As part of Pega's Security and Compliance team, the Client Inquiry and Audit team facilitates pre-and post-sales activities with clients by completing mandatory security questionnaires and managing audits directly with clients to fulfill the requirements of a deal or comply with a client’s contractual rights to perform due diligence and risk assessment on Pega. What You'll Do at Pega: As a member of Pegasystems’ Client Inquiry and Audit team: Manage audit engagements directly with our clients Re... more details
Principal Client Inquiry and Audit Specialist
Job Category: Information Technology
Location: US - Massachusetts - Remote | US - Virginia - Dulles
Meet Our Team:
The mission of Pega's Security and Compliance team is to make information security and compliance programmatic and cultural within Pega to support the enterprise and our clients. The team is responsible for assuring confidentiality, integrity, and availability of enterprise data and systems, as well as for ensuring the organization's compliance with the latest cybersecurity regulations.
Picture Yourself at Pega:
As part of Pega's Security and Compliance team, the Client Inquiry and Audit team facilitates pre-and post-sales activities with clients by completing mandatory security questionnaires and managing audits directly with clients to fulfill the requirements of a deal or comply with a client’s contractual rights to perform due diligence and risk assessment on Pega.
What You'll Do at Pega:
As a member of Pegasystems’ Client Inquiry and Audit team:
Manage audit engagements directly with our clients
Respond to our clients’ and prospects' inquiries regarding security, software development, data privacy, and other topics
You will work with the Sales team to ensure that information requests from clients and prospects are fulfilled timely
You will communicate regularly with subject matter experts within IT and in other business units to maintain a Knowledge Base of frequently-asked-questions
Where appropriate, you’ll also work with the business to create documentation to support team efforts, including but not limited to overviews, policies, process diagrams
Manage engagement with third party assessors to meet Pega compliance needs
Assess and improve on quality of evidence to support certification and attestation audits such as ISO 27001, SOC2, PCI, etc.
Update standard audit procedures to improve effectiveness and efficiency
Serve as a trusted advisor in assisting control owners to adequately meet control objectives
Work with subject matter experts and stakeholders to develop a POA&M (plan of actions and milestones)
Escalate issues to management as required to drive remediation
Successfully complete relevant industry certifications - CISA, CRISC, CISSP, CCSK
Contribute to team body of knowledge and teach others what you have learned, being confident and comfortable presenting in front of groups of your peers
Who You Are:
You are confident and have a passion for the security and compliance industry. You are excited and committed to being an outstanding professional within the Cybersecurity and Compliance space
You are a strategic thinker with strong analytical assessment skills and ability to work collaboratively throughout the organization
You ensure project status transparency with meticulous reporting while leading and developing compliance initiatives
You are a self-starter who can work and produce with minimal supervision
Demonstrated experience working with technology, business, legal and sales teams
Outstanding written, verbal, presentation, and negotiation skills
What You've Accomplished:
7 years’ experience in a software products, technology or services organizations; including 3 years in compliance management, risk management, auditing, IT Security or similar regulatory programs
3+ years Cloud Knowledge, IT / Infrastructure principles and terminology
Bachelor’s or Master’s in Information Security or Computer Information Systems or relevant technical or business-related disciplines
Cloud or security-centric certifications
Experience with business continuity, data governance, cybersecurity, and testing standards
Knowledge of a broad range of security and compliance concepts, frameworks, and standards (such as ISO 27001/2, IT general controls testing and SOX, SOC 2, CSA, HIPAA, PCI and GXP standards and regulations, NIST 800-53, FedRAMP, FISMA, DFARS, cloud architecture and concepts, data privacy laws and regulations, etc.) with expertise and/or proficiency in 3 or more areas
Excellent organizational skills and written / oral communication skills
Excellent relationship management skills and customer service mindset
Skilled in Customers’ inquiries regarding security, software development, data privacy, and other topics
Highly Preferred
Project management experience; ability to prioritize, multi-task, and perform effectively under pressure
Operational experience working for a large cloud service provider
A demonstrated working knowledge of cloud architecture, infrastructure, applications, and resources
Pega Offers You:
Gartner Analyst acclaimed technology leadership across our categories of products
Continuous learning and development opportunities
An innovative, inclusive, agile, flexible, and fun work environment
Competitive global benefits program inclusive of pay + bonus incentive, employee equity in the company
#LI-DV1
Job ID: 20623
Apply Now
Already have an account?
