IT Governance Risk and Compliance Security Analyst

As an IT Governance Risk and Compliance Security Analyst, you will be critical in advancing Western Digital’s information security Governance, Risk Management, and Compliance (GRC) program.

You will assist in development, enhancement, and implementation of enterprise-wide (comprehensive) information security risk management frameworks, policies, and procedures aligned with industry standards, regulatory requirements, and organizational objectives. You will manage and assess information security risks, develop robust risk management strategies, and generate insightful reports and metrics. You will collaborate with cross-functional teams, providing expert guidance and analysis to enhance our information security posture and ensure compliance with industry standards and regulations.

Key Responsibilities

• Assist in Implementation of enterprise-wide risk management frameworks that aligns with industry standards (e.g. ISO27001, NIST, etc).
• Perform technical and business process risk assessment activities to identify, evaluate, and prioritize information security risks across the organization, including threats, vulnerabilities, and potential impacts to information and technology assets.
• Perform risk assessments on third party vendors that provide hardware, software, and technology based services
• Define enterprise IT business continuity and disaster recovery plans including business impact and criticality analysis, and periodic testing of the plans 
• Develop and drive implementation of effective risk management strategies to mitigate identified risks, ensuring alignment with industry best practices and regulatory requirements.
• Collaborate across the organization to ensure the integration of risk management practices into organizational processes and projects.
• Generate reports and metrics to communicate the status of information security risks to stakeholders and leadership.
• Analyze security data to identify trends, vulnerabilities, and areas for improvement.
• Collaborate with internal and external auditors to facilitate security audits and assessments.
• Stay current with industry trends, emerging threats, and best practices for information security and risk management.
• Provide expert guidance and support in developing and maintaining information security policies, standards, and procedures.

Qualification

• Bachelor's degree in Information Security, Computer Science, or equivalent work experience.
• 6+ years of experience in information security, including risk management, risk assessments, reporting, and metrics analysis, and hands-on with at least one of the following:  security engineering, network security, identity and access management, security operations, and/or software development security.
• 3+ years of experience in technical roles, or similar technical proficiency are highly desirable.
• Proficiency in risk assessment methodologies, tools, and techniques.

Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gender-related appearance and behavior, whether or not stereotypically associated with the person’s assigned sex at birth), age, national origin, sexual orientation, medical condition, marital status (including domestic partnership status), physical disability, mental disability, medical condition, genetic information, protected medical and family care leave, Civil Air Patrol status, military and veteran status, or other legally protected characteristics. We also prohibit harassment of any individual on any of the characteristics listed above. Our non-discrimination policy applies to all aspects of employment. We comply with the laws and regulations set forth in the Equal Employment Opportunity is the Law poster.

Western Digital thrives on the power and potential of diversity. As a global company, we believe the most effective way to embrace the diversity of our customers and communities is to mirror it from within. We believe the fusion of various perspectives results in the best outcomes for our employees, our company, our customers, and the world around us. We are committed to an inclusive environment where every individual can thrive through a sense of belonging, respect and contribution.

Western Digital is committed to offering opportunities to applicants with disabilities and ensuring all candidates can successfully navigate our careers website and our hiring process. Please contact us at jobs.accommodations@wdc.com to advise us of your accommodation request. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.

#LI-AS1