Senior Security Engineer Canada

At Coursera, we are committed to building a globally diverse team and are thrilled to extend employment opportunities to individuals in any country where we have a legal entity. We require candidates to possess eligible working rights and have a compatible timezone overlap with their team to facilitate seamless collaboration.

Coursera has a commitment to enabling flexibility and workspace choices for employees. Our interviews and onboarding are entirely virtual, providing a smooth and efficient experience for our candidates. As an employee, we enable you to select your main way of working, whether it's from home, one of our offices or hubs, or a co-working space near you.

Job Overview:

Coursera is an engineering-first company. Our teams are responsible for maintaining a scalable and reliable platform, in addition to building interactive products for the worldwide learner community. We are made up of teams ranging from Development Infrastructure, Growth, Learner/Consumer Experience, Content Platform, and SDET Engineering. Every day, Engineering teams collaborate with cross-functional partners, including other engineers, data scientists, and product managers.

Responsibilities:

Participate in implementing and managing the Information Security Program including security incident response, vulnerability management, data protection, and risk management
Undertake and lead regulatory readiness assessments and development of appropriate compliance strategies (SOX, SOC2, ISO27001, FERPA, PCI, NIST, etc.)
Documenting and maintaining security policies, standards, guidelines, processes and procedures, and other related documents, as requested, and representing the Security Team during internal and external audits
Review contracts with Enterprise Customers and Partners to assure compliance with Information Security security and privacy requirements and provide input to Legal Team
Working with Sales, lead the response to customer questionnaires dealing with our security and data protection policies. Plan and execute risk assessments of our products and services associated with cloud infrastructure.
Establishing and coordinating remediation and mitigation for identified security risks. And manage company information security incident response
Ensuring technical security controls are in place, maintained and audited on a periodic basis