Analyst 5, IT Security

4 weeks ago


bangalore, India Western Digital Full time

Company Description

At Western Digital, our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible, possible.

At our core, Western Digital is a company of problem solvers. People achieve extraordinary things given the right technology. For decades, we’ve been doing just that. Our technology helped people put a man on the moon.

We are a key partner to some of the largest and highest growth organizations in the world. From energizing the most competitive gaming platforms, to enabling systems to make cities safer and cars smarter and more connected, to powering the data centers behind many of the world’s biggest companies and public cloud, Western Digital is fueling a brighter, smarter future.

Binge-watch any shows, use social media or shop online lately? You’ll find Western Digital supporting the storage infrastructure behind many of these platforms. And, that flash memory card that captures and preserves your most precious moments? That’s us, too.

We offer an expansive portfolio of technologies, storage devices and platforms for business and consumers alike. Our data-centric solutions are comprised of the Western Digital, G-Technology, SanDisk and WD brands.

Today’s exceptional challenges require your unique skills. It’s You & Western Digital. Together, we’re the next BIG thing in data.

Job Description

As an Information Security GRC Specialist, you will play a critical role in Western Digital’s information security risk management program.

You will a key member of Western Digital’s technology and security compliance programs that meet industry standards, regulatory requirements, and organizational objectives. You will lead Information Security Third Party Risk Program - develop robust risk management strategies, insightful metrics, and drive operational excellence. You will collaborate with cross-functional teams, providing expert technology risk guidance and analysis to enhance our information security posture and ensure compliance with industry standards and regulations.

Key Responsibilities

Serve as leader and owner of the Third-Party Risk Program in support of WD information security and business objectives. Lead process analysis and improvement to ensure that efficiency and effectiveness of Third-Party Risk program, create and refine summaries, reports, KRI/KPI's and governance documentation associated with the Third-Party Security Program. Conduct technical security assessments of third-party vendor and services to ensure systems, networks, operations, business processes, and applications, information risks are identified and managed. Work with business units and the legal team to define security requirements and standards for third-party contracts. Collaborate across the organization to document and identify risk mitigation measures associated with third parties, including identifying back-up third parties, strength and/or maturity of the company, and other crucial factors. Act as a point of contact for internal and external auditors on 3rd party related audits for Technology, Security, Disaster Recovery related diligence. Develop and drive implementation of effective risk management strategies to mitigate identified risks, ensuring alignment with industry best practices and regulatory requirements. Analyze security data to identify trends, vulnerabilities, and areas for improvement. Collaborate with internal and external auditors to facilitate security audits and assessments. Collaborate across the organization to ensure the integration of risk management practices into organizational processes and projects. Stay current with industry trends, emerging threats, and best practices for information security and risk management.

Qualifications

Qualifications

Bachelor's degree in Information Security, Computer Science, or equivalent work experience. 8+ years of experience in information security, including risk management, risk assessments, reporting, and metrics analysis, and hands-on with at least one of the following: security engineering, network security, identity and access management, security operations, and/or software development security. 3+ years of experience in technical roles, or similar technical proficiency required are highly desirable. Proficiency in risk assessment methodologies, tools, and techniques. Experience in conducting risk assessments, vulnerability assessments, and compliance audits. Strong understanding of information security frameworks, standards, and best practices (, ISO 27001, NIST, GDPR). Experience in generating and interpreting information security metrics and reports. Excellent analytical and problem-solving skills with attention to detail. Strong communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders. Ability to work independently and collaboratively in a fast-paced environment. Experience in building and maturing information security risk management practices. Relevant certifications such as CISSP, CISM, CRISC, GSNA or similar are highly desirable. Technical certifications such as GCIH, GPEN, CEH, OSCP or similar are highly desirable.

Additional Information

Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the poster.

Western Digital thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution.

Western Digital is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.

#LI-AS1



  • bangalore, India IT Full time

    Job Overview :We are looking for an experienced IT Security Analyst with a strong background in vendor risk assessments, gap assessments, and information security audits. The ideal candidate will have at least 4 years of IT security experience and possess excellent communication skills. This role requires a proactive approach to identifying and mitigating...


  • Bangalore, Karnataka, India IT Full time

    Job Overview :We are looking for an experienced IT Security Analyst with a strong background in vendor risk assessments, gap assessments, and information security audits. The ideal candidate will have at least 4 years of IT security experience and possess excellent communication skills. This role requires a proactive approach to identifying and mitigating...


  • Bangalore, Karnataka, India IT Full time

    Job Overview :We are looking for an experienced IT Security Analyst with a strong background in vendor risk assessments, gap assessments, and information security audits. The ideal candidate will have at least 4 years of IT security experience and possess excellent communication skills. This role requires a proactive approach to identifying and mitigating...


  • Bangalore, India IT Full time

    Job Overview :We are looking for an experienced IT Security Analyst with a strong background in vendor risk assessments, gap assessments, and information security audits. The ideal candidate will have at least 4 years of IT security experience and possess excellent communication skills. This role requires a proactive approach to identifying and mitigating...

  • Security Analyst

    7 days ago


    bangalore, India NETSACH GLOBAL Full time

    Greetings from Netsach - A Cyber Security Company. Job Title: Security Analyst Exp: 5+yrs Location: Bangalore Interested candidates please share your updated resume at Job Overview: As a Security Analyst, you will play a critical role in safeguarding our organisations data and information systems. Your expertise in cybersecurity will be essential for...

