical commitment to customers, community, and each other.

What makes a strong candidate for this GRC Specialist role?

A strong candidate will have practical experience with key regulatory frameworks like SOC, ISO, GDPR, NIST, and FedRAMP, plus understanding of third-party risk management, and the ability to innovate and automate processes in a fast-paced security environment.

Crowdstrike

Cloud-native endpoint security solutions provider

About Crowdstrike

CrowdStrike specializes in cybersecurity, focusing on protecting businesses from cyber threats through cloud-native endpoint security solutions. Their main product, the Falcon platform, includes services like Falcon Pro, which replaces traditional antivirus with next-generation antivirus that integrates threat intelligence, Falcon Insight for endpoint detection and response, and Falcon Device Control to manage connected devices. Unlike many competitors, CrowdStrike's services are subscription-based, allowing clients to choose different levels of protection based on their needs. The company serves a diverse clientele, including many Fortune 100 companies, and is recognized as a leader in the cybersecurity field, known for its effectiveness in threat detection and response.

Austin, TexasHeadquarters

2011Year Founded

$468MTotal Funding

IPOCompany Stage

Enterprise Software, CybersecurityIndustries

5,001-10,000Employees

Benefits

Competitive Employee Stock Purchase Plan

Remote-friendly culture

Market leader in compensation and equity awards

Competitive vacation and flexible working arrangements

Comprehensive health benefits + 401k plan

Paid Parental Leave, including adoption

Wellness programs

Professional development and mentorship opportunities

Open offices have stocked kitchens, coffee, soda and treats

Risks

Increased competition from companies like Lumos could challenge CrowdStrike's market share.

Recovery from last year's outage may still affect customer trust and future sales.

Pressure to demonstrate ROI by 2025 could challenge CrowdStrike's financial transparency.

Differentiation

CrowdStrike's Falcon platform offers cloud-native endpoint security solutions, a key differentiator.

The company serves 44 of the Fortune 100, showcasing its strong market presence.

CrowdStrike's proactive threat hunting sets it apart in cybersecurity threat detection.

Upsides

Partnership with SonicWall opens new SMB market segment for CrowdStrike.

Recognition as a leader in ransomware prevention boosts CrowdStrike's market credibility.

Gamified learning initiatives help address cybersecurity skills gap, benefiting future talent pipeline.

Land your dream remote job 3x faster with AI

Try Jobo Free