Technology, Information and Internet

Semrush

1001-5000

Serbia

## Job Description

Hi there!  
We are Semrush, a global IT company developing our own product—a platform for digital marketers. New stars are born here, so don’t miss your chance.  
This is our 

## Security Compliance Specialist role for those who strive to implement functional processes and drive them to full completion. 

  
## Tasks in the role

* Ensure that Semrush complies with security standards such as PCI DSS and SOC 2 with main focus on SOC 2 attestation
* Develop, review, and update security policies, procedures, and guidelines to maintain compliance with regulatory and industry standards
* Incident Response: Assist in the development and execution of the incident response process, ensuring timely and effective handling of security incidents
* Training and Awareness: Conduct security training programs for employees to ensure that everyone is aware of the organization's security policies and practices
* Ensure that third-party vendors meet the organization's security standards and compliance requirements
* Assist in responding to customer inquiries regarding security compliance and provide clear, accurate information about our security practices and standards
* Work closely with security, legal, and business units to identify security risks and implement appropriate controls

## Requirements

## Who we are looking for  

* Experience: 3+ years of experience in security compliance, information security, or a related field
* Certifications: Certifications such as CISSP, CISM, CISA, or similar are highly desirable
* Strong knowledge of security frameworks (e.g., SOC 2, PCI DSS 4\. 0, ISO 27001, NIST CSF) and industry best practices
* Experience in conducting SOC 2 audits or participation in similar audits
* Experience in managing compliance for cloud environments (e.g., AWS, Azure, Google Cloud)
* Excellent understanding of the risk-based approach, as well as understanding of the basic principles of risk identification and assessment
* Familiarity with GDPR, CCPA, and other data privacy regulations
* Excellent communication skills with the ability to translate technical requirements to non-technical stakeholders
* Fluent in written and spoken English, with excellent communication skills in a professional context

## Not required, but a plus

* Strong analytical and problem-solving skills
* Detail-oriented with h2 organizational skills
* You share our common values: Trust, as we prefer to speak up and be our true selves; Sense of Ownership, as it’s not worth wasting time on something you don’t believe in; and enthusiasm for Constant Change, as we are always looking to make things better.

## A bit about the team

You can get to know the team better at one of the interviews, but some brief information about future colleagues will be useful now.  
Security Compliance & Common Flow team will focus on security compliance questions (PCI DSS, Security audits) and general security issues.

## We will try to create all the right conditions for you to work and rest comfortably

* This offer stands for the “hybrid” work format: some days, you work from the office, and some #wfh.
* Flexible working day start
* Unlimited PTO
* Hobby benefit
* Breakfast, snacks, and coffee at the office
* Corporate events
* Training, courses, conferences
* Gifts for employees

## Finally, a little more about our company

Semrush is a leading online visibility management SaaS platform that enables businesses globally to run search engine optimization, pay-per-click, content, social media and competitive research campaigns and get measurable results from online marketing.  
We’ve been developing our product for 16 years and have been awarded G2s Top 100 Software Products, Global and US Search Awards 2021, Great Place to Work Certification, Deloitte Technology Fast 500 and many more. In March 2021 Semrush went public and started trading on the NYSE with the SEMR ticker.  
10,000,000+ users in America, Europe, Asia, and Australia have already tried Semrush, and over 1,000 people around the world are working on its development. The Semrush team is constantly growing.  
  
Our new colleague, we are waiting for you!  
_Semrush is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based upon race, religion, creed, color, national origin, sex, pregnancy, sexual orientation, gender identity, gender expression, age, ancestry, physical or mental disability, or medical condition including medical characteristics, genetic identity, marital status, military service, or any other classification protected by applicable local, state or federal laws. All employment decisions are based on business needs, job requirements, merit, and individual qualifications._

