Western Digital
Information Security GRC Specialist - Risk Program Lead
Western Digital, Irvine, California, United States, 92713
Information Security GRC Specialist - Risk Program Lead
Western Digital
is a leader in digital storage solutions compatible with Mac and PC. At Western Digital, our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible, possible.As an Information Security GRC Specialist, you will be critical in leading Western Digital’s information security risk management program.Job Description
This is a Hybrid work environment with 3 days in office.You will lead development, enhancement, and implementation of enterprise-wide information security risk management frameworks, policies, and procedures aligned with industry standards, regulatory requirements, and organizational objectives. You will manage and assess information security risks, develop robust risk management strategies, and generate insightful reports and metrics. You will collaborate with cross-functional teams, providing expert guidance and analysis to enhance our information security posture and ensure compliance with industry standards and regulations.ESSENTIAL DUTIES AND RESPONSIBILITIES:Implement enterprise-wide risk management frameworks that align with industry standards (e.g. ISO27001, NIST, etc).Lead technical and business process risk assessment activities to identify, evaluate, and prioritize information security risks across the organization.Develop and drive implementation of effective risk management strategies to mitigate identified risks.Collaborate across the organization to integrate risk management practices into organizational processes and projects.Generate comprehensive reports and metrics to communicate the status of information security risks to stakeholders and leadership.Analyze security data to identify trends, vulnerabilities, and areas for improvement.Collaborate with internal and external auditors to facilitate security audits and assessments.Stay current with industry trends, emerging threats, and best practices for information security and risk management.Provide expert guidance and support in developing and maintaining information security policies, standards, and procedures.Qualifications
REQUIRED:Bachelor's degree in Information Security, Computer Science, or equivalent work experience.8+ years of experience in information security, including risk management, risk assessments, reporting, and metrics analysis.4+ years of experience in technical roles, or similar technical proficiency.Proficiency in risk assessment methodologies, tools, and techniques.Experience in conducting risk assessments, vulnerability assessments, and compliance audits.Strong understanding of information security frameworks, standards, and best practices (e.g., ISO 27001, NIST, GDPR).Experience in generating and interpreting information security metrics and reports.SKILLS:Excellent analytical and problem-solving skills with attention to detail.Strong communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.Ability to work independently and collaboratively in a fast-paced environment.Experience in building and maturing information security risk management practices.PREFERRED:Relevant certifications such as CISSP, CISM, CRISC, GSNA or similar.Technical certifications such as GCIH, GPEN, CEH, OSCP or similar.Additional Information
Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion, sex, gender, age, national origin, sexual orientation, medical condition, marital status, physical or mental disability, or other legally protected characteristics.Western Digital thrives on the power and potential of diversity. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect, and contribution.
#J-18808-Ljbffr
Western Digital
is a leader in digital storage solutions compatible with Mac and PC. At Western Digital, our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible, possible.As an Information Security GRC Specialist, you will be critical in leading Western Digital’s information security risk management program.Job Description
This is a Hybrid work environment with 3 days in office.You will lead development, enhancement, and implementation of enterprise-wide information security risk management frameworks, policies, and procedures aligned with industry standards, regulatory requirements, and organizational objectives. You will manage and assess information security risks, develop robust risk management strategies, and generate insightful reports and metrics. You will collaborate with cross-functional teams, providing expert guidance and analysis to enhance our information security posture and ensure compliance with industry standards and regulations.ESSENTIAL DUTIES AND RESPONSIBILITIES:Implement enterprise-wide risk management frameworks that align with industry standards (e.g. ISO27001, NIST, etc).Lead technical and business process risk assessment activities to identify, evaluate, and prioritize information security risks across the organization.Develop and drive implementation of effective risk management strategies to mitigate identified risks.Collaborate across the organization to integrate risk management practices into organizational processes and projects.Generate comprehensive reports and metrics to communicate the status of information security risks to stakeholders and leadership.Analyze security data to identify trends, vulnerabilities, and areas for improvement.Collaborate with internal and external auditors to facilitate security audits and assessments.Stay current with industry trends, emerging threats, and best practices for information security and risk management.Provide expert guidance and support in developing and maintaining information security policies, standards, and procedures.Qualifications
REQUIRED:Bachelor's degree in Information Security, Computer Science, or equivalent work experience.8+ years of experience in information security, including risk management, risk assessments, reporting, and metrics analysis.4+ years of experience in technical roles, or similar technical proficiency.Proficiency in risk assessment methodologies, tools, and techniques.Experience in conducting risk assessments, vulnerability assessments, and compliance audits.Strong understanding of information security frameworks, standards, and best practices (e.g., ISO 27001, NIST, GDPR).Experience in generating and interpreting information security metrics and reports.SKILLS:Excellent analytical and problem-solving skills with attention to detail.Strong communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.Ability to work independently and collaboratively in a fast-paced environment.Experience in building and maturing information security risk management practices.PREFERRED:Relevant certifications such as CISSP, CISM, CRISC, GSNA or similar.Technical certifications such as GCIH, GPEN, CEH, OSCP or similar.Additional Information
Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate against any applicant or employee based on their race, color, ancestry, religion, sex, gender, age, national origin, sexual orientation, medical condition, marital status, physical or mental disability, or other legally protected characteristics.Western Digital thrives on the power and potential of diversity. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect, and contribution.
#J-18808-Ljbffr