Security GRC Analyst

Overview:

At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer’s and partner’s needs and solve their challenges.

Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve.

 

You’ll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about—locally and globally.

Come make an impact every day at Zebra.

What We're Looking For:

Security GRC Analyst 

The Security GRC Analyst assists in evaluating, monitoring, and assessments of the design and operating effectiveness of security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems. The Security GRC Analyst reports to the Sr. Manager, Security GRC Risk Management and collaborates with the Senior Security GRC Analyst

Responsibilities:

• Assists the Senior Security GRC Analyst in the risk assessment lifecycle from planning to reporting of IT, cybersecurity, and product security consulting projects.
• Assists in the execution of compliance assessments, including the evaluation of the design, the completion of walkthroughs, and testing the effectiveness of cyber and IT controls.
• Innovates and builds a well-rounded business & IT acumen to assess emerging IT and security risk areas across Zebra’s global operations and assists in advising on leading-industry practices and process / program maturity.
• Together with the Senior Security GRC Analyst partners with the Internal Audit Analytics Advisor in the department’s development of leading-class continuous auditing techniques / data analytics and use of Artificial Intelligence (AI) in Zebra’s IT & security auditing.
• Monitors and reports on the status of management-owned action plans from previous assessments.
• Provides ongoing guidance to Intern(s) and guest auditor(s) during the course of project work.
• Communicates effectively with project team members and provides appropriate level of upward communication.
• Operates effectively in a teaming environment, including taking on additional tasks (as necessary) to assist in the workload of other team members.
• Evaluate application and network architecture to support business requirements, security best practices, policies, and standards.
• Implement and manage/support enterprise security solutions
• Manage technical relationships with security software vendors
• Provide consultation to business on how to implement solutions securely
• Create documentation and diagrams for internal and external audiences.
• Conduct risk assessments, analyzing data from various sources, and incorporating business needs to articulate risk.
• Analyze data and build informational security reports from different sources for a multi- tier audience (e.g., Executive, Management, and Technical).

Requirements:

• Bachelor's degree or equivalent experience.
• 2+ years of professional work experience in Cybersecurity, GRC , IT Audit , Regulatory Assurance
• Command over core IT & security processes (incl. relevant technologies)
• Strong verbal and written communication skills
• Experience managing competing priorities and managing to tight timelines.
• Strong creative and entrepreneurial spirit; Capable of critical thinking and solving problems.
• Works effectively in an agile and team-based setting, and engaging in diverse thought.
• Cultivates and maintains cordial relationships with stakeholders while maintaining professional skepticism and objectivity.

Preferred:

• Knowledge of Global Internal Audit Standards
• Working knowledge of IT frameworks such as COBIT, ISO, and NIST
• Working knowledge of NIST Cyber Security Framework (CSF)
• Active participation in the security community, through online resources and in-person conferences
• Relevant security certifications (e.g. CRISC, CISM, CISSP, CISA).

Benefits:

Incentive Compensation:

In addition to base pay, Zebra offers this role the opportunity to earn a performance-based annual cash incentive, at a target equal to 5% of base pay, in accordance with the terms of the applicable incentive plan.

Job Posting Statement:

To protect candidates from falling victim to online fraudulent activity involving fake job postings and employment offers, please be aware our recruiters will always connect with you via @zebra.com email accounts. Applications are only accepted through our applicant tracking system and only accept personal identifying information through that system. Our Talent Acquisition team will not ask for you to provide personal identifying information via e-mail or outside of the system. If you are a victim of identity theft contact your local police department.

AI Technology Statement:

Zebra Technologies leverages AI technology to evaluate job applications using objective, job-relevant criteria. This approach enhances efficiency and promotes fairness in the hiring process. However, every decision regarding interviews and hiring is made by our dedicated team, because we believe people make the best decisions about people. For more on how we use technology in hiring and how we process applicant data, see our Zebra Privacy Policy.