Employee

Professional / Experienced

<h2 id="job-description">Job Description</h2>
<p>Hi there!<br>We are Semrush, a global IT company developing our own product—a platform for digital marketers. New stars are born here, so don’t miss your chance.<br>This is our </p>
<h2 id="security-compliance-specialist-role-for-those-who-strive-to-implement-functional-processes-and-drive-them-to-full-completion">Security Compliance Specialist role for those who strive to implement functional processes and drive them to full completion.</h2>
<h2 id="tasks-in-the-role">Tasks in the role</h2>
<ul>
<li>Ensure that Semrush complies with security standards such as PCI DSS and SOC 2 with main focus on SOC 2 attestation</li>
<li>Develop, review, and update security policies, procedures, and guidelines to maintain compliance with regulatory and industry standards</li>
<li>Incident Response: Assist in the development and execution of the incident response process, ensuring timely and effective handling of security incidents</li>
<li>Training and Awareness: Conduct security training programs for employees to ensure that everyone is aware of the organization&#39;s security policies and practices</li>
<li>Ensure that third-party vendors meet the organization&#39;s security standards and compliance requirements</li>
<li>Assist in responding to customer inquiries regarding security compliance and provide clear, accurate information about our security practices and standards</li>
<li>Work closely with security, legal, and business units to identify security risks and implement appropriate controls</li>
</ul>
<h2 id="requirements">Requirements</h2>
<h2 id="who-we-are-looking-for">Who we are looking for</h2>
<ul>
<li>Experience: 3+ years of experience in security compliance, information security, or a related field</li>
<li>Certifications: Certifications such as CISSP, CISM, CISA, or similar are highly desirable</li>
<li>Strong knowledge of security frameworks (e.g., SOC 2, PCI DSS 4. 0, ISO 27001, NIST CSF) and industry best practices</li>
<li>Experience in conducting SOC 2 audits or participation in similar audits</li>
<li>Experience in managing compliance for cloud environments (e.g., AWS, Azure, Google Cloud)</li>
<li>Excellent understanding of the risk-based approach, as well as understanding of the basic principles of risk identification and assessment</li>
<li>Familiarity with GDPR, CCPA, and other data privacy regulations</li>
<li>Excellent communication skills with the ability to translate technical requirements to non-technical stakeholders</li>
<li>Fluent in written and spoken English, with excellent communication skills in a professional context</li>
</ul>
<h2 id="not-required-but-a-plus">Not required, but a plus</h2>
<ul>
<li>Strong analytical and problem-solving skills</li>
<li>Detail-oriented with h2 organizational skills</li>
<li>You share our common values: Trust, as we prefer to speak up and be our true selves; Sense of Ownership, as it’s not worth wasting time on something you don’t believe in; and enthusiasm for Constant Change, as we are always looking to make things better.</li>
</ul>
<h2 id="a-bit-about-the-team">A bit about the team</h2>
<p>You can get to know the team better at one of the interviews, but some brief information about future colleagues will be useful now.<br>Security Compliance &amp; Common Flow team will focus on security compliance questions (PCI DSS, Security audits) and general security issues.</p>
<h2 id="we-will-try-to-create-all-the-right-conditions-for-you-to-work-and-rest-comfortably">We will try to create all the right conditions for you to work and rest comfortably</h2>
<ul>
<li>This offer stands for the “hybrid” work format: some days, you work from the office, and some #wfh.</li>
<li>Flexible working day start</li>
<li>Unlimited PTO</li>
<li>Hobby benefit</li>
<li>Breakfast, snacks, and coffee at the office</li>
<li>Corporate events</li>
<li>Training, courses, conferences</li>
<li>Gifts for employees</li>
</ul>
<h2 id="finally-a-little-more-about-our-company">Finally, a little more about our company</h2>
<p>Semrush is a leading online visibility management SaaS platform that enables businesses globally to run search engine optimization, pay-per-click, content, social media and competitive research campaigns and get measurable results from online marketing.<br>We’ve been developing our product for 16 years and have been awarded G2s Top 100 Software Products, Global and US Search Awards 2021, Great Place to Work Certification, Deloitte Technology Fast 500 and many more. In March 2021 Semrush went public and started trading on the NYSE with the SEMR ticker.<br>10,000,000+ users in America, Europe, Asia, and Australia have already tried Semrush, and over 1,000 people around the world are working on its development. The Semrush team is constantly growing.  </p>
<p>Our new colleague, we are waiting for you!<br><em>Semrush is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based upon race, religion, creed, color, national origin, sex, pregnancy, sexual orientation, gender identity, gender expression, age, ancestry, physical or mental disability, or medical condition including medical characteristics, genetic identity, marital status, military service, or any other classification protected by applicable local, state or federal laws. All employment decisions are based on business needs, job requirements, merit, and individual qualifications.</em></p>


Security Compliance Specialist (Security Compliance & Common Flow Team)

Semrush logo

Google {privacyLink} and {termsLink} apply.

Benefits

Media

We don't have any open positions at the moment

No available jobs

Offices

Open positions

Values

Videos

Do you have a question?

Spontaneous Application

We’ll send a link to this job to your email.

No time? Just apply later

We are reviewing your account. Once our managers approve it, candidates will be able to apply for this job.

Changes are not visible until you publish your job.

This is a preview of your job ad.

Interested?

The job {jobTitle} was archived or the deadline has passed.

This job is no longer available

Recruiting Team

Our other open positions

We no longer accept spontaneous applications

Are you a talented professional seeking your next career adventure? At {companyName}, we appreciate proactive individuals who can bring a fresh perspective to our team.

While we may not have an immediate job opening that precisely matches your needs, your distinctive experiences and talents might be an excellent fit for us in the future.

To submit your spontaneous application, please use the application form on the right to upload your CV and cover letter. Ensure that you mention your desired position in the cover letter.

Rest assured, our dedicated recruiting team will reach out to you once they identify a role that aligns perfectly with your skills and aspirations.

How to apply

Looking for a job at {companyName}? JOIN works directly with {companyName} to bring you all their open positions. Apply now with JOIN.com.

Jobs at {companyName}. Browse all open positions and become part of our team! Open positions: {jobsCount}

Jobs at {companyName}. Browse our open jobs and join us! We currently have {jobsCount} available jobs. Step up your career and apply today!

Jobs at {companyName}. Browse all our open positions and become part of our team! We have currently {jobsCount} jobs available. Apply today to join us!

Jobs at {companyName}. Browse all open positions and become part of our team! We are currently looking for {jobsCount} additions to our company. Apply today!

Jobs at {companyName}. Browse all open positions and become part of our growing team! We are currently looking for {jobsCount} additions to our company. Apply today!

Jobs at {companyName}. Browse all our open positions and become part of our growing team! We are currently looking for {jobsCount} additions to our company. Apply today!

Browse all our open positions and become part of our team! We are looking for {jobsCount} additions to our company. Take the next step in your career and apply today!

No suitable positions available at {companyName}? Don't wait! Submit a spontaneous job application today and unlock your career possibilities tomorrow.