GRC - Prin Cybersecurity Analyst

Overview

Principal Cybersecurity Analyst role managing Unisys' internal security audit program and maintaining the cloud compliance program, reporting audit status to senior management.

What you'll do

• Manage internal security audit programs based on international standards such as ISO, NIST, PCI, SSAE 18.
• Prepare, review and maintain the annual audit calendar, audit plans, audit management documentation and audit lifecycle.
• Schedule and plan audits, perform audit work, document findings and confirm completion of associated remediation actions.
• Perform audits based on ISO 27001, ISO 9001, ISO 22301, ISO 20000, NIST, SSAE18 SOC1/SOC2, SOX and PCI-DSS criteria.
• Perform audits on internal processes such as HR, facilities, endpoint services and business processes based on ISO standards.
• Perform technical audits across security domains such as vulnerability and patch management, identity and access management, application development, DevSecOps, crisis management and BC/DR.
• Work with GIS teams to identify infrastructure and application services in scope for technical audits, and plan, schedule and conduct those audits.
• Prepare status reports and review them with stakeholders on a regular basis.
• Establish and maintain the cloud compliance program against Unisys cloud security policies and frameworks such as CIS Benchmarks and NIST.
• Work with GIS cloud security teams to define and implement cloud security controls.
• Conduct regular compliance reviews, support implementation of remediation actions and review compliance status with GIS and CIT leadership.
• Drive continuous improvement and leverage automation to improve the cloud security program.
• Monitor the external environment for new technologies, tools and platforms and recommend enhancements to the cloud security program.
• Conduct cloud user access reviews, track remediation and report results.
• Drive GRC tool selection and implementation for the organisation.
• Support secure AI adoption by supporting AI security efforts and ensuring AI security requirements are covered with AI governance.
• Support global privacy compliance efforts and ensure privacy is considered within GIS internal processes.

What you'll need

• Bachelor's or Master's degree in Engineering in Computer Science.
• Overall experience of 12-15 years, with at least 5 years of technical experience working on infrastructure or application systems.
• Minimum of 5-8 years of relevant experience in internal security audits based on industry standards.
• Experience performing technical audits.
• Minimum of 2 years of experience in cloud compliance and governance.
• CISA certification and CCSP or equivalent.
• Working knowledge of ITGC and SSAE18 SOC1/SOC2.
• Knowledge and experience in AI security and AI security audits.
• Experience working with various GRC tools and GRC automation.
• Working knowledge of at least one cloud service provider: Azure, AWS or GCP.
• Excellent oral, written and presentation skills.
• Excellent interpersonal and teamwork capabilities.
• Ability to indirectly manage by influencing larger groups.
• Ability to work individually and collaborate in a virtual team with vendors and clients.
• Good change management and project management skills.

Nice to have

• CISSP certification.
• Working knowledge of SOX, PCI-DSS, NIST 800-53 and CIS Benchmarks.
• Security-related certifications such as AZ-500.

Details

• Location: Home based, India.