Job Information
Western Digital Technologies Technical Information Security Specialist - GRC in Irvine, California
This is a Hybrid role with 2 days in office per week.
As an Information Security GRC Specialist, you will play a critical role in Western Digitals information security risk management program.
You will lead Western Digitals technology and security compliance programs that meet industry standards, regulatory requirements, and organizational objectives. You will lead technical risk assessments, develop robust risk management strategies, and develop insightful metrics and dashboard.You will collaborate with cross-functional teams, providing expert technology risk guidance and analysis to enhance our information security posture and ensure compliance with industry standards and regulations.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
- Lead technology and security compliance programs that meet industry standards, regulatory requirements, and organizational objectives.
- Lead technical assessment activities to identify, evaluate, and prioritize information security risks across the organization, including threats, vulnerabilities, and potential impacts to information and technology assets.
- Develop and drive implementation of effective risk management strategies to mitigate identified risks,ensuring alignment with industry best practices and regulatory requirements.
- Develop comprehensive metrics and dashboards to communicate the status of information security risks to stakeholders and leadership.
- Analyze security data to identify trends, vulnerabilities, and areas for improvement.
- Collaborate with internal and external auditors to facilitate security audits and assessments.
- Collaborateacrossthe organization to ensure the integration of risk management practices into organizational processes and projects.
- Stay current with industry trends, emerging threats, and best practices for information security and risk management.
- Provide expert technical guidance and support in developing and maintaining information security policies, standards, and procedures.
- Implement enterprise-wide risk management frameworks that aligns with industry standards (e.g. ISO27001, NIST, etc).
