Information Security Analyst

Job Description: GT Role -



We re looking for a Information Risk Management Analyst. This role on the Information Risk Management team will deliver aProductst an information security/cybersecurity assessment plan that is integrated into a broader risk management program supported by executive management. Our ideal candidate has superb communication skills, as well as analytical and problem-solving skills.

what will you work on



This role will be working with the Information Risk Management team and performing these key tasks:



Identify, document and elevate visibility to information risk, where business direction creates potential for exposure to employee, athlete and product sensitive data streams.

Perform detailed analysis of threats and vulnerabilities in all areas of information security including network security, asset security, security engineering, identity and access management, security operations and software development security. This also includes reviewing key system configurations and complex IT infrastructures (e.g. cloud services).

Evaluate vendor processes at the point of engagement with *** and ensure sufficient validation of data sharing arrangements and agreements protect *** s sensitive information.

Perform formal risk assessments on partner and vendor connections and ensure the business objectives align with the type and volume of data used in maintaining a need to know/use mindset.

Become an advocate of *** Information security procedures, policies, and processes, and standards as a mechanism to enable the business effectively while managing risk appropriately.

Provide enforcement of security policies, standards and procedures by working cross functionally with Compliance and Governance functions within the Corporate Information Security organization.

Know the latest information security technologies, trends, standards, and methodologies.



who will you work with



This role reports to the Director of Information Risk Management within Corporate Information Security (CIS). You will need to create strong partnerships with *** business owners, CIS, and various governance and legal functions (e.g. Audit or Privacy).

what you bring to ***

Bachelor's degree in Business Information Management, Computer Science or related field, OR relevant experience in lieu of a degree

Knowledge of information security principles and practices, best practice security architectures, general procedures and guidelines.

A general understanding of technology use, trends and risks as it applies in a business context and environment.

Superb communication skills (written and verbal) with comfort and experience in presentation delivery, and proven persuasion skills

Experience identifying solutions for complex problems in enterprise environments, and proven analytical and problem solving ability

The ability to appropriately communicate complex security risks to non-technical staff

Must be trustworthy in keeping sensitive data confidential

Comments for Suppliers: Can be remote and schedule can be flexible but do need to be available from 9a-3pPST. When you start or end would be decided within team.



Main focus 3rd party cyber risk management - working with vendors

Jira, Confluence, Microsoft Office - required



Strong communication skills - will be working with multiple teams across ***, multi-stakeholders

Desire to learn and be adaptable - Team understands you will not know everything but open to learning



Team has seen success with people who have worked in Military IT security, Banking, Healthcare and any retail security teams



Nice to have: This person may team with another member on the team to take a deeper dive into the supply chain branch. Experience with Manufacturing, Distribution, transportation a plus but not needed. Company examples: Amazon, FedEx, UPS, etc.



Manager hopes to review resumes through holiday season, set up interviews when team is available.