資深安全分析師 II（GRC）
Staff Security Analyst II (GRC)
职位：Staff Security Analyst II, GRC
地点：美国远程办公
同义职位名称：高级程序经理，安全
简介：
Blue Yonder 是 AI 驱动的数字供应链解决方案的全球领导者，帮助企业通过创新、智能的技术优化和转型其运营。在我们塑造全球网络安全未来的过程中，GRC 团队正在寻找一位有才华的 Staff Security Analyst II, GRC。
该职位将跨团队工作，确保 Blue Yonder 产品和内部流程按照适当的 IT 和安全控制措施运行和管理，以满足监管、行业和内部标准。该职位与跨职能团队合作，确保控制措施有效实施并进行管理审计活动。
你将负责的工作：
控制管理：
- 根据最佳实践标准和框架（ISO 27001/27701/22301、SOC1/2 Type II 等）领导内部 IT 和安全控制评估
- 识别控制缺陷，并与相关方推动整改活动
- 支持证据收集和控制文档编制，以支持内部和外部审计
- 定期向相关方和管理层沟通合规状况
- 跟踪最新的法规和安全合规标准和框架
审计准备和管理：
- 培训和准备控制负责人参与审计和证据收集
- 规划、协调和管理内部和外部审计活动，包括审计日程和范围
- 管理报告审查，回应审计发现，并跟踪整改至完成
我们寻找的条件：
所需资格
- 7 年的信息安全合规或 IT 审计相关经验。
- 对 IT 和安全控制框架（ISO 27001、SOC1、SOC2）有深入理解。
- 熟悉云安全实践和共享责任模型。
- 必须有执行端到端 IT 和安全控制测试及整改跟踪的经验。
- 优秀的沟通能力和相关方管理技能。
- 强大的分析和解决问题的能力。
优先资格
- 持有 CISA、CISM 或 CISSP 认证（优先但非必需）
- 有使用 AI 合规框架（如 ISO 42001）的经验。
- 信息体系、会计、商业或相关领域的学士学位或同等学历
该职位的年薪范围为 130,023.09 - 163,976.90 美元
薪资范围信息提供
查看英文原文
Role: Staff Security Analyst II, GRC
Location: US Remote
Synonymous Business Title (s): Sr. Program Manager, Security
Overview:
Blue Yonder is a global leader in AI‑driven digital supply chain solutions, empowering businesses to optimize and transform their operations with innovative, intelligent technology. As we shape the future of global cybersecurity, our GRC team is seeking a talented Staff Security Analyst II, GRC.
This role will work across teams to ensure Blue Yonder product and internal processes are operating and managed with appropriate IT and security controls that meet regulatory, industry, and internal standards. This role partners with cross-functional teams to ensure controls are implemented and operating effectively and manage audit engagements.
What You’ll Be Doing:
Control Management:
- Lead internal IT and security control assessments aligned with best practice standards and frameworks (ISO 27001/27701/22301, SOC1/2 Type II, etc.)
- Identify control deficiencies and drive remediation activities with stakeholders
- Support evidence collection and documentation of controls in support of internal and external audits
- Regularly communicate compliance posture to stakeholders and leadership
- Stay current with regulatory and security compliance standards and frameworks
Audit Readiness and Management:
- Train and prepare control owners for audit participation and evidence collection
- Plan, coordinate and manage internal and external audit activities including audit schedules and scope
- Manage report reviews, respond to audit findings, and track remediation to closure
What We’re Looking For:
Required Qualifications
- 7 years of information security compliance or IT audit roles.
- Strong understanding of IT and security control frameworks (ISO 27001, SOC1, SOC2).
- Familiarity with cloud security practices and the shared responsibility model.
- Must have experience performing end to end IT and Security control testing and remediation tracking.
- Excellent communication and stakeholder management skills.
- Strong analytical and problem-solving skills.
Preferred Qualifications
- Certifications such as CISA, CISM, or CISSP (preferred but not required)
- Experience working with AI Compliance frameworks such as ISO 42001.
- Bachelor’s degree or equivalent in Information Systems, Accounting, Business or related field
The annual base salary range for this position is $130,023.09 - $163,976.90
The salary range information provided, reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual salary will be commensurate with skills, experience, certifications or licenses and other relevant factors. In addition, this role will be eligible to participate in either the annual performance bonus or commission program, determined by the nature of the position.
At Blue Yonder, we care about the wellbeing of our employees and those most important to them. This is reflected in our robust benefits package and options that includes:
- Comprehensive Medical, Dental and Vision
- 401K with Matching
- Flexible Time Off
- Corporate Fitness Program
- A variety of voluntary benefits such as; Legal Plans, Accident and Hospital Indemnity, Pet Insurance and much more
At Blue Yonder, we are committed to a workplace that genuinely fosters inclusion and belonging in which everyone can share their unique voices and talents in a safe space. We continue to be guided by our core values and are proud of our diverse culture as an equal opportunity employer. We understand that your career search may look different than others, and embrace the professional, personal, educational, and volunteer opportunities through which people gain experience.
Our Values
If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success – and the success of our customers. Does your heart beat like ours? Find out here: Core Values
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.
Originally posted on Himalayas