Information Security GRC Specialist
Posted on 3/15/2024
Western Digital

10,001+ employees

Disk drive & data storage manufacturer
Company Overview
Western Digital’s mission is to be at the cusp of innovation and to push the boundaries of innovation to make what you think was once impossible, possible. The company has been at the forefront of innovation with the first hard drives and now continues to work on advancements in 3D NAND along with their reliable data solutions business.
Data & Analytics
Hardware

Company Stage

N/A

Total Funding

$932M

Founded

2014

Headquarters

San Jose, California

Growth & Insights
Headcount

6 month growth

0%

1 year growth

1%

2 year growth

5%
Locations
Irvine, CA, USA
Experience Level
Entry
Junior
Mid
Senior
Expert
Desired Skills
Communications
Management
CategoriesNew
IT & Support
IT & Security
Cybersecurity
Requirements
  • Bachelor's degree in Information Security, Computer Science, or equivalent work experience.
  • 8+ years of experience in information security, including risk management, risk assessments, reporting, and metrics analysis, and hands-on with at least one of the following: security engineering, network security, identity and access management, security operations, and/or software development security.
  • 4+ years of experience in technical roles, or similar technical proficiency are highly desirable.
  • Proficiency in risk assessment methodologies, tools, and techniques.
  • Experience in conducting risk assessments, vulnerability assessments, and compliance audits.
  • Strong understanding of information security frameworks, standards, and best practices (e.g., ISO 27001, NIST, GDPR).
  • Experience in generating and interpreting information security metrics and reports.
  • Excellent analytical and problem-solving skills with attention to detail.
  • Strong communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.
  • Ability to work independently and collaboratively in a fast-paced environment.
  • Experience in building and maturing information security risk management practices.
  • Relevant certifications such as CISSP, CISM, CRISC, GSNA or similar are highly desirable.
  • Technical certifications such as GCIH, GPEN, CEH, OSCP or similar are highly desirable.
Responsibilities
  • Implement enterprise-wide risk management frameworks that aligns with industry standards (e.g. ISO27001, NIST, etc).
  • Lead technical and business process risk assessment activities to identify, evaluate, and prioritize information security risks across the organization, including threats, vulnerabilities, and potential impacts to information and technology assets.
  • Develop and drive implementation of effective risk management strategies to mitigate identified risks, ensuring alignment with industry best practices and regulatory requirements.
  • Collaborate across the organization to ensure the integration of risk management practices into organizational processes and projects.
  • Generate comprehensive reports and metrics to communicate the status of information security risks to stakeholders and leadership.
  • Analyze security data to identify trends, vulnerabilities, and areas for improvement.
  • Collaborate with internal and external auditors to facilitate security audits and assessments.
  • Stay current with industry trends, emerging threats, and best practices for information security and risk management.
  • Provide expert guidance and support in developing and maintaining information security policies, standards, and procedures.