You: You are a Senior Information Security Analyst who is looking for the opportunity to leverage your technical and business skills to have a global impact in the dynamic Technology Business Management market. This position will report to the Director of Information Security. You will work closely with IT teams, data center operations personnel, external business partners and most importantly prospective and existing customers in defining the appropriate policies, architectures, technologies and practices to provide protection for our clients’ information assets. This role provides a unique opportunity to interact directly with customers to support business-critical sales initiatives and to ensure ongoing customer satisfaction.

Us: Our team has broad responsibility for security and compliance across Apptio services and business units worldwide. We are highly motivated and dynamic individuals woven into a collaborative team where teamwork and flexibility are critical to our success.

What we want you to do:

• Be the “face” of Apptio as we engage with prospective and existing customers to understand their security expectations, communicate written and verbal technical, policy, and procedural security information to them, and participate in customer calls in support of sales initiatives
• Contribute to the design, implementation, and operations of procedural and technical security controls
• Perform technical audits of IT General Controls, Information Security, SDLC, Application Security, and Operations.
• Determine audit scope, design testing strategies, test, evaluate, and document controls, identify control gaps and report audit issues based on significance, risk, and impact.
• Collect, review, analyze and verify the performance of internal controls, adherence to internal policy & procedures and client security expectations.
• Conduct staff interviews and walkthroughs; perform analysis to identify key business risks and controls.
• Manage follow-up on open audit issues and facilitate agreements with business process owners to ensure timely closure of action plans.
• Research, standardize, compose, edit, and approve documented policies and procedures/process for compliance and in accordance with accepted industry standards.
• Keep abreast of current and emerging technologies and recommend changes to audit programs as necessary.

Basic Qualifications:

• Minimum 5+ years’ experience with technical security auditing and sales support.
• CISA/CISM/CISSP (or equivalent) certification required.
• Experience with one or more of the following Information Security frameworks and standards: ISO/IEC 27000-series, SSAE16, SOC1/2, Cloud Security Alliance Cloud Controls Matrix (CCM), and rules/regulations related to privacy and data confidentiality (e.g. Privacy Shield, GDPR).

Preferred Qualifications:

• Excellent interpersonal skills for building and establishing strong relationships with customers and key stakeholders, including senior staff, the security team, and the wider organization.
• The ability to audit, assess and identify compliance gaps in information security controls.
• Collaborative work style; effective communication; cross-functional teamwork.
• Ability to independently plan, organize and prioritize tasks.
• Strong general business skills and an aptitude for critical thinking and intellectual curiosity.
• Great attitude, independent, and takes ownership of all tasks from start to end.
• Highly organized and comfortable working in a rapidly changing and ambitious environment.
• Strong knowledge of desktop, server, application, and network security principles for conducting comprehensive business impact analysis and risk identification.
• Experience and/or knowledge of cloud computing and SaaS application delivery models.
• Experience and/or knowledge of information security tools/systems: SIEM, DLP, IDS/IPS, etc.
• Experience and/or knowledge of FedRAMP, IRAP, DoD IL4/IL5

Apptio benefits include Company-Paid employee health, dental, vision, life, and disability insurance, Apptio stock and generous contributions to a health savings account. We also offer participation in a flexible spending account, 401k, employee stock purchase plan and other voluntary programs.

The Company:

Apptio (NASDAQ: APTI) is the business management system of record for hybrid IT. We transform the way IT runs its business and makes decisions. With our cloud-based applications, IT leaders manage, plan and optimize their technology investments across on-premises and cloud. With Apptio, IT leaders become strategic partners to the business by demonstrating value of IT investments, accelerate innovation and shift their technology investments from running the business to digital innovation. Hundreds of customers choose Apptio as their business system of record for hybrid IT. For more information, please visit www.Apptio.com.

Apptio Inc. is not open to 3rd party solicitation or resumes for our posted FTE positions. Resumes received from 3rd party agencies that are unsolicited will be considered complimentary.

Apptio, Inc. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. Apptio, Inc. complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.