First Name
Last Name
Phone
Email
City
Select country of residence (required)AfghanistanÅland IslandsAlbaniaAlgeriaAmerican SamoaAndorraAngolaAnguillaAntarcticaAnti gua and BarbudaArgentinaArmeniaArubaAustraliaAu striaAzerbaijanBahamasBahrainBangladeshB arbadosBelarusBelgiumBelizeBeninBermudaB hutanBolivia, Plurinational State ofBosnia and HerzegovinaBotswanaBouvet IslandBrazilBritish Indian Ocean TerritoryBrunei DarussalamBulgariaBurkina FasoBurundiCambodiaCameroonCanadaCape VerdeCayman IslandsCentral African RepublicChadChileChinaChristmas IslandCocos (Keeling) IslandsColombiaComorosCongoCongo, the Democratic Republic of theCook IslandsCosta RicaCôte d’IvoireCroatiaCubaCuracaoCyprusCzech RepublicDenmarkDjiboutiDominicaDominican RepublicEcuadorEgyptEl SalvadorEquatorial GuineaEritreaEstoniaEswatiniEthiopia Falkland Islands (Malvinas)Faroe IslandsFijiFinlandFranceFrench GuianaFrench PolynesiaFrench Southern TerritoriesGabonGambiaGeorgiaGerman yGhanaGibraltarGreeceGreenlandGrenadaGua deloupeGuamGuatemalaGuernseyGuineaGuinea -BissauGuyanaHaitiHeard Island and McDonald IslandsHoly See (Vatican City State)HondurasHong KongHungaryIcelandIndiaIndonesiaIran, Islamic Republic ofIraqIrelandIsle of ManIsraelItalyJamaicaJapanJersey JordanKazakhstanKenyaKiribatiKorea, Democratic People's Republic ofKorea, Republic ofKosovoKuwaitKyrgyzstanLao People's Democratic RepublicLatviaLebanonLesothoLib eriaLibyan Arab JamahiriyaLiechtensteinLithuan iaLuxembourgMacaoMacedonia, the former Yugoslav Republic ofMadagascarMalawiMalaysiaMal divesMaliMaltaMarshall IslandsMartiniqueMauritaniaM auritiusMayotteMexicoMicronesia, Federated States ofMoldova, Republic ofMonacoMongoliaMontenegroM ontserratMoroccoMozambiqueMyanmarNamibia NauruNepalNetherlandsNetherlands AntillesNew CaledoniaNew ZealandNicaraguaNigerNigeriaNiueNorfolk IslandNorthern Mariana IslandsNorwayOmanPakistanPalauPalestine, State ofPanamaPapua New GuineaParaguayPeruPhilipp inesPitcairnPolandPortugalPuerto RicoQatarRéunionRomaniaRussiaRwandaSaint BarthélemySaint Helena, Ascension and Tristan da CunhaSaint Kitts and NevisSaint LuciaSaint Martin (French part)Saint Pierre and MiquelonSaint Vincent and the GrenadinesSamoaSan MarinoSao Tome and PrincipeSaudi ArabiaSenegalSerbiaSeychellesSierra LeoneSingaporeSlovakiaSloveniaSolomon IslandsSomaliaSouth AfricaSouth Georgia and the South Sandwich IslandsSouth SudanSpainSri LankaSudanSurinameSvalbard and Jan MayenSwedenSwitzerlandSyrian Arab RepublicTaiwanTajikistanTanzania, United Republic ofThailandTimor-LesteTog oTokelauTongaTrinidad and TobagoTunisiaTurkeyTurkmenistanTurks and Caicos IslandsTuvaluUgandaUkraineUnited Arab EmiratesUnited KingdomUnited StatesUnited States Minor Outlying IslandsUruguayUzbekistanVanuatuVenezuela, Bolivarian Republic ofViet NamVirgin Islands, BritishVirgin Islands, U.S.Wallis and FutunaWestern SaharaYemenZambiaZimbabwe
Country of Residence
Postal code
How did you learn about Pega? (required)Career FairCollege FairEmployee ReferralGlassdoorInstahyreJob BoardsJobStreetJobsDBLinkedIn - Ad ResponseNaukri.comPega AlumniPega WebsiteStack Overflow - Ad Response
How did you learn about Pega?
