About the Role
The Global Cybersecurity Compliance Analyst will be responsible for identifying, analyzing, reporting, and ensuring security processes and controls are designed, managed, and assessed for effectiveness to reduce overall compliance risks across the organization. Specializing specifically in ISO, NIST and TISAX based assessments.
Responsibilities
•Identify, document, and conduct compliance assessments and validate the effectiveness of applicable ISO, NIST and TISAX requirements across the organization
•Communicates assessment issues to team owners and custodians of information risk "Business Partners," or information governance teams and information security teams
•Partner with IT teams and other key stakeholders (e.g., Legal), advising both on applicable control requirements and potential solutions to address compliance issues
•Identify control deficiencies and maintain records of deficiency details including management response documentation and exposure check evidence
•Stay abreast of and proactively informed on changes and revisions to ISO, NIST and TISAX frameworks
•Assists with the evaluation of the effectiveness of the information security program by developing, monitoring, gathering, and analyzing information security and compliance metrics for management
•Assist with developing and maintaining compliance and risk monitoring mechanisms such as Key Risk Indicators (KRI), reports on status of risk assessment, control effectiveness issues remediation and internal audit findings
•Train ISMS managers on ISO compliance requirements and how to prepare and conduct ISO audits
•Coordinate with internal and external auditors and manage audit schedules
Requirements
•BS or MA in Business, Computer Science, Information Security, or a related field
•2+ years as a Certified Cybersecurity Compliance Auditor
•2+ years of work experience in information security, especially in an information cybersecurity risk role
•2+ years of experience in managing risk and compliance issues, or similar experience managing applications, projects or systems that require identification, evaluation, and remediation of risk
•Technical background or demonstrable understanding of a range of operational and IT risks and operations
•Strong business background; experience gathering and interpreting risks and associated impacts in the context of financial and operational concerns
•Strong understanding of compliance and risk-related issues through demonstrated experience managing, information security or regulatory compliance programs, and audits
•4+ years of experience with regulatory compliance and information security management frameworks (e.g., International Organization for Standardization [ISO] 27000, COBIT, National Institute of Standards and Technology [NIST] 800)
Desired, but not required
•Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and/or Certified Information Systems Auditor (CISA)
What we offer
Total Rewards: salary range varies by location and local market conditions and is based on multiple factors, including job-related knowledge/skills, experience, geographical location, and other factors.
UL Solutions has been pioneering change since 1894. Our teams have influenced billions of products, plus services, software offerings and more.
