SAP SAP NS2 Information Security Compliance Specialist - Virtual 

United States, Virginia 

724568296

All internals must have manager’s approval to transfer.

As an Information Security Compliance Specialist you will support the Security Compliance team in advising the implementation of policies, procedures, and standards to govern the protection of corporate infrastructure and applications.

Key responsibilities:

• Document policies, procedures, and guidelines in accordance with regulatory and business requirements.
• Support security and compliance assessments, and collaborate with stakeholders to close identified gaps.
• Maintain awareness of evolving compliance standards based on industry and geographic jurisdiction.

Key tasks:

• Perform security and compliance assessments on new and existing infrastructure and applications to ensure adherence and effective controls are in place.
• Implement existing and new compliance requirements.
• Collaborate with stakeholders to ensure corrective actions are in place; document lessons learned.
• Provide support in due-diligence and third party risk assessment efforts.
• Ensure adherence of risk policies with SAP NS2 standards.
• Provide reports on analysis and corrective actions in the event of security incidents and alerts.
• Support internal and external audit processes, as needed.
• Perform business impact analysis and develop/maintain risk register.
• Collaborate with leadership to develop risk metrics and dashboard; generate periodic reports as defined by the metrics and as needed by management.
• Assist business and IT partners with risk vulnerability remediation activities.
• Stay abreast on emerging regulatory updates, technological trends, and changing threat landscape to inform new policies and standards.

Experience and Education Requirements:

• Bachelor’s degree or relevant professional experience
• 2-5 years of experience working in risk management and compliance functions
• Familiarity with Risk Management solutions and processes
• Familiarity with security laws, strategies, processes, standards, and services
• Security Certifications like CISSP, CISA, CISM, GCFA, GCIH, GCIA, GNFA, GREM, GCCC, or Security+ are an asset

We win with inclusion

Washington DC