RESPONSIBILITIES:

The candidate will support the strengthening of Oracle's security posture, focusing on areas such as regulatory compliance, risk management, incident management and response, and Threat and Vulnerability Management.
This role requires an experienced professional with 8+ years in information systems and 3+ years in security operations, capable of operating independently and leading security projects.
Key functions include managing compliance programs to industry and government standards, conducting complex information security risk assessments, and overseeing internal audit processes.
The position also involves developing, implementing, and maintaining robust security policies and providing guidance on process improvements to remediate control gaps.

Regulatory Compliance: Manage programs to establish, document, and track compliance to standards and regulations like ISO-27001, PCI-DSS, HIPAA, FedRAMP, CMMC, GDPR, etc. Researches and interprets current and pending governmental laws and regulations.
Risk Management: Conduct and document very complex information security risk assessments and lead departmental risk management programs.
Audit and Liaison: Oversee and manage internal audit processes, acting as the primary liaison between internal teams to ensure efficient and accurate audit completion. Assess the effectiveness of security controls.
Security Posture & Policy: Continuously assess and enhance the organization's security posture. Collaborate with cross-functional teams to establish and maintain robust security policies and procedures.
Threat and Vulnerability Management: Research, evaluate, track, and manage information security threats and vulnerabilities.
Incident Management and Response: Respond to security events and mitigate vulnerabilities in line with incident response playbooks. Facilitate and drive disaster recovery (DR) planning.
Documentation and Reporting: Develop and maintain cybersecurity documentation (e.g., SSP, PIA, CMP, POAM, SOP). Write stakeholder reports, create metrics, and brief executive leadership on compliance matters.
Mentorship: Mentors and trains other team members

Principal Security Analyst