Cybersecurity: Governance, Risk and Compliance Specialist

Cybersecurity: Governance, Risk and Compliance Specialist

JOIN INNERGO AS:

Cybersecurity: Governance, Risk and Compliance Specialist

JOB FUNCTIONS:

• M onitor user access to IT systems by performing the following: Semiannual access reviews, Termination validation procedures, IT Privilege access reviews
• Validate that access to critical functions within key applications is appropriately segregated (Segregation of Duties – SOD)
• Establish effective communication processes with the business and regional IT teams to coordinate the global assessment of IT controls
• Integrally engage in projects making sure that they comply with O-I policies and security requirements
• Assist with independent vulnerability assessment and SoX audit processes
• Follow documented procedures and retain necessary audit documentation
• Participate in the incident response activities in accordance with established procedures
• Develop and support IT Governance processes
• Develop and support IT Risk Management processes
• Develop and support IT Compliance processes
• Assessing applications, vendors, and processes from a Cybersecurity and Privacy perspective
• Work with the IT and Legal teams to ensure compliance with regulations (SoX, GDPR, DOL, etc).

POSITION REQUIREMENTS:

• Bachelor’s degree in information technology or legal or equivalent years of experience
• Understanding of security frameworks (NIST), and regulatory requirements – governance, risk management, privacy, and data security
• Understanding of security protocols and standards
• Solid knowledge of information security principles, practices
• Minimum 3 years of experience working in Information Technology/IT and Data Governance, IT Risk Management, IT Compliance
• Minimum 3 years of experience working with IT general computer control evaluations, remediation, and with external auditors
• Intermediate knowledge related to privacy assessment (GDPR)
• Understanding of the industry’s control frameworks and leading practices
• Experience in evaluating system security requirements
• Knowledge of system functions, security policies, technical security safeguards, and operational security measures
• Knowledge of industry-leading practices, security frameworks, policies, and standards
• Intermediate operational knowledge of ServiceNow
• Intermediate operational knowledge of SAP GRC
• Ability to determine priorities, makes discretionary decisions and determines when to notify management
• Ability to work well with people from many different disciplines with varying degrees of technical experience
• Experience in communicating and presenting to a management-level audience
• Organized, responsive, and highly thorough problem solver
• Detail oriented
• Demonstrated analytical capabilities
• Self-starter and strong collaboration skills
• Experience in effective communication with customers, employees, and management
• Have high integrity and be able to maintain the confidentiality of work performed
• Must be able to communicate in English – both written and verbal.

ADDITIONAL QUALIFICATIONS:

• ISACA Certified Information Security Manager (CISM)
• ISACA Certified in Risk & Information System Controls (CRISC)
• ISACA Certified in the Governance of Enterprise IT (CGEIT)
• (ISC)2 Certified Information Systems Security Professional (CISSP).

WE OFFER:

• Necessary for work tools
• Co-financing for private medical care, life insurance, sports card