Risk and Compliance Analyst

Risk and Compliance Analyst

Location: San Jose, CA (Hybrid - Onsite 3 days/week)
Pay Range: Up to $80.00/hour

Key Responsibilities:

• Establish appropriate policies and procedures based on industry best practices.
• Communicate security standards and standard operating procedures to the business.
• Collaborate with various departments to ensure compliance with policies and procedures.
• Identify control gaps and assist in the implementation of new controls.
• Participate in security incident response activities as needed.
• Conduct periodic audits to ensure compliance with applicable policies.
• Respond to and manage external compliance requirements.
• Establish a formal risk management program, including risk registry and assessment processes.
• Develop a security configuration baseline for all network endpoints and devices.
• Collaborate with IT to create a change management process.
• Work with vulnerability management teams to ensure remediation actions are completed.
• Create an Information Security Dashboard to present metrics from various security controls and technologies.
• Assist in the information security awareness training program across the organization.

Requirements:

• Minimum 4-6 years of security experience, preferably in a Risk/Compliance role.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a relevant field.
• Hands-on experience with Splunk Enterprise Security, Netskope CASB, and Enterprise Immunity Solutions is preferred.
• One (or more) of the following certifications: CISSP, CISM, CISA, CRISC.
• Previous experience in the Semiconductor or R&D industry is a plus.
• In-depth knowledge of various compliance and risk management frameworks.
• Familiarity with networking protocols and standards (e.g., TCP/IP, IPSEC, routing protocols, 802.1x).
• Proven experience in Risk Management, Auditing/Compliance, Configuration Management, Employee Education, and Vulnerability Management.

If you are passionate about risk and compliance in the cybersecurity domain and are looking for an exciting opportunity to make a difference, we encourage you to apply!

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.