GRC Analyst

Why WWT?

At World Wide Technology, we work together to make a new world happen. Our important work benefits our clients and partners as much as it does our people and communities across the globe. WWT is dedicated to achieving its mission of creating a profitable growth company that is also a Great Place to Work for All. We achieve this through our world-class culture, generous benefits and by delivering cutting-edge technology solutions for our clients.

Founded in 1990, World Wide Technology (WWT), a global technology solutions provider leading the AI and Digital Revolution, with $20 billion in annual revenue, combines the power of strategy, execution and partnership to accelerate digital transformational outcomes for large public and private organizations around the world. Through its Advanced Technology Center, a collaborative ecosystem of the world's most advanced hardware and software solutions, WWT helps customers and partners conceptualize, test and validate innovative technology solutions for the best business outcomes and then deploys them at scale through its global warehousing, distribution and integration capabilities.

With nearly 10,000 employees and more than 55 locations around the world, WWT's culture, built on a set of core values and established leadership philosophies, has been recognized 13 years in a row by Fortune and Great Place to Work for its unique blend of determination, innovation and leadership focus on diversity and inclusion. With this culture at its foundation, WWT bridges the gap between business and technology to make a new world happen for its customers, partners, and communities.

Want to work with highly motivated individuals on high-performance teams? Join WWT today!

As an InfoSec Audit and Compliance Analyst, you must enjoy and thrive in a fast paced, dynamic culture. The position will help Information Technology (IT) and business stakeholders across the company obtain and maintain compliance across various assessments, audits, certifications, regulations, standards and requirements through research, analysis and understanding of the requirements. The InfoSec Audit and Compliance Analyst is a detailed analyst with proven analytical skills to be used in audit and compliance methodologies, able to perform activities to meet the following responsibilities:

RESPONSIBILITIES:

• Assist in monitoring and researching new regulations and standards.
• Provide advice and suggestions on the implementation of new regulations and standards and on the remediation of findings.
• Assist in the development, implementation, and maintenance of controls across WWT.
• Conduct periodic evidence reviews and requests against WWT compliance controls.
• Assist in the development and maintenance of WWT's control mappings to find commonalities or gaps.
• Assist in the development and maintenance of documentation needed for InfoSec GRC audit and compliance activities.
• Coordinate on-site audit activities including reserving rooms, scheduling resources, and ordering lunches.
• Administrate audit vendor requirements and document repositories via vendor portals and regular meetings.
• Assist in development and communication of audit plans, timelines, and status to impacted resources and stakeholders.
• Assist in development and conduct training on controls, standards, and regulations for audit resources.

• Document risks, issues, decisions, dependencies, and action items related to audit and compliance activities.
• Development and communication of status and tracking updates of compliance efforts through status meetings, request logs, and other means where necessary.
• Broaden and maintain relationships with other departments, such as Finance, Risk, Compliance, and Legal.
• Serve as the main analyst and liaison with Identity and Access Management and other teams (where relevant) to implement, administrate, configure, and test the identity and access management systems leveraged as the tool for centralized access management controls.

QUALIFICAITONS:

• General knowledge of audit and compliance methodologies.
• General knowledge of System and Organization Controls (SOC) audit reports.
• General in information security best practicesand frameworks, including (but not limited to)NIST Special Publications and Cyber Security Framework, CIS Controls, ISO/IEC 27000 series, and OWASPTop 10.
• General knowledge of risk assessment methodologies.
• General knowledge of laws and regulations related to information security and relevant to the company,such as
• General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).
• Either a bachelor s degree in an Information Security, Computer Information Systems, Information Technology, or Risk Management discipline and/or at least1yearof experience in InfoSec Audit and Compliance.
• Relevant InfoSec certifications are preferred.
• Strong attention to detail, analytical, and statistical skills.
• Excellent verbal and written communication skills. Able to communicate persuasively and influence others.
• Demonstrate professional skepticism to ensure evidence is sufficient when assessing the relevant information security controls.
• Demonstrate an understanding of business processes, risk management and information security strategies, IT controls, and how they interact together.
• Demonstrate proficiency in process formulation and improvement.

The well-being of WWT employees is essential. So, when it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:

• Health and Wellbeing: Heath, Dental, and Vision Care, Onsite Health Centers, Employee Assistance Program, Wellness program
• Financial Benefits: Competitive pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Tuition Reimbursement
• Paid Time Off: PTO & Holidays, Parental Leave, Sick Leave, Military Leave, Bereavement
• Additional Perks: Nursing Mothers Benefits, Voluntary Legal, Pet Insurance, Employee Discount Program

Equal Opportunity Employer Minorities/Women/Veterans/Individuals with Disabilities