Information Security Analyst II

Overview

Use your information security expertise and join the GRC team focused on building the Risk Management Framework (RMF) program across the company and support the various lines of business to ensure our compliance to the laws, regulations, and contractual obligations. This collaborative team operates cross-divisionally throughout Esri and helps identify risks and develop mitigation strategies to help ensure the success of the business.

Responsibilities

• Assist in the development and implementation of the company's GRC framework, policies, and procedures
• Conduct risk assessments and audits to evaluate the effectiveness of the company's internal controls and compliance with applicable laws, regulations, policies, and standards
• Monitor and track the progress and status of the remediation actions and escalate any issues or delays
• Help improve our processes related to security reviews, assessments and risk management
• Security assurance, audit support, control language review
• Support the compliance and risk management of the Esri.Tech enclave (NIST 800-171) which may include:
  • Continuous monitoring and assessment
  • Compliance documentation creation and maintenance
  • Baseline compliance review and maintenance
  • Enclave-specific change control support and communications
  • Coordination with existing and incoming engagements/users
  • Other roles and functions as needed
• Successfully set priorities, perform tasks in an orderly fashion, and meet time deadlines

Requirements

• A keen interest in learning and developing skills and understanding in the IT security and system management spaces is necessary to foster the communications and relationships central to this role
• 2+ years of experience, or an equivalent combination of education and work experience in IT, security, computer science, business, project management, or related field
• Strong interpersonal and communication skills to work effectively with IT and business units; ability to bridge communications between technical IT team members and compliance team members
• Strong attention to detail, customer orientation, communication, and presentation skills including the ability to list and quickly translate business needs into solutions and build effective working relationships
• Strong, self-motivated, and productive team player with ability to thrive in a dynamic environment
• Bachelor's Degree in Computer Science, Cybersecurity, Business Administration, project management, or accounting
• US citizenship and ability and willingness to obtain a security clearance

Recommended Qualifications

• Security +, ISC2 CC, or CRISC certification

#LI-NR5

#LI-Hybrid