We are looking to hire an Information Security Compliance Specialist to help build out our Security Control Program. The role will report to the Security Product Team in San Francisco. This person will be responsible for implementing and maintaining Security controls while supporting Unity's growing compliance needs.

Unity understands the significance of a solid Security Program and is looking for the right candidates to help implement and mature a program in an environment characterized by dynamic growth and new product and feature launches. The Security Program is key to maintaining customer confidence in our products and is the pathway to a well-tuned, functional Information Security Management System and program. This will be a chance to work on real security problems in a fast-paced high growth business.

Responsibilities

• Act as the liaison between the Information Security Team and Unity’s business units
• Collaborate with business unit management and leaders to establish and implement security controls and processes and track progress
• Assist with several of Unity's cross-company Security programs from top to bottom within Engineering / Product Development
• Collaborate with senior security team members to determine the applicable security processes and controls for each business unit
• Collaborate with other cross-functional groups such as legal, product, marketing, customer success, and engineering to enhance processes.
• Work to constantly improve our security position and status within Unity
• Help drive security awareness and compliance across the business
• Produce high-quality, detailed documentation to internal and external parties while managing sensitive or confidential information
• Conducting risk assessment on third-party vendors and technology
• Effectively recognize threats by performing relevant research and data analysis

Requirements

• B.S. in Information Security, Computer Science, Business Administration or equivalent experiences
• Experience with working on compliance programs in a company
• Familiarity with the following Frameworks; SSAE16, SOC 2, PCI DSS, ISO 27001, SOX ITGC, GDPR
• Technical background, especially Information Security experience
• Familiar with Security and Risk Management processes
• Understanding of broad range of security technical concepts
• Past experience IT or Information Security

Bonus points

• Professional certifications in security, privacy risk management and audit areas are a plus, such as CISA, CISM, CISSP, or CIPT
• Must have excellent project management and organizational skills
• Must be able to communicate clearly and concisely with internal and external parties
• Ability to work cross-functionally with internal stakeholders
• Ability to work efficiently and independently in a fast-paced, high-volume environment

Who we are

Unity is the creator of the world’s most widely-used real-time 3D (RT3D) development platform, providing content creators around the world with the tools they need to build rich, interactive 2D, 3D, VR and AR experiences. In fact, apps made with Unity reach 2.7 billion devices worldwide, and were installed more than 24 billion times in the last 12 months. 

The global engineering team keeps Unity at the forefront of technology and — working alongside partners like Magic Leap, Google, Facebook, Oculus and Microsoft — ensures optimized support for the latest technology and platforms. Unity is powering the real-time revolution, expanding beyond games and breaking into other industries including automotive, film, architecture, engineering, construction and more.

Unity is an equal opportunity employer committed to fostering an inclusive, innovative environment with the best employees. Therefore, we provide employment opportunities without regard to age, race, color, ancestry, national origin, religion, disability, sex, gender identity or expression, sexual orientation, or any other protected status in accordance with applicable law. If there are preparations we can make to help ensure you have a comfortable and positive interview experience, please let us know.

Headhunters and recruitment agencies may not submit resumes/CVs through this Web site or directly to managers. Unity does not accept unsolicited headhunter and agency resumes. Unity will not pay fees to any third-party agency or company that does not have a signed agreement with Unity.