Job Description

Description

Position at Wind River

ABOUT WIND RIVER

Wind River is a global leader in delivering software for mission-critical intelligent systems. For more than four decades, the company has been an innovator and pioneer, powering billions of systems that require the highest levels of security, safety, and reliability.

Wind River helps customers across automotive, aerospace, defense, industrial, medical, and telecommunications industries solve complex technology challenges on their journey toward the new intelligent machine economy. The company’s software powers generation after generation of the safest, most secure systems in the world.  Examples include playing a key role in NASA space missions such as Artemis I, the James Webb Space Telescope, and multiple Mars rovers. We’ve achieved recent 5G milestones including the world’s first successful 5G data session with Verizon and  building one of the largest Open RAN networks in the world with Vodafone.

The company has received industry recognition for its technology innovation and leadership, and for its workplace culture, including global Great Place to Work certification and being named a “Top Workplace” for ten consecutive years. If you want to be part of a unique culture where the lived experience is based on our cultural attributes of growth mindset, customer-focus, and diversity, equity, inclusion & belonging, come join us and help advance the future software defined world.

ABOUT THE OPPORTUNITY

The Wind River Information Security team supports the business's objectives by implementing state-of-the-art cybersecurity technologies and practices so that we are well prepared to protect our company and customer data from cyberattacks and other unplanned disruptions.

The Governance, Risk, and Compliance - GRC Analyst is responsible for the assessing and documenting of the Wind River’s compliance, across multiple areas, and risk posture as they relate to its information assets. The purpose of this position is to provide skilled technical and information security expertise for development and implementation of the information security risk management program. Responsibilities require leadership and project management experience, as well as expertise to ensure effective system-wide security analysis; intrusion detection; standards and testing; risk assessment; awareness and education; and development of policies, standards and guidelines.This person will be responsible for program management of our ISO 27001 Certification Program.

The Chief Information Security Officer (CISO), and IT and Engineering senior management to implement an ongoing technology roadmap to support cyber operations and integrate new technologies into the overall architecture. With global responsibilities, you will work and collaborate with client groups across the company to enhance Wind River’s cyber security and risk posture.

PRIMARY RESPONSIBILITIES

• Participate in the development and implementation of the system-wide risk management function of the information security program to ensure risks are identified and monitored.
• Internally assess, evaluate, and make recommendations to management regarding the adequacy of the security controls for Wind River risk and compliance requirements.
• Help drive the enterprise cyber security compliance program, ensuring activities, processes, and procedures meet defined requirements, policies, and regulations.
• Develop and implement effective and reasonable policies and practices to secure protected and sensitive data and ensure information security and compliance with relevant legislation and legal interpretation.
• Execute strategy for dealing with increasing number of audits, compliance checks and external assessment processes for internal/external auditors
• Work with Internal Audit, and outside consultants as appropriate on required security assessments and audits
• Coordinate and track all information technology and security related audits including scope of audits, groups and functions involved, timelines, auditing agencies and outcomes. Work with auditors as appropriate to keep audit focus in scope, maintain excellent relationships with audit entities and provide a consistent perspective that continually puts the company in its best light. Provide guidance, evaluation and advocacy on audit responses.
• Track and publish cyber security metrics. 
• Own problems from discovery to resolution 
• Deliver exceptional service by understanding business drivers and needs. 

QUALIFICATIONS

• Bachelor’s degree in computer science, Information Security, Information Systems, Engineering or related field 
• Five (5), or more, years overall IT and Cyber Security experience with at least two (2) years dedicated cyber/information security experience.
• Understanding of common security standards, regulations, and controls relating to a high-tech environment (e.g., ISO-27001, NIST 800-171 and/or CSF, TISAX, etc.). Direct experience is ISO 27001 certification programs required.
• Knowledge of information security risk management frameworks and compliance practices.  Experience with one or more GRC solutions a plus.
•  Experience performing information security audits or risk assessments.
• Experience responding to, analyzing, and communicating information security incidents.
• Information security related training or certifications such as CISSP or CRISC a plus 
• Self-motivated and proactive in identifying areas of improvement. 
• Experience at working both independently and in a team-oriented, collaborative environment is essential. 
• Able to be flexible with regards to shifting priorities, demands and timelines through analytical and problem-solving capabilities 
• Must be able to satisfy ITAR compliance requirements (i.e., US person).

BENEFITS

• Flexible home office! We offer the flexibility of a hybrid work schedule
• Named Top Workplace for the 8th year in a row
• Wind River’s commitment to DEIB
• 100% Employee covered Medical, Dental, and Vision insurance*
• Flexible Time Off policy* + 12 observed Holidays
• 401K with company match *
• Health Savings Account (HSA) and Flexible Spending Account (FSA) *
• Wellness Benefits through Unmind

Compensation

The annual base salary range for this role’s listed grade level is currently $100,300 to $115,360 plus a bonus for Colorado, New York, and New Jersey residents, and $127,000 to $146,350 plus a bonus for SF Bay Area, Greater Seattle, NYC, and Washington, DC, residents. Salary ranges are determined through interviews and a review of the education, experience, knowledge, skills, location, and abilities of the applicant, and equity with other team members. Employees in this role are also eligible for the following benefits in accordance with the terms of the Company's plans: health, dental, vision insurance, life insurance, flex time off, eligibility to enroll in 401k, and 12 paid holidays.

#LI-AL1

Job Tags

Similar Jobs