We’re always on the search for amazing people. People who have a real passion for what they do and are masters at their craft. We are looking for a Senior Information Security Analyst with a legal background to join our team in Information Security (InfoSec). The InfoSec team leads the strategy, policy, and programs for information security company-wide. Our responsibilities include risk management, implementing a comprehensive security program, driving compliance initiatives, recommending and implementing security controls, preventing and detecting security threats, and handling incident response. We do all of this in a globally distributed company, thinking differently about how we best achieve critical information security objectives.

Do you combine an academic or professional background in contract law with a passion for Information Security?
Do you want to be in an InfoSec role that directly supports the overall success of a growing team and the company?

This could be your dream job, and we'd love to meet you!

What you will be doing:

Supporting and maturing Elastic’s governance and compliance program, specifically in the areas of Customer Trust and Third-Party Risk Management (TPRM)
Providing Information Security expertise and knowledge of the control environment to the Elastic legal team to support contract negotiations and due diligence processes.
Building and maturing a TPRM approach that is creative, relevant, and aligned with how Elastic operates.

What you bring along:

Legal expertise, with experience reviewing, analysing, and proposing contract terms; ideally in a software or technology services context.
A high degree of autonomy, combining the ability to prioritize and coordinate with a strong attention to detail.
Bonus points for experience operating and improving 3rd Party Risk Management processes, as a consumer or provider of cloud services.
Double Bonus points if you have the experience above in a growing SaaS company!