About this role
Supports the implementation and maintenance of information security systems in support of ISO 27001 and ISO 27019 certification. Supports change management of changes to the information security policy and procedures and supporting IT controls. Manages continuous improvement program activities for cyber security for the one or more BHE US Affiliates. Performs risk assessments and manages remediation of risk mitigation actions. Researches, analyzes, develops and implements new strategies, programs, and/or processes in response to changing internal and external conditions. Coordinates or executes IT controls.
This is a multi-level posting
• Bachelor’s degree in information systems, computer science, accounting, finance, business, information systems, computer science, or a related technical field; or equivalent work experience. (Typically four years of related, progressive work experience would be needed for candidates applying for this position who do not possess a bachelor’s degree; a minimum of four years directly-related technical experience in audit, finance, accounting, or information security program compliance support is required.)
• Employee must be able and willing to travel to perform pre-audit inspections and support external auditor at site locations. Travel is typically up to one week at a time and may make up 10% to 25% of the work schedule.
• Eight years of progressively advanced technical experience in an information security, accounting or audit role for the Sr Information Compliance Anayst.
• Demonstrated knowledge of information security best practices as evidenced through achievement or pursuit of one or more advanced certifications, such as CISM or CISSP.
• Deep technical knowledge of operating systems, databases, networks and disaster recovery practices.
• Excellent oral and written communication skills, including presentation skills.
• Ability to recognize, respond, escalate and manage complex technical problems.
• Effective interpersonal and customer relationship skills.
• Effective analytical, problem-solving and decision-making skills.
• Ability to prioritize and handle multiple enterprise level assignments.
• Accessible after business hours to guide, manage and support on-call staff in escalation situations.