Analyst-governance, Risk & Compliance (analyst Ii, Im Security) Job in Xerox

Description & Requirements

These positions support the Governance, Risk and Compliance (GRC) management processes within Xerox Cyber Security organization. The qualified candidate is responsible for building and deploying effective policies, processes and controls across the enterprise in collaboration with business, IT and other Cyber Security professionals.

Primary Responsibilities:

• Support the development and maintenance of Cyber Security policies, standards, and guidelines in alignment with applicable laws, common security frameworks and leading practices
• Participate in development of training curriculum, conduct security awareness campaigns and evaluate their effectiveness
• Facilitate the execution and continuous improvement of third-party risk management program and processes
• Conduct gap assessments and facilitate management of compliance programs including ISO 27001, PCI, FedRAMP, SOC1, SOC2, GDPR, etc.
• Oversee and coordinate the IT and business compliance to Disaster Recovery / Business Continuity policy
• Review and manage exceptions to Cyber Security policies
• Assist in the development and delivery of dashboards and actionable reporting, KRIs and KPIs
• Review, conduct, or participate in audits of security programs and projects

Knowledge and Skills Required:

• Strong knowledge of and experience in security requirements, standards and practices including NIST CSF, NIST 800-53, ISO 27001, PCI DSS, SOC2, COBIT, GLBA, SOX, GDPR, OWASP Top 10, SANS Top 25, etc.
• Strong understanding of and/or prior experience in one or more of the following:
• Security Governance and Policy Management
• Third Party Risk Management
• IT Disaster Recovery/ Business Continuity
• Security Training and Awareness
• Security Compliance Management
• A broad understanding across security domains
• Prior experience in developing or implementing common controls framework would be a huge plus
• Ability to document, follow, execute and continually improve a detailed process
• Strong organizational and attention to detail skills
• Strong written and oral communication skills
• Experience working across multiple teams on projects
• Demonstrated ability to handle multiple open items of varying size concurrently
• Uncompromising personal and professional integrity and ethics

Education and Experience Required:

• B. Tech, B. E., in computer science, information systems, information security, engineering or related field. MCA
• At least 8 years of related experience
• One or more Industry-standard security certifications (such as CISSP, CISM, CISA, CRISC, CTPRP)

2019 Xerox Corporation. All rights reserved. Xerox and Xerox and Design are trademarks of Xerox Corporation in the United States and/or other countries.