Western Digital Capital
Information Security GRC Specialist - Technical Lead
Western Digital Capital, Irvine, California, United States, 92713
Information Security GRC Specialist - Technical Lead
Full-time
Job Type (exemption status): Exempt position - Please see related compensation & benefits details below
Salary Range: 135,660.00-192,100.00
Business Function: IT Security
Work Location: Irvine Office--LOC_WDT_USCA01
At Western Digital, our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible, possible.
This is a Hybrid role with 2 days in office per week.
As an Information Security GRC Specialist, you will play a critical role in Western Digital’s information security risk management program.
You will lead Western Digital’s technology and security compliance programs that meet industry standards, regulatory requirements, and organizational objectives. You will lead technical risk assessments, develop robust risk management strategies, and develop insightful metrics and dashboards. You will collaborate with cross-functional teams, providing expert technology risk guidance and analysis to enhance our information security posture and ensure compliance with industry standards and regulations.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
Lead technology and security compliance programs that meet industry standards, regulatory requirements, and organizational objectives.
Lead technical assessment activities to identify, evaluate, and prioritize information security risks across the organization.
Develop and drive implementation of effective risk management strategies to mitigate identified risks.
Develop comprehensive metrics and dashboards to communicate the status of information security risks to stakeholders and leadership.
Analyze security data to identify trends, vulnerabilities, and areas for improvement.
Collaborate with internal and external auditors to facilitate security audits and assessments.
Collaborate across the organization to ensure the integration of risk management practices into organizational processes and projects.
Stay current with industry trends, emerging threats, and best practices for information security and risk management.
Provide expert technical guidance and support in developing and maintaining information security policies, standards, and procedures.
Implement enterprise-wide risk management frameworks that align with industry standards (e.g. ISO27001, NIST, etc).
REQUIRED:
Bachelor's degree in Information Security, Computer Science, or equivalent work experience.
8+ years of experience in information security, including risk management, risk assessments, reporting, and metrics analysis.
3+ years of experience in technical roles, or similar technical proficiency required.
Proficiency in risk assessment methodologies, tools, and techniques.
Experience in conducting risk assessments, vulnerability assessments, and compliance audits.
Strong understanding of information security frameworks, standards, and best practices (e.g., ISO 27001, NIST, GDPR).
Experience in generating and interpreting information security metrics and reports.
Experience in building and maturing information security risk management practices.
PREFERRED:
Relevant certifications such as CISSP, CISM, CRISC, GSNA or similar are highly desirable.
Technical certifications such as GCIH, GPEN, CEH, OSCP or similar are highly desirable.
SKILLS:
Excellent analytical and problem-solving skills with attention to detail.
Strong communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.
Ability to work independently and collaboratively in a fast-paced environment.
Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate based on their race, color, ancestry, religion, sex, gender, age, national origin, sexual orientation, medical condition, marital status, physical disability, mental disability, or other legally protected characteristics.
#LI-AS1
Compensation & Benefits Details
An employee’s pay position within the salary range may be based on several factors including education, qualifications, certifications, experience, skills, performance, geographic location, and business needs.
The salary range is applicable for jobs performed in California, Colorado, New York, or remote jobs that can be performed in these states. This range may be modified in the future.
You will be eligible to participate in Western Digital’s Short-Term Incentive (STI) Plan and may also be eligible for the annual Long-Term Incentive (LTI) program.
We offer a comprehensive package of benefits including paid vacation time, medical/dental/vision insurance, life and disability insurance, tuition reimbursement, and more.
#J-18808-Ljbffr
Full-time
Job Type (exemption status): Exempt position - Please see related compensation & benefits details below
Salary Range: 135,660.00-192,100.00
Business Function: IT Security
Work Location: Irvine Office--LOC_WDT_USCA01
At Western Digital, our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible, possible.
This is a Hybrid role with 2 days in office per week.
As an Information Security GRC Specialist, you will play a critical role in Western Digital’s information security risk management program.
You will lead Western Digital’s technology and security compliance programs that meet industry standards, regulatory requirements, and organizational objectives. You will lead technical risk assessments, develop robust risk management strategies, and develop insightful metrics and dashboards. You will collaborate with cross-functional teams, providing expert technology risk guidance and analysis to enhance our information security posture and ensure compliance with industry standards and regulations.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
Lead technology and security compliance programs that meet industry standards, regulatory requirements, and organizational objectives.
Lead technical assessment activities to identify, evaluate, and prioritize information security risks across the organization.
Develop and drive implementation of effective risk management strategies to mitigate identified risks.
Develop comprehensive metrics and dashboards to communicate the status of information security risks to stakeholders and leadership.
Analyze security data to identify trends, vulnerabilities, and areas for improvement.
Collaborate with internal and external auditors to facilitate security audits and assessments.
Collaborate across the organization to ensure the integration of risk management practices into organizational processes and projects.
Stay current with industry trends, emerging threats, and best practices for information security and risk management.
Provide expert technical guidance and support in developing and maintaining information security policies, standards, and procedures.
Implement enterprise-wide risk management frameworks that align with industry standards (e.g. ISO27001, NIST, etc).
REQUIRED:
Bachelor's degree in Information Security, Computer Science, or equivalent work experience.
8+ years of experience in information security, including risk management, risk assessments, reporting, and metrics analysis.
3+ years of experience in technical roles, or similar technical proficiency required.
Proficiency in risk assessment methodologies, tools, and techniques.
Experience in conducting risk assessments, vulnerability assessments, and compliance audits.
Strong understanding of information security frameworks, standards, and best practices (e.g., ISO 27001, NIST, GDPR).
Experience in generating and interpreting information security metrics and reports.
Experience in building and maturing information security risk management practices.
PREFERRED:
Relevant certifications such as CISSP, CISM, CRISC, GSNA or similar are highly desirable.
Technical certifications such as GCIH, GPEN, CEH, OSCP or similar are highly desirable.
SKILLS:
Excellent analytical and problem-solving skills with attention to detail.
Strong communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.
Ability to work independently and collaboratively in a fast-paced environment.
Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate based on their race, color, ancestry, religion, sex, gender, age, national origin, sexual orientation, medical condition, marital status, physical disability, mental disability, or other legally protected characteristics.
#LI-AS1
Compensation & Benefits Details
An employee’s pay position within the salary range may be based on several factors including education, qualifications, certifications, experience, skills, performance, geographic location, and business needs.
The salary range is applicable for jobs performed in California, Colorado, New York, or remote jobs that can be performed in these states. This range may be modified in the future.
You will be eligible to participate in Western Digital’s Short-Term Incentive (STI) Plan and may also be eligible for the annual Long-Term Incentive (LTI) program.
We offer a comprehensive package of benefits including paid vacation time, medical/dental/vision insurance, life and disability insurance, tuition reimbursement, and more.
#J-18808-Ljbffr