The Sr. Information Security Compliance Analyst Will Be Responsible For Supporting The It Compliance Efforts At Vmware As Well As Being Engaged In Supporting And Leading Efforts Pertaining To Other Key Regulations And Compliance Activities.
The Sr. Information Security Compliance Analyst Must Possess Initiative And Drive And Have Broad Relevant Technical Knowledge For A Cloud-Based Environment. Good Management Expertise And Excellent Written And Verbal Communication Skills Are Also Key Attributes For The Position. The Sr. Information Security Compliance Analyst Must Provide Direction, Coordination And Operations Planning To Accomplish The Technical Compliance Goals And Objectives Effectively.
Job Role And Responsibility
The Sr. Information Security Compliance Analyst Should Ensure The Existence Of Appropriate Security Governance Within The Cloud And Internally Controlled Environments (Policy, Procedures, Baselines And Monitoring); Managing The Grc Activities Through Technology; Assessment Of Required Security Controls, And Testing Of Adherence To Required Policies, Procedures And Monitoring. The Sr. Information Security Compliance Analyst Will Collaborate With Other Members Of The Security And It Teams To Identify And Establish The Compliance Requirements And Map The Requirements To The Grc Tools Appropriately And Work With The Various Business Units To Implement Them. The Sr. Information Security Compliance Analyst Will Also Be Responsible For Performing Gap Analysis Exercises While Working Collaboratively With Functional Business Unit And It Teams To Implement Required Remediation Effectively.
Essential Functions For This Role Include:

Automate The Grc Operations By Implementing Required Itgc Controls To Meet It Policy And Regulatory Compliance Requirements In A Cloud Environment.
Mapping The Regulatory And Compliance Requirements To The Business Requirements Using Grc Tool
Technical Knowledge Of One Or More Grc Tool - Implementation And Management.
Escalate And Resolve Security Risks And Issues As Required.
Develop And Track Towards Overall Mission And Grc Roadmap
Develop Metrics And Reporting To Demonstrate Information Security Compliance Status.
Communicate The Compliance Effectiveness To Management On A Scheduled Basis.
Test For Adherence To Policy And Regulatory Controls, Procedures And Standards.
Work Closely With Both Internal And External Audit Teams And Coordinate Security Compliance Audits
Prepare For Engagement Reviews And Quality Assurance Activities.
Follow Up On Deficiencies Identified In Monitoring Reviews, Self-Assessments, Automated Assessments, And Internal And External Audits To Ensure Appropriate Remediation Measures Have Been Achieved Timely.
Perform Impact Analysis As Needed Where Controls Fail Or Are Considered Ineffective.
Track Mitigation Steps And Ensure That Risks Are Managed Appropriately And In A Timely Manner.
Assist With Other Grc Activities As Required.
Provide Ongoing Guidance And Consultation To The Organization To Promote A Progressive And Sustainable Grc Compliance Initiative.
Assist With Integrating Policy And Regulatory Compliance Requirements Into The Organization’S Processes (E.G., Change Control, Mergers And Acquisitions) And Life Cycle Activities.
Manages Timelines, Resources, Project Plans, Action Item Logs, Status Reports And Statistics To Ensure Milestones, Goals And Commitments Are Met.
Lead Control Integration Efforts With New Or Existing Systems And Supporting Architecture

Required Skills

Bachelor’S Degree In Computer Science, Or Related Discipline.
Experience In Managing Grc Tools Such As Rsa Archer
Understanding Of Sdlc Principles
4 To 8 Years Of Compliance, Security Or It Audit Experience Preferably In A Cloud Environment.

Sox Itgc, Hipaa, Gdpr, Pci, Iso 27K Experience A Plus
Strong Understanding Of Application, Network, Operating System And Core Infrastructure Security Concepts.
Excellent Written And Verbal Communication Skills.
Effective Negotiating And Problem Solving Skills.
Experience Working With Internal And External Audit Teams
Proactive And Detail Orientated Team Player.
Familiarity With Common Compliance Frameworks Such As Cobit, Coso, Iso 27001, And Industry Recognized Guidance Such As Nist A Plus
Strong Analytical, Diagnostic, Critical Thinking Skills
Ability To Work Efficiently And Independently With Minimal Supervision
Ba Or Bs Degree Or Higher In Is Or Related Field Required;
Strong Ability To Represent Data In Graphical Form

Preferred Skills

Advanced Security Certifications Like Cism, Cisa, Cissp-Issmp Preferred
Rsa Archer Grc And Sap Knowledge And Experience Highly Desired
Experience Working With Or Utilizing The Rsa Archer Egrc Application A Plus
Experience With A Large Company And/Or Big 4 Accounting Firm

Vmware Company Overview: At Vmware, We Believe That Software Has The Power To Unlock New Opportunities For People And Our Planet. We Look Beyond The Barriers Of Compromise To Engineer New Ways To Make Technologies Work Together Seamlessly. Our Cloud, Mobility, And Security Software Form A Flexible, Consistent Digital Foundation For Securely Delivering The Apps, Services And Experiences That Are Transforming Business Innovation Around The Globe. At The Core Of What We Do Are Our People Who Deeply Value Execution, Passion, Integrity, Customers, And Community. Shape What’S Possible Today At Http://Careers.Vmware.Com.
Equal Employment Opportunity Statement: Vmware Is An Equal Opportunity Employer And Prohibits Discrimination And Harassment Of Any Kind: Vmware Is Committed To The Principle Of Equal Employment Opportunity For All Employees And To Providing Employees With A Work Environment Free Of Discrimination And Harassment. All Employment Decisions At Vmware Are Based On Business Needs, Job Requirements And Individual Qualifications, Without Regard To Race, Color, Religion Or Belief, National, Social Or Ethnic Origin, Sex (Including Pregnancy), Age, Physical, Mental Or Sensory Disability, Hiv Status, Sexual Orientation, Gender Identity And/Or Expression, Marital, Civil Union Or Domestic Partnership Status, Past Or Present Military Service, Family Medical History Or Genetic Information, Family Or Parental Status, Or Any Other Status Protected By The Laws Or Regulations In The Locations Where We Operate. Vmware Will Not Tolerate Discrimination Or Harassment Based On Any Of These Characteristics. Vmware Encourages Applicants Of All Ages. Vmware Will Provide Reasonable Accommodation To Employees Who Have Protected Disabilities Consistent With Local Law.