  • Data Security Analyst

    2 months ago


    Bangalore, Karnataka, India IT Full time

    Job Title : Data Security Specialist- .Experience Required : - 4+ years of experience in Data Security.Job Description : We are seeking a skilled Data Security Specialist with expertise in implementing and maintaining data security solutions. The ideal candidate will have hands-on experience with Varonis, Microsoft Data Loss Prevention (DLP), Insider Risk...

  • Data Security Analyst

    4 weeks ago


    Bangalore, Karnataka, India IT Full time

    Job Title : Data Security Specialist- .Experience Required : - 4+ years of experience in Data Security.Job Description : We are seeking a skilled Data Security Specialist with expertise in implementing and maintaining data security solutions. The ideal candidate will have hands-on experience with Varonis, Microsoft Data Loss Prevention (DLP), Insider Risk...

  • Data Security Analyst

    4 weeks ago


    Bangalore, India IT Full time

    Job Title : Data Security Specialist- .Experience Required : - 4+ years of experience in Data Security.Job Description : We are seeking a skilled Data Security Specialist with expertise in implementing and maintaining data security solutions. The ideal candidate will have hands-on experience with Varonis, Microsoft Data Loss Prevention (DLP), Insider Risk...


  • bangalore, India IT Full time

    Job Title : Data Security Specialist- .Experience Required : - 4+ years of experience in Data Security.Job Description : We are seeking a skilled Data Security Specialist with expertise in implementing and maintaining data security solutions. The ideal candidate will have hands-on experience with Varonis, Microsoft Data Loss Prevention (DLP), Insider Risk...


  • bangalore, India Sumo Logic Full time

    This position is responsible for security incident triage and analysis. The analyst will monitor various security tools and security logs and respond to security alerts generated by those tools or noted within the security logs. The analyst would also assist in periodic security tasks such as vulnerability scanning and secure configuration management. ...

  • Security analyst

    4 weeks ago


    bangalore, India CIEL HR Services Full time

    Job Profile: Security analyst Experience : 8+ Years Mode of employment : Full time employment Location : Bangalore Technical skills and competencies: Good experience in conducting IT security audits – ISO 27001, PCI etc Good experience in application security Conduct vulnerability assessment that involves scanning IT assets and services,...

  • SOC Security Analyst

    4 weeks ago


    bangalore, India NetApp Full time

    Title: SOC Security Analyst Location: Bangalore, Karnataka, IN, 560071 Requisition ID: 124437 About NetApp We’re forward-thinking technology people with heart. We make our own rules, drive our own opportunities, and try to approach every challenge with fresh eyes. Of course, we can’t do it alone. We know when to ask for help, collaborate with...


  • bangalore, India Koch Global Services Full time

    Your Job Cyber Security - Information Security analysts are ultimately responsible for ensuring that the company's digital assets are protected from unauthorized access.This includes securing both online and on-premises infrastructures, weeding through metrics and data to filter out suspicious activity, and finding and mitigating risks before breaches...


  • bangalore, India Maintec Technologies Private Limited,Banagalore Full time

    Responsibilities RESG/GTS is the entity in charge of the entire IT infrastructure of Socit Gnrale. The RESG/GTS/SEC department, which corresponds to the GTS Security, is responsible for development, operations, delivery & management of various cyber security and compliance aspects across the SG group. This team has presence globally and comprises of...

  • Lead Security Analyst

    4 weeks ago


    bangalore, India CloudSEK Full time

    WHO ARE WE?We are a bunch of super enthusiastic, passionate, and highly driven people, working to achieve a common goal! We believe that work and the workplace should be joyful and always buzzing with energy!CloudSEK, one of India’s most trusted Cyber security product companies, is on a mission to build the world’s fastest and most reliable AI...


  • bangalore, India Everbridge Full time

    Everbridge is seeking an energetic, multi-tasking, and process focused Sales Security Analyst to support our nationwide sales team. The Sales Security Analyst provides a wide range of security, privacy, and operational support to the Everbridge sales team. The Sales Security Analyst will also become a strong user of and confidential messaging technologies...

  • Sr. Security Analyst

    4 weeks ago


    bangalore, India OpenText Full time

    OPENTEXT  OpenText is a global leader in information management, where innovation, creativity, and collaboration are the key components of our corporate culture. As a member of our team, you will have the opportunity to partner with the most highly regarded companies in the world, tackle complex issues, and contribute to projects that shape the future of...


  • bangalore, India CloudSEK Full time

    WHO ARE WE?We are a bunch of super enthusiastic, passionate, and highly driven people, working to achieve a common goal! We believe that work and the workplace should be joyful and always buzzing with energy!CloudSEK, one of India’s most trusted Cyber security product companies, is on a mission to build the world’s fastest and most reliable AI...

  • IT Security Analyst

    2 weeks ago


    bangalore, India Novo Nordisk Full time

    The position As an IT Security Analyst at Novo Nordisk, you will: Monitor and manage IT security across the organization, including analyzing logs and vulnerabilities from systems. Manage potential IT security incident notifications and collaborate with regional security responsible across Novo Nordisk. Be the interface to Novo Nordisk by handling...

  • Security Analyst

    2 weeks ago


    Bangalore, India Zyoin group Full time

    Responsibilities: Security Monitoring andIncident Response: Drive the creation and refinement of security monitoring rules, techniques, and procedures, particularly automating incident response playbooks. Investigate and resolve escalated security incidents, both independently and while leading a team of security analysts. Operational Roles Rotation: Take...