Invitation to Self-Identify
Pegasystems Inc. is subject to certain nondiscrimination and affirmative action record keeping and reporting requirements which require Pegasystems Inc. to invite employees and applicants to voluntarily self-identify their gender identity, race/ethnicity, disability status, and veteran status. Submission of this information is voluntary and refusal to provide it will not subject you to any adverse treatment. The information obtained will be kept confidential and may only be used in accordance with the provisions of applicable federal laws, executive orders, and regulations, including those which require the information to be summarized and reported to the Federal Government of civil rights enforcement purposes.
Enter genderMaleFemaleNon-BinaryI prefer not to self-identify
Gender
Race and Ethnicity
Please select the ethnicity or race you most closely identify with:
Hispanic or Latino - A person of Cuban, Mexican, Puerto Rican, South or Central American, or other Spanish culture or origin regardless of race.
White (Not Hispanic or Latino) - A person having origins in any of the original peoples of Europe, the Middle East or North Africa.
Black or African American (Not Hispanic or Latino) - A person having origins in any of the black racial groups of Africa.
Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) - A person having origins in any of the peoples of Hawaii, Guam, Samoa or other Pacific Islands.
Asian (Not Hispanic or Latino) - A person having origins in any of the original peoples of the Far East, Southeast Asia or the Indian Subcontinent, including, for example, Cambodia, China, India, Japan, Korea, Malaysia, Pakistan, the Philippine Islands, Thailand and Vietnam.
American Indian or Alaska Native (Not Hispanic or Latino) - A person having origins in any of the original peoples of North and South America (including Central America) and who maintains tribal affiliation or community attachment.
Two or More Races (Not Hispanic or Latino) - All persons who identify with more than one of the above five races.
I do not wish to disclose - If you choose not to disclose your race/ethnicity, your employer is still required to include such information about you in the EEO-1 Report by using existing employment records or other permitted means to do so.
Enter ethnicityHispanic or LatinoWhite (Not Hispanic or Latino)Black or African American (Not Hispanic or Latino)Native Hawaiian or Other Pacific Island (Not Hispanic or Latino)Asian (Not Hispanic or Latino)American Indian or Alaska Native (Not Hispanic or Latino)Two or more Races (Not Hispanic or Latino)I do not wish to disclose
Ethnicity
Disability Status
Form CC-305, OMB Control Number 1250-0005, Expires 4/30/2026
Why are you being asked to complete this form?
We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years. Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at https://www.dol.gov/ofccp.
How do you know if you have a disability?
A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:
Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's
Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury
Enter disabilityYes, I have a disability, or have had one in the pastNo, I do not have a disability and have not had one in the pastI do not want to answer
Disability
PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.
Veteran Status
Why Are You Being Asked to Complete This Form?
This employer is a Government contractor subject to the Vietnam Era Veterans' Readjustment Assistance Act of 1974, as amended by the Jobs for Veterans Act of 2002, 38 U.S.C. 4212 (VEVRAA). VEVRAA requires Government contractors to take affirmative action to employ and advance in employment protected veterans. To help us measure the effectiveness of our outreach and recruitment efforts of veterans, we are asking you to tell us if you are a veteran covered by VEVRAA. Completing this form is completely voluntary, but we hope you fill it out. Any answer you give will be kept private and will not be used against you in any way.
For more information about this form or the equal employment obligations of Federal contractors, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at.
How Do You Know if You Are a Veteran Protected by VEVRAA?
Contrary to the name, VEVRAA does not just cover Vietnam Era veterans. It covers several categories of veterans from World War II, the Korean conflict, the Vietnam era, and the Persian Gulf War which is defined as occurring from August 2, 1990 to the present.If you believe you belong to any of the categories of protected veterans please indicate by checking the appropriate box below. The categories are defined on the next page and explained further in an “Am I a Protected Veteran?” infographic provided by OFCCP.
What Categories of Veterans Are “Protected” by VEVRAA?
“Protected” veterans include the following categories: (1) disabled veterans; (2) recently separated veterans; (3) active duty wartime or campaign badge veterans; and (4) Armed Forces service medal veterans. These categories are defined below.
A “disabled veteran” is one of the following:
a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
a person who was discharged or released from active duty because of a service-connected disability.
A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.
Enter veteran statusI Identify as one or more of the classifications of protected veteran listed aboveI identify as a veteran, just not a protected veteranI am not a protected veteranI do not wish to self identify
Veteran Status
Password
Password
By providing a password, you will become a Pega Digital Community Member and be able to track your application status
Upload your resume
