Information Security Analyst to help protect organization's systems, data, and digital assets, focusing on risk management and regulatory compliance like SOC 2.
Responsibilities
Monitor, analyze, and respond to cybersecurity incidents, alerts, and vulnerabilities
Conduct security risk assessments and identify potential threats across systems, networks, and applications
Support and maintain compliance with security frameworks such as SOC 2, ISO 27001, NIST, CIS Controls, and GDPR where applicable
Perform vulnerability assessments and coordinate remediation efforts with technical teams
Review security logs, investigate suspicious activity, and participate in incident response processes
Lead the Compliance and Assurance team responsible for planning, executing, and maintaining Blue Yonder’s portfolio of information security and IT compliance certifications and attestations.
Locations (2)
Dallas, Texas, United States
Scottsdale, Arizona, United States
Compensation
The base annual salary range for this position is $142,152 - $175,000.
Responsibilities
Lead, develop, and mentor a team of compliance professionals delivering certifications and attestations
Set direction and drive priorities to meet compliance needs for new products, contractual obligations, and changing security regulations
Own the end-to-end compliance and audit lifecycle across products and internal systems
Manage external auditors as the primary point of accountability
Partner with Engineering, Product, Legal, Internal Audit, and other Security teams to maintain control operation and support recurring compliance activities
Lead the security strategy protecting our business and our brands, acting as the Chief Information Security Officer (CISO) and reporting to the CIO.
Compensation
Competitive salary
Bonus
Car allowance
Company pension
Family Private medical
Holiday purchase scheme
Sharesave scheme
EV car scheme
Paid volunteering day
Access to our employee benefits platform
Responsibilities
Defining and delivering a multi-year Information Security strategy and roadmap aligned to business ambitions and risk appetite
Acting as the senior advisor to the CIO and executive leadership on cyber security, information risk and emerging threats
Leading, mentoring and developing the Information Security team across security operations, governance, risk, compliance and security assurance
Driving the continued development of the security framework, aligned to the NIST Cybersecurity Framework
Shaping the approach to OT security across Industrial Control Systems (ICS), SCADA and IoT
The end-to-end system cybersecurity architect for the IRIS² programme is responsible for developing and maintaining the system and networks cyber security architecture, ensuring that it complies with our Customer’s requirements, regulatory requirements, international security standards including ISO, NIST and industry best practices.
Responsibilities
Design and maintain a comprehensive cyber security architecture framework
Review and contribute to the definition of the security documentation, such as plans, requirements, design, validation and reports
Collaborate with the segments and industrials security teams to match the security requirements with the end-to-end system architecture
Implement security requirements and standards for systems, networks and applications
Contribute on the overall risk assessments and vulnerability assessment process to identify potential security weaknesses
Requirements
Bachelor's or master’s degree in computer science, Information Security, or a related field
Lead enterprise cybersecurity programs, oversee IT risk and regulatory compliance, and collaborate with executives, clinical leadership, compliance professionals, and technology teams.
Responsibilities
Develop and execute a multiyear cybersecurity strategy and improvement roadmap
The Data Protection Specialist works with various internal and external groups to ensure that AbbVie information security policies, practices, and procedures are properly implemented within AbbVie, supporting the Data Protection Office in strengthening company data security controls and maturing operational processes.
Responsibilities
Establish and maintain strong relationships with IT and Business group leaders to understand goals, programs, and plans
Evaluate and articulate program security requirements; identify potential security risk factors and business impact
Conduct assessments of controls to ensure data protection controls are in place
Leverage AI to analyze volumes of data across File Labeling, Application logs, and infrastructure datasets to automate control assurance
Engage AbbVie Third Party Vendors to assess security posture, remediation requirements, and compensating controls as they apply to Business Applications
Requirements
Bachelor’s Degree with 5 years of experience
Master's Degree with 4 years of experience in Information Security, Data Privacy, or IT Compliance experience
The Data Protection Specialist works with various internal and external groups to ensure that AbbVie information security policies, practices, and procedures are properly implemented within AbbVie, supporting the Data Protection Office in strengthening company data security controls and maturing operational processes.
Responsibilities
Establish and maintain strong relationships with IT and Business group leaders to understand goals, programs, and plans
Evaluate and articulate program security requirements; identify potential security risk factors and business impact
Conduct assessments of controls to ensure data protection controls are in place
Leverage AI to analyze volumes of data across File Labeling, Application logs, and infrastructure datasets to automate control assurance
Engage AbbVie Third Party Vendors to assess security posture, remediation requirements, and compensating controls as they apply to Business Applications
The Data Protection Specialist works with various internal and external groups to ensure that AbbVie information security policies, practices, and procedures are properly implemented within AbbVie, supporting the Data Protection Office in strengthening company data security controls and maturing operational processes.
Responsibilities
Establish and maintain strong relationships with IT and Business group leaders to understand goals, programs, and plans
Evaluate and articulate program security requirements; identify potential security risk factors and business impact
Conduct assessments of controls to ensure data protection controls are in place
Leverage AI to analyze volumes of data across File Labeling, Application logs, and infrastructure datasets to automate control assurance
Engage AbbVie Third Party Vendors to assess security posture, remediation requirements, and compensating controls as they apply to Business Applications
Requirements
Bachelor’s Degree with 5 years of experience
Master's Degree with 4 years of experience in Information Security, Data Privacy, or IT Compliance experience
Nice to have: Certified Information Security Manager (CISM)
Nice to have: Certified Information Privacy Technologist (CIPT)
The Data Protection Specialist works with various internal and external groups to ensure that AbbVie information security policies, practices, and procedures are properly implemented within AbbVie.
Responsibilities
Establish and maintain strong relationships with IT and Business group leaders to understand goals, programs, and plans.
Evaluate and articulate program security requirements; identify potential security risk factors and business impact.
Conduct assessments of controls to ensure data protection controls are in place.
Leverage AI to analyze volumes of data across File Labeling, Application logs, and infrastructure datasets to automate control assurance.
Engage AbbVie Third Party Vendors to assess security posture, remediation requirements, and compensating controls as they apply to Business Applications.
Requirements
Bachelor’s Degree
Master’s Degree
Nice to have: Certified Information Security Manager (CISM)
Nice to have: Certified Information Privacy Technologist (CIPT)
The Data Protection Specialist works with various internal and external groups to ensure that AbbVie information security policies, practices, and procedures are properly implemented within AbbVie.
Responsibilities
Establish and maintain strong relationships with IT and Business group leaders to understand goals, programs, and plans.
Evaluate and articulate program security requirements; identify potential security risk factors and business impact.
Conduct assessments of controls to ensure data protection controls are in place.
Leverage AI to analyze volumes of data across File Labeling, Application logs, and infrastructure datasets to automate control assurance.
Engage AbbVie Third Party Vendors to assess security posture, remediation requirements, and compensating controls as they apply to Business Applications.
Requirements
Bachelor’s Degree
Master's Degree
Nice to have: Certified Information Security Manager (CISM)
Nice to have: Certified Information Privacy Technologist (CIPT)