GRC Specialist

Requisition Number: 167255

Position Title: Security Operations Specialist

External Description:

Governance, Risk and Compliance (GRC) Specialist

We are EA

And we make games – how cool is that? In fact, we entertain millions of people across the globe with the most amazing and immersive interactive software in the industry. But making games is hard work. That's why we employ the most creative, passionate people in the industry.

Technology Group:

• We fuel the engine that enables us to make outstanding games
• We power the services and platforms that inspire the world to play
• We secure our information and services that support fair play and customer trust
• We develop technology services that accelerate productivity and improve capabilities across the business

Responsibilities:

• The Governance, Risk, and Compliance (GRC) Specialist is responsible for day-to-day activities across the wide scope of EA's Security Governance, Risk, and Compliance programs.
• The GRC Specialist will work and report to the GRC Security Operations Manager to assist with the Third-Party Security Risk Assessment program. The job encompasses participating in the assessment of security, risks, and control effectiveness for applications, infrastructure, and technology projects. You will independently lead and complete high-quality assessments across a diverse set of technologies, by documenting assessment results, recommending corrective action, tracking remediation, evaluating policy and control standard exceptions, and regularly report to management.
• The successful candidate will have knowledge of various multi-platform operating systems and databases. As a member of the team, you will also be expected to proactively drive process improvements, overcome barriers to success, build professional relationships across EA Security pillars, brief senior leaders, and help others.

Key Responsibilities:

• Review and assess technical security controls for third-party vendors primarily around logical network architecture.
• Advise on, develop, and implement processes around risk identification, assessment, and remediation, including issues management, exception management, vendor risk management policy management, and security incident and vulnerability response.
• Be a GRC expert for information risk, network security, and system security by supporting complex analysis and leading risk management capability improvement.
• Monitor EA's policy exceptions, identify rationale and risks underlying exception requests, weigh the effectiveness of compensating controls, and makes recommendations around exception requests.
• Coordinate and help create and maintain IT policies and network security standards, i.e. network perimeter security standards, remote access, etc.
• Participate as an expert on governance and project management teams to ensure risk and compliance are integrated to all projects.
• Coordinate the ITGC design for the in scope applications – SOX IT

Qualifications:

• We ask that you have a wide variety of strengths and capabilities, including:
• Bachelor's degree or equivalent experience.
• Three (3) years of progressive experience in information technology is required.
• Knowledge in information technology such as hardware, networking, architecture, protocols, files systems and operating systems.
• Familiarity with IT control policies, security standards and security configuration settings for platforms and network infrastructure.
• Demonstrated work experience in one or more of the following areas: Information Security, IT Governance, Compliance Management, IT Auditing, Internal Auditing, Security Analysis, Security Project Management, Security Architecture, and implementing best practices, tools, and technology.
• Ability to work in a team as a contributor to improving security controls on network and platform infrastructure.
• Exceptional verbal and written communication skills (English).
• Experience with High Priority, High Activity, and Multi tasked Environments

Bonus points:

• Professional certifications in security, privacy risk management, and audit areas are highly desirable, such as CISSP, CRISC, CISM, CISA, CIPP, CIPT, CPA, CAP;
• Passionate about security.
• Experience with NIST Cybersecurity Framework
• Experience with ISO 27001

City:

State:

Community / Marketing Title: GRC Specialist

Company Profile:

Electronic Arts Inc. este o companie de divertisment interactiv, lider la nivel mondial. EA oferă jocuri, conținut și servicii online pentru console conectate la Internet, calculatoare personale, telefoane mobile și tablete.

EEOText: Despre EA Electronic Arts există pentru a inspira lumea să joace. Creăm noi experiențe extraordinare de joc pentru milioanele noastre de jucători de pretutindeni, reunind oameni talentați care combină creativitatea, inovația și pasiunea. Știm că puterea noastră constă în diversitatea oamenilor noștri. Ne integrăm angajații într-o cultură incluzivă și le oferim oportunități pentru învățare și conducere, care le permit să întreprindă cele mai remarcabile și pline de satisfacție activități ale carierei lor. Angajații noștri sunt în prim-plan. Oferim pachete de beneficii cuprinzătoare, cu accent pe sănătate și bunăstare, pentru a vă susține necesitățile și pentru a vă ajuta să găsiți un echilibru între carieră și viața personală. Oferim acces la medii de lucru dinamice și cooperante, posibilități de conectare și de a vă aduce aportul prin intermediul grupurilor noastre de resurse pentru angajați, precum și sprijin pentru o viață echilibrată, cu zile libere și concediu de maternitate și de paternitate plătite, plus jocuri video gratuite și multe altele! Electronic Arts este un angajator care aplică principiul egalității de șanse. Toate deciziile de angajare sunt luate fără a ține seama de rasă, culoare, origine națională, descendență, sex, identitate sau exprimare de gen, orientare sexuală, vârstă, informații genetice, religie, dizabilități, stare medicală, sarcină, stare civilă, statut familial, statut de veteran sau orice altă caracteristică protejată de lege. De asemenea, Electronic Arts oferă locuri de muncă pentru persoanele calificate cu dizabilități, conform legislației aplicabile.

Days Open: 66

Can this position be remote?: 0

EEO Employer Verbiage:

EA este un angajator care oferă oportunități egale. Toate deciziile de angajare sunt luate fără a ține seama de rasă, culoare, origine națională, descendență, sex, identitate sau exprimare de gen, orientare sexuală, vârstă, informații genetice, religie, dizabilități, stare medicală, sarcină, stare civilă, statut familial sau statut de veteran. De asemenea, EA oferă locuri de muncă pentru persoanele cu handicap calificate, conform legislației aplicabile.