IT Governance Risk and Compliance Security Analyst

As an IT Governance Risk and Compliance Security Analyst, you will be critical in advancing Western Digital s information security Governance, Risk Management, and Compliance (GRC) program.

You will assist in development, enhancement, and implementation of enterprise-wide (comprehensive) information security risk management frameworks, policies, and procedures aligned with industry standards, regulatory requirements, and organizational objectives. You will manage and assess information security risks, develop robust risk management strategies, and generate insightful reports and metrics. You will collaborate with cross-functional teams, providing expert guidance and analysis to enhance our information security posture and ensure compliance with industry standards and regulations.

Key Responsibilities

• Assist in Implementation of enterprise-wide risk management frameworks that aligns with industry standards (e. g. ISO27001, NIST, etc).
• Perform technical and business process risk assessment activities to identify, evaluate, and prioritize information security risks across the organization, including threats, vulnerabilities, and potential impacts to information and technology assets.
• Develop and drive implementation of effective risk management strategies to mitigate identified risks, ensuring alignment with industry best practices and regulatory requirements.
• Collaborate across the organization to ensure the integration of risk management practices into organizational processes and projects.
• Generate reports and metrics to communicate the status of information security risks to stakeholders and leadership.
• Analyze security data to identify trends, vulnerabilities, and areas for improvement.
• Collaborate with internal and external auditors to facilitate security audits and assessments.
• Stay current with industry trends, emerging threats, and best practices for information security and risk management.
• Provide expert guidance and support in developing and maintaining information security policies, standards, and procedures.