• Job Description

  Req#: CYBER012269

  About the role

  Uber Freight is looking for a Cyber Security Program Manager to join our Security team to help us deliver on several key initiatives for the company in the area of IT compliance. Through your work, you will dramatically improve our SOC1/SOC2/SOX compliance and Third-Party Risk program.

  What You Will Do

  • Design, build and deploy a sustainable security compliance framework
  • Provide and coordinate audit evidence collection for SOC1, SOC2, SOX and internal audit
  • Compliance monitoring and remediation of audit findings
  • Managing and executing the user awareness training program
  • Authoring Information Security Policies and quarterly employee security updates
  • Completing and responding to customer security related questionnaires and inquiries
  • Perform quarterly user access reviews across multiple applications
  • Evaluating new business solutions to identify security gaps
  • Executing the Third-Party Security Risk Evaluation & Monitoring program
  • Monitor adherence to standards and recommend improvements as needed

  Basic Qualifications

  • Bachelor’s degree OR approximately 5-7 years of related work experience
  • The successful candidate must hold one or more Information security, Audit or Compliance professional certifications such as CISSP, CISM, or CISA

  Preferred Qualifications

  • Ability to manage multiple tasks in parallel
  • Experience with basic concepts of cloud security controls
  • Excellent, detailed writing skills
  • Process-oriented individual with strong attention to detail, and strong organizational skills
  • Knowledge of at least 2 security concepts and methods such as data classification, security policy creation, enterprise security strategies, vulnerability assessments, architectures, and governance
  • Ability to build relationships with and influence other functional areas
  • Good understanding of ITGC, NIST and Cobit Framework
  • Experience working with external auditors on SOC1/SOC2/SOX Audits
  • Experience working with internal auditors around IT Controls
  • Experience conducting Third-Party risk assessments and providing guidance on recommended controls to reduce any risks to Uber Freight
  • Experience running User Awareness Programs
  • Experience with IT Risk Management Process
  • Experience performing user access reviews

  About Uber Freight

  Uber Freight is a market-leading enterprise technology company powering intelligent logistics. With a suite of end-to-end logistics applications, managed services and an expansive carrier network, Uber Freight advances supply chains and moves the world’s goods. Today, the company manages over $18 billion of freight and one of the largest networks of carriers. It is backed by best-in-class investors and provides services for 1 in 3 Fortune 500 companies, including Del Monte Foods, Nestle, Anheuser-Busch InBev, and more. For more, visit www.uberfreight.com .

  EEOC

  Uber Freight is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regards to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.

  Qualifications

  Licenses & Certifications

  Preferred

  CISSP

  Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

  The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)

• About the company

Notice