Security And Compliance Analyst

Title: Security and Compliance Analyst
Contract Length: 4+ months
Location: 40% Remote Houston, TX 77079
Security and Compliance Analyst for Portfolio Compliance Work. with Risk assessment, Cloud security, Stakeholder management and control design skills. The purpose of the Security & Compliance (S&C) function is to ensure (as a first line of defense, with IRM providing the second line of defense and internal audit providing the third line of defense) that is addressing Information Risks in an effective and efficient manner, commensurate with risk appetite, and being seen as an industry leader among peers and key suppliers of security services.
The Information Risk posture of includes a wide variety of potential business impacts, such as HSSE impacts, production loss, financial and maintenance operations loss, loss of Most Confidential bidding data.
The S&C function performs risk assessment, defines the selection of mandated IT Controls, and designing of these controls. The function organizes communication campaigns to impact the behavior of business and IT staff where it relates to Information Risks.
The Security & Compliance (S&C) Competency Centre (CC) Senior Analyst supports in the identification, prioritization and management of all Confidentiality, Integrity, Availability and Regulatory risks to the services delivered and suppliers. This is to ensure the risk is reduced to an acceptable level and managed effectively and is achieved by ensuring an appropriate risk and control framework is in place, identifying, assessing and developing remediation plans for all risks and by ensuring all new developments are appropriately assessed. This job requires extensive interaction with IRM staff and other business risk related roles like portfolio managers, project managers, (security) architects and component service managers/Operations Landscape managers.
The Security & Compliance (S&C) Competency Centre (CC) Senior Analyst is responsible for the following:
Project Review and Technical Advice

• Offer advice and suppliers to assist in resolving questions and issues around how to manage risk
• Work with the architecture community to review new technology and architecture innovations.
• Lead the S&C Analyst for specific technology and advice on the Information security for their projects.
• Provide Subject Matter Expertise for projects and business stakeholders, in combination with the Improvement Program.
• Review all new high risk projects; new technical designs; for Information risks and advise on suitable controls and mitigations at early stages of the program.

The Security & Compliance (S&C) Competency Centre (CC) Senior Analyst is responsible for supporting the following:
Risk Management and Mitigation

• Ensure that S&C continues to focus on risks significant to the Business, with emphasis on innovation.
• Review and recommend approval project charters.
• Assess and classify all potential business and infrastructure information risks.
• Translate Technical, legal and Regulatory Compliance obligations into a cohesive collection of Security Controls and provides the respective stakeholders with the IRM requirements and its implementation methodologies.
• Facilitate smooth conduct of Risk Assessment (including Legal & Regulatory) on Applications, Network& Systems
• Perform end to end Security Assessment on vendor offerings New/Leveraging existing (SAAS / PAAS/IAAS) services including integration with Shell environment.
• Support during Internal /External Audit
• Execute, with suppliers, risk analyses on IT application/services.
• Support in development of tooling to support IRM processes and ensuring this is fit for purpose.
• Develop and socialize our overall risk profile and action plans to mitigate risks
• Actively participate in S&C team and community meetings, representing S&C and Business interests in other CC forums.

Controls Management and Optimization

• Review and approve the control design of supplier and technical specifications against control requirements, as agreed contractually, during PDF project.
• Support the development of new IRM policies, tooling, procedures where required.
• Ensure controls are both risk-driven and based on industry standards

Kind Regards,
Kartik Bhardwaj | Absolute IT | Recruitment Manager
116 Village Blvd Suite 200 Princeton New Jersey 08540
Direct: 609-639 9618 Office: 201-228-3009 EXT 127
[email protected]
www.absoluting.com