Trust and Governance Analyst II

We're looking for an Engineer to join our Security team with experience building governance, compliance, and privacy programs.

Through collaboration with legal, internal audit, and technical teams, you'll help guide DigitalOcean on how best to engage on security and privacy issues with our customers.

You'll report to the Manager of Trust & Governance, but you will need to act independently and consult with teams across the organization. As an Engineer you'll be responsible for working with multiple stakeholders to identify, prioritize and implement technical changes to help improve our privacy and security programs. You'll have direct interaction in refining security policies, managing vendor risk, enhancing our customer trust, and implementing privacy program requirements on one of the largest global public cloud environments.

• Build and implement DigitalOcean's security trust, governance, privacy, and compliance workflows and processes.
• Formalize DigitalOcean's stance on privacy and compliance topics as it relates to our customer-base, the kinds of information we collect, and where that information may potentially be shared through the course of business.
• Manage communications and awareness campaigns for security and privacy topics to keep DigitalOcean employees and customers up to date with the latest developments.
• Responsible for defining the Third Party Risk Management framework to ensure sound risk assessment and oversight of the outsourcing and vendor service providers.
• Driving and implement the Regulatory requirements e.g GDPR, CCPA etc.
• Support annual compliance recertifications (CSA, SOC II Report) and implement additional compliance offerings to provide further value to DigitalOcean customers.
• Engage prospective customers on their security-related questions and queries. Work with our customer account managers to highlight our security and controls measures as a differentiator.
• Document DigitalOcean security policies, controls, and security risk management.
• Gather and report on metrics within the security compliance, governance, privacy and trust programs.

• Comfort with a wide range of compliance and privacy regimes, and how they affect technology, hosting, and cloud companies.
• Demonstrated project management experience, for achieving cross-functional outcomes.
• Knowledge of technical architectures, virtualized environments, continuous integration & delivery environments, and software engineering practices.
• Demonstrable experience collaborating and coordinating with legal, internal audit, engineering, and infrastructure teams.
• A habit of approaching new problems with creativity and being comfortable working with ambiguity.

• We innovate with purpose. You'll be a part of a cutting-edge technology company with an upward trajectory, who are proud to simplify cloud and AI so builders can spend more time creating software that changes the world. As a member of the team, you will be a Shark who thinks big, bold, and scrappy, like an owner with a bias for action and a powerful sense of responsibility for customers, products, employees, and decisions.
• We prioritize career development. At DO, you'll do the best work of your career. You will work with some of the smartest and most interesting people in the industry. We are a high-performance organization that will always challenge you to think big. Our organizational development team will provide you with resources to ensure you keep growing. We provide employees with reimbursement for relevant conferences, training, and education. All employees have access to LinkedIn Learning's 10,000+ courses to support their continued growth and development.
• We care about your well-being. Regardless of your location, we will provide you with a competitive array of benefits to support you from our Employee Assistance Program to Local Employee Meetups to flexible time off policy, to name a few. While the philosophy around our benefits is the same worldwide, specific benefits may vary based on local regulations and preferences.
• We reward our employees. The salary range for this position is based on market data, relevant years of experience, and skills. You may qualify for a bonus in addition to base salary; bonus amounts are determined based on company and individual performance. We also provide equity compensation to eligible employees, including equity grants upon hire and the option to participate in our Employee Stock Purchase Program.
• We value diversity and inclusion. We are an equal-opportunity employer, and recognize that diversity of thought and background builds stronger teams and products to serve our customers. We approach diversity and inclusion seriously and thoughtfully. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service.

*This is a hybrid role

#LI-Hybrid