高级信息安全工程师
Senior Information Security Engineer
加入我们，为客户提供愉悦的体验。Five9 是一家领先的云客服中心软件提供商，将云计算创新的力量带给全球客户。
我们每天践行价值观，打造以团队为先的文化，使我们能够共同创新、成长和繁荣。我们重视多样性，营造包容的环境，让员工能够做真实的自己。
我们正在寻找一位高级信息安全工程师加入我们不断壮大的安全风险管理部门。安全风险管理部门的目标是超越传统的风险管理；我们正在构建一个由工程驱动的项目，设计、自动化并扩展保护 Five9 及其客户的控制措施、工作流程和工具。
作为该项目的关键成员，该职位将支持 Five9 基础设施、服务和收购业务中风险识别、评估、处理和报告的日常执行。你将直接与工程、运营和业务相关方合作，揭示安全风险，推动解决，并为管理层保持对 Five9 风险态势的清晰了解。
**主要职责：**
- 在 Five9 的环境中识别、记录和评估安全风险，包括生产基础设施、云服务、企业系统和收购平台
- 在 Jira 中维护安全风险登记册，确保风险被准确分类、分配给适当的负责人，并在其生命周期内进行跟踪
- 与服务负责人、工程主管和运营团队合作，建立风险责任，并推动修复或缓解计划
- 协助风险接受流程，包括准备风险接受文档，并与相关方协调审批
- 为安全领导层和高管受众开发和提供风险报告，包括能清晰传达风险态势的仪表盘和指标
- 与合规、漏洞管理和其他信息安全职能合作，确保风险发现被纳入更广泛的安全部署
- 研究并应用风险管理框架和方法论，持续提升项目的成熟度
- 参与风险管理制度、流程和操作手册的制定
**要求：**
- 3 年以上信息安全经验，其中至少 2 年专注于安全风险管理或 GRC（治理、风险与合规）
- 展示出在安全风险管理、风险评估、风险缓解和风险报告方面的实际经验
查看英文原文
Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact center software, bringing the power of cloud innovation to customers worldwide.
Living our values everyday results in our team-first culture and enables us to innovate, grow, and thrive while enjoying the journey together. We celebrate diversity and foster an inclusive environment, empowering our employees to be their authentic selves.
We are looking for a Senior Information Security Engineer to join our growing Security Risk Management team. The Security Risk Management team aims to expand beyond traditional risk management; we are building an engineering driven program that designs, automates, and scales the controls, workflows, and tooling that protect Five9 and our customers.
As a key contributor to the program the role supports the day-to-day execution of risk identification, assessment, treatment, and reporting across Five9's infrastructure, services, and acquisitions. You'll work directly with engineering, operations, and business stakeholders to surface security risks, drive them toward resolution, and maintain a clear picture of Five9's risk posture for leadership.
**Key Responsibilities:**
- Identify, document, and assess security risks across Five9's environment, including production infrastructure, cloud services, corporate systems, and acquired platforms
- Maintain the Security Risk Register in Jira, ensuring risks are accurately categorized, assigned to appropriate owners, and tracked through their lifecycle
- Engage with service owners, engineering leads, and operations teams to establish risk ownership and drive remediation or mitigation plans
- Facilitate the risk acceptance process, including preparing risk acceptance documentation and coordinating approval with appropriate stakeholders
- Develop and deliver risk reporting for security leadership and executive audiences, including dashboards and metrics that communicate risk posture clearly
- Collaborate with compliance, vulnerability management, and other Information Security functions to ensure risk findings are incorporated into the broader security program
- Research and apply risk management frameworks and methodologies to continuously improve program maturity
- Contribute to the development of risk management policies, procedures, and playbooks
**Requirements:**
- 3+ years of experience in information security, with at least 2 years focused on security risk management or GRC
- Demonstrated experience maintaining a security risk register and driving risk treatment decisions with cross-functional stakeholders
- Strong understanding of risk assessment methodologies (qualitative and quantitative)
- Familiarity with security frameworks such as NIST CSF, NIST 800-53, ISO 27001, PCI, or SOC 2
- Ability to communicate security risks clearly to both technical and non-technical audiences
- Experience with Jira or similar tools for tracking and managing risk workflows
- Self-directed and comfortable engaging directly with service owners, engineers, and leadership to resolve ambiguity around risk ownership
**Preferred Skills**:
- Experience with cloud environments (GCP, AWS, or Azure), particularly assessing risks related to cloud architecture and services
- Familiarity with vulnerability management programs and how they feed into risk management
- Experience supporting compliance audits or regulatory assessments (ISO 27001, SOC 2, PCI DSS)
- Experience building or contributing to security metrics, KPI dashboards, or executive reporting
- Prior work in a SaaS or contact center / communications platform environment
- Hands-on experience using agentic coding tools (Cursor, Claude Code, Copilot, etc.) and a working knowledge of Python
- Professional certification in Information Security or Risk Management (such as CISSP, CISM, CISA, CRISC, etc.)
**Workplace location:** This role is fully remote for candidates who reside outside Porto, Maia, Matosinhos, Gondomar, Valongo e Vila Nova de Gaia. Candidates who reside within those municipalities would be required to work in-office 3 days a week.
**Benefits:**
- Five9 Shares
- Bonus Scheme
- 10% Flex Benefit
- Meal Allowance
- Medical Insurance
- Life Insurance
- 25 day Annual Leave + Public Holidays
Five9 embraces diversity and is committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better we are. Five9 is an equal opportunity employer.
Five9 is committed to providing reasonable accommodations for qualified individuals with disabilities throughout the application and interview process. If you need assistance or an accommodation due to a disability, please contact us at accommodations@five9.com to request an accommodation. Requests will be handled confidentially and in accordance with applicable law.
* * *
View our privacy policy, including our privacy notice to California residents here: [https://www.five9.com/pt-pt/legal](https://www.five9.com/pt-pt/legal).
Note: Five9 will never request that an applicant send money as a prerequisite for commencing employment with Five9.