Urgent: Analyst 5, It Security

Company DescriptionAt Western Digital our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible possible At our core Western Digital is a company of problem solvers People achieve extraordinary things given the right technology For decades we ve been doing just that Our technology helped people put a man on the moon We are a key partner to some of the largest and highest growth organizations in the world From energizing the most competitive gaming platforms to enabling systems to make cities safer and cars smarter and more connected to powering the data centers behind many of the world s biggest companies and public cloud Western Digital is fueling a brighter smarter future Binge-watch any shows use social media or shop online lately You ll find Western Digital supporting the storage infrastructure behind many of these platforms And that flash memory card that captures and preserves your most precious moments That s us too We offer an expansive portfolio of technologies storage devices and platforms for business and consumers alike Our data-centric solutions are comprised of the Western Digital xc2 xae G-Technology SanDisk xc2 xae and WD xc2 xae brands Today s exceptional challenges require your unique skills It s You Western Digital Together we re the next BIG thing in data As an Information Security GRC Specialist you will play a critical role in Western Digital s information security risk management program You will a key member of Western Digital s technology and security compliance programs that meet industry standards regulatory requirements and organizational objectives You will lead Information Security Third Party Risk Program - develop robust risk management strategies insightful metrics and drive operational excellence You will collaborate with cross-functional teams providing expert technology risk guidance and analysis to enhance our information security posture and ensure compliance with industry standards and regulations Key Responsibilities Serve as leader and owner of the Third-Party Risk Program in support of WD information security and business objectives Lead process analysis and improvement to ensure that efficiency and effectiveness of Third-Party Risk program create and refine summaries reports KRI KPI s and governance documentation associated with the Third-Party Security Program Conduct technical security assessments of third-party vendor and services to ensure systems networks operations business processes and applications information risks are identified and managed Work with business units and the legal team to define security requirements and standards for third-party contracts Collaborate across the organization to document and identify risk mitigation measures associated with third parties including identifying back-up third parties strength and or maturity of the company and other crucial factors Act as a point of contact for internal and external auditors on 3rd party related audits for Technology Security Disaster Recovery related diligence Develop and drive implementation of effective risk management strategies to mitigate identified risks ensuring alignment with industry best practices and regulatory requirements Analyze security data to identify trends vulnerabilities and areas for improvement Collaborate with internal and external auditors to facilitate security audits and assessments Collaborate across the organization to ensure the integration of risk management practices into organizational processes and projects Stay current with industry trends emerging threats and best practices for information security and risk management QualificationsQualifications Bachelor s degree in Information Security Computer Science or equivalent work experience 8 years of experience in information security including risk management risk assessments reporting and metrics analysis and hands-on with at least one of the following security engineering network security identity and access management security operations and or software development security 3 years of experience in technical roles or similar technical proficiency required are highly desirable Proficiency in risk assessment methodologies tools and techniques Experience in conducting risk assessments vulnerability assessments and compliance audits Strong understanding of information security frameworks standards and best practices e g ISO 27001 NIST GDPR Experience in generating and interpreting information security metrics and reports Excellent analytical and problem-solving skills with attention to detail Strong communication and interpersonal skills with the ability to explain complex security concepts to non-technical stakeholders Ability to work independently and collaboratively in a fast-paced environment Experience in building and maturing information security risk management practices Relevant certifications such as CISSP CISM CRISC GSNA or similar are highly desirable Technical certifications such as GCIH GPEN CEH OSCP or similar are highly desirable Additional InformationWestern Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate based on their race color ancestry religion including religious dress and grooming standards sex including pregnancy childbirth or related medical conditions breastfeeding or related medical conditions gender including a person s gender identity gender expression and gender-related appearance and behavior whether or not stereotypically associated with the person s assigned sex at birth age national origin sexual orientation medical condition marital status including domestic partnership status physical disability mental disability medical condition genetic information protected medical and family care leave Civil Air Patrol status military and veteran status or other legally protected characteristics We also prohibit harassment of any individual on any of the characteristics listed above Our non-discrimination policy applies to all aspects of employment We comply with the laws and regulations set forth in the poster Western Digital thrives on the power and potential of diversity As a global company we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within We believe the fusion of various perspectives results in the best outcomes for our employees our company our customers and the world around us We are committed to an inclusive environment where every individual can thrive through a sense of belonging respect and contribution Western Digital is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process Please contact us at to advise us of your accommodation request In your email please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying LI-AS1