Information Security Analyst - Business Security and Compliance

How will you CONTRIBUTE and GROW?

We are committed to building a diverse and inclusive workplace that embraces the unique perspectives of our employees, our customers, patients, community stakeholders, and cultures across the world. We believe that a variety of backgrounds makes our team stronger and more innovative.

The Security Analyst supports the Information Security Officer to uphold Governance, Risk Management, and Compliance standards across Digital & IT environments. Security analysts are essential in maintaining the cybersecurity integrity of the company's IT and OT systems, as well as its sensitive data by facilitating alignment of Digital & IT operations to established Global security governance.

This role integrates into a global cybersecurity organization characterized by a rich diversity of cultures, local and global operational requirements, and complex technological landscapes.

Job Responsibilities:

• Support alignment with the Global Cybersecurity Framework.

• Guide and facilitate adherence to policies, procedures, and guidelines.

• Define risk, remediation plans, and compensating controls to mitigate risk through the use of Deviation Action Treatment Plans (DTAPs).

• Conduct Security Risk Assessments using Group Tools and Processes.

• Review cybersecurity risks in partnership with Vendors, Suppliers, Contractors, and other Third Parties.

• Coordinate the process of critical digital asset compliance, including stakeholder communications, reporting, evidence review, and maintaining compliance progress.

• Identify privacy and regulatory requirements, including AI evaluations.

• Assess compliance with the Global Cybersecurity Framework throughout the data and application lifecycle (CDAs, Global ERP systems).

• Assist in cyber crisis management response and cyber crisis simulations.

• Coordinate cybersecurity incident response with identified stakeholders to protect organizational continuity and minimize impact.

• Support Digital and IT Audits by providing collaborative responses and evidence related to cybersecurity controls.

• Facilitate rules of engagement, scope of work assessments, and logistics for penetration testing engagements, while guiding Penetration Testing Efforts (IT & OT).

• Serve as a trusted Cybersecurity advisor within the organisation.

___________________

Are you a MATCH?

Core Qualifications:

• Bachelor’s degree or equivalent practical experience.

• 4+ years of experience in Cyber Security, risk management, and/or compliance.

• Recognized certifications in information security, such as CISSP, CISM, or CGRC.

• English language proficiency (C1 level).

Preferred Skills:

• Knowledge of security control frameworks and standards such as SOC2, ISO 27001, NIST, etc.

• Experience securing cloud-based environments.

• Experience with regulatory requirements.

Our Differences make our Performance

At Air Liquide, we are committed to build a diverse and inclusive workplace that embraces the diversity of our employees, our customers, patients, community stakeholders and cultures across the world.

We welcome and consider applications from all qualified applicants, regardless of their background. We strongly believe a diverse organization opens up opportunities for people to express their talent, both individually and collectively and it helps foster our ability to innovate by living our fundamentals, acting for our success and creating an engaging environment in a changing world.