Senior GRC Specialist

Requisition Number: 169066

Position Title: Security Analyst

External Description:

The Senior IT Governance, Risk and Compliance (GRC) Specialist is responsible for day to day activities across the wide scope of EA’s Security Governance, Risk and Compliance programs.

The Senior GRC Specialist will work and report to the GRC Security Operations Manager to assist with the Third-Party Security Risk Assessment program. The job encompasses leading and participating in the assessment of security, risks, and control effectiveness for applications, infrastructure, and technology projects. The qualified candidate will be expected to independently lead and complete high-quality assessments across a diverse set of technologies, by documenting assessment results, recommending corrective action, tracking remediation, evaluating policy and control standard exceptions, and regularly report to management.

The successful candidate will possess advanced knowledge of various multi-platform operating systems and databases. As a senior member of the team, this position will also be expected to proactively drive process improvements, overcome barriers to success, build professional relationships across EA Security pillars, brief senior leaders, and mentor others.

 

Key responsibilities

• Review and assess technical security controls for third party vendors primarily around logical network architecture.
• Advise on, develop, and implement processes around risk identification, assessment, and remediation, including issues management, exception management, vendor risk management policy management, and security incident and vulnerability response.
• Serves as a GRC subject matter expert for information risk, network security and system security by supporting complex analysis and leading risk management capability improvement.
• Manages EA’s policy exceptions, identifies rationale and risks underlying exception requests, weighs effectiveness of compensating controls, and makes recommendations around exception requests.
• Coordinate and participate in the creation and maintenance of IT policies and network security standards, i.e. network perimeter security standards, remote access, etc.
• Participates as a subject matter expert on governance and project management teams to ensure risk and compliance are integrated to all projects and initiatives.
• Coordinate the ITGC design for the in scope applications – SOX IT.

 

Experience and skills:

• This role requires a wide variety of strengths and capabilities, including:
• Bachelor’s degree or equivalent experience.
• Five (5) years' progressive experience in information technology is required.
• Strong foundational knowledge in information technology such as hardware, networking, architecture, protocols, files systems and operating systems. Proven ability application and/or database development. Proven ability in system administration. In-depth knowledge of network security architectures (internal / external), firewall technologies, and knowledge of TCP/IP protocol suite (includes secure protocols).
• Familiarity with IT control policies, security standards and security configuration settings for platforms and network infrastructure.
• Demonstrated work experience in one or more of the following areas: Information Security, IT Governance, Compliance Management, IT Auditing, Internal Auditing, Security Analysis, Security Project Management, Security Architecture, and implementing best practices, tools, and technology.
• Ability to work in a team as a contributor to improving security controls on network and platform infrastructure.
• Exceptional verbal and written communication skills (English).
• Experience with High Priority, High Activity and Multi tasked Environments

 

Bonus points:

• Professional certifications in security, privacy risk management and audit areas are highly desirable, such as: CISSP, CRISC, CISM, CISA, CIPP, CIPT, CPA, CAP;
• Passionate about security.
• Experience with NIST Cybersecurity Framework
• Experience with ISO 27001

City:

State:

Community / Marketing Title: Senior GRC Specialist

Company Profile:

Electronic Arts Inc. ist ein weltweit führender Anbieter interaktiver Unterhaltungssoftware. EA bietet Spiele, Inhalte und Online-Dienste für internetfähige Spielkonsolen, Personalcomputer, Mobiltelefone und Tablets an.

EEOText:

About Electronic Arts

Everything we do is designed to inspire the world to play. Through our cutting-edge games, innovative services, and powerful technologies, we bring worlds with infinite possibilities to millions of players and fans around the globe.

We’re looking for collaborative and inclusive people with diverse perspectives who will enrich our culture and challenge us. We take a holistic approach with our benefits program, focusing on physical, emotional, financial, career, and community wellness to support our people through every chapter of life. We provide comprehensive benefit packages and support for a balanced life with paid time off and new parent leave, plus free games and so much more. Our goal is to provide a safe and respectful workplace that empowers you to thrive in both work and life.

Electronic Arts is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law. We will also consider employment qualified applicants with criminal records in accordance with applicable law. EA also makes workplace accommodations for qualified individuals with disabilities as required by applicable law.

Days Open: 52

Can this position be remote?: 0

EEO Employer Verbiage:

EA engagiert sich für Chancengleichheit und Gleichstellung. Alle Personalentscheidungen werden unabhängig von Ethnie, Hautfarbe, Herkunft, Abstammung, Geschlecht, Geschlechtsidentität oder ausgelebtem Geschlecht, sexueller Orientierung, Alter, genetischer Information, Religion, Behinderung, Krankheit, Schwangerschaft, Familienstand oder Veteranenstatus getroffen. EA sorgt außerdem für die durch geltendes Gesetz vorgeschriebenen Anpassungen am Arbeitsplatz für Individuen mit anerkannten Behinderungen.