Hyderabad, IND
1 day ago
Senior Security Governance & Compliance Manager
Splunk, a Cisco company, is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis. **Job Description** Join us as we pursue our vision to make machine data accessible, usable and valuable to everyone. We are a company filled with people who are passionate about our product and seek to deliver the best experience for our customers. At Splunk, we’re committed to our work, customers, having fun and most importantly to each other’s success. Learn more about Splunk careers and how you can become a part of our journey. **Role Description:** Splunk’s Assurance, Advisory, Risk and Compliance (SpAARC) team is looking for a motivated Senior Technology Compliance Analyst who will own delivering technology assurance, advisory, compliance and risk management services to the company. In this position, you will make a difference at Splunk and stand out from others by building consultative partnerships with business owners, internal/external auditors, and engineering teams to drive risk mitigation, process gaps maturity, and control management. Being analytical, upbeat, creative, and one who thrives in a highly skilled and dynamic environment will lead to success. Your focus will be on compliance efforts that meet or exceed various technology security compliance and internal controls that include, but are not limited to, SOC I & II, HIPAA, ISO 27001, 27017, 27018, PCI-DSS, IRAP, TISAX, CSA STAR, and ISMAP as it pertains to software, Cloud, and on premise environments. You must be comfortable working with both technical and non-technical resources and have experience describing compliance requirements in a technical manner. This position is based at Splunk’s Hyderabad office. The position may require the ability to travel (domestic and international) for approximately 10 to 20% of the time. **Responsibilities:** + You will own the planning, execution, and reporting of technology and security assessments within Splunk's Operations / Engineering / Technology areas. + You will ensure accurate identification, communication, and mitigation of risks, processes, and internal control gaps with potential adverse operational, financial, strategic and compliance risk implications. + You will engage with business and control owners, internal & external auditors, as well as Splunk leadership on new and ongoing compliance initiatives. + You will facilitate the execution of external audits over Splunk’s products and internal controls. + You will be responsible for leading audit walkthroughs, and driving the process of audit evidence collection and review for internal and external audit engagements. + Participate in end-to-end walkthroughs by partnering with business teams to understand processes, identify risks, control gaps, and improvement opportunities. + You will assist in the design of automation to enable scalability of the compliance programs + You will own the follow up of action plans to ensure appropriate and timely mitigation of identified risks. + You have hands-on experience in assessing technology and compliance risks and controls in technology processes, cloud applications, cloud infrastructure. **Job Requirements:** + 8+years of experience in information technology, security, and internal control auditing in house and/or with a professional services firm. + Hands-on experience with reviewing and testing common IT & Engineering technologies including operating systems (OS), databases, network infrastructure, application security, Linux/Windows system security, mobile device security, cloud technologies and applications (IaaS, SaaS, PaaS environments, etc.). + Implemented and/or audited controls from at least two common industry and regulatory frameworks and standards (e.g., NIST, SOC I & II, ISO (27001, 27017, 27018), HIPAA, PCI-DSS, ISMAP, TISAX, IRAP, ITIL, etc.). + Strong leadership, communication, presentation and interpersonal skills to interact with technical and non-technical colleagues and management. + Experience formulating audit testing plans, steps, and procedures. + Strong audit documentation skills and attention to detail are a must. + You are a team-player with high EQ. + You are motivated, enthusiastic, efficient, and able to work independently to multitask and lead multiple workloads to timely completion. + Experience with multinational company’s operations and proficiency in a foreign language is a plus. + Unquestionable integrity and credibility. + Ability to work in a fast-paced and dynamic environment. **Education: Got it!** + Bachelor’s degree preferably in Technology, Engineering, Business or equivalent. + Professional certifications e.g. CISSP, CEH, CIPP, CISM, PMP, CISA are a plus. + Proven skill in Google Suite, ServiceNow, and Atlassian Tools (Jira, Confluence) + Proficient with Splunk products desired but not required. We value diversity at our company. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or any other applicable legally protected characteristics in the location in which the candidate is applying.
Por favor confirme su dirección de correo electrónico: Send Email