What You Will Do

• Work under the supervision and guidance of the Tech GRC manager and drive technology compliance activities across Adobe.

• Perform Information Security related assessments to cover domains like User Access management, Network, OS & Application Security, Encryption, Backup Management, Disaster Recovery, Physical Security, Training & Awareness etc.

• Draft compliance reports to summarize the compliance objectives, key findings, and work with teams to remediate key findings

• Lead the liaising with external auditors and customers to help them gain confidence in Adobe’s security compliance program, demonstrating Adobe’s commitment to robust security and compliance practices.

• Identify internal security control issues, ensure they are well-defined, and root causes are identified, with an emphasis on strengthening the overall security posture and aligning security controls with industry standards and best practices.

• Contribute to the expansion of Adobe’s Common Control Framework adoption throughout the organization, while actively refining and improving the framework to meet evolving needs and industry standards.

• Document audit procedures performed ensuring audit methodology is consistently followed and conclusions are appropriately reached.

• Build and maintain compliance dashboards to provide a holistic view of the compliance posture of the organization

• Collaborate and co-ordinate activities with the Tech GRC team based across multiple geo-locations, ensuring alignment with various cybersecurity regulations and standards across different countries, and adapting compliance efforts to meet regional requirements.

What You Need to Succeed

• Bachelors / master’s Degree with a focus in Information Technology / Computer Science/Cybersecurity or related field

• Minimum 3-5 years of experience in related field

• Hands on experience in cybersecurity, information assurance, and systems engineering, with an emphasis on computer and network security.

• Hands on experience with AWS & Azure environments

• Knowledge of Compliance frameworks (e.g. SOC2, FedRAMP, BSI C5, PCI, Spain ENS etc.)

• Knowledge of Core IT processes / services such as SDLC, Identity/User Access management, Backup and DR processes will be useful

• Good interpersonal, verbal and written communication skills. It is essential that the candidate is a team-player and possesses strong organizational and planning skills

• Ability to communicate with both business and IT technical staff including IT and Business management.

• Ability to look ahead, anticipate questions, independently assess risk, and think critically and creatively