Rockwell Automation is a global technology leader focused on helping the world s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that s you we would love to have you join us!

Responsibilities

Contribute to a virtual global team in a large matrixed organisation.
Experience developing risk-related policy, programmes, and guidelines for implementation.
Work across departments and departments to implement organisations risk identification and treatment principles and programmes to achieve security goals.
Relate strategy, business, and technology in the context of organisational dynamics.
Manage the addition of risks to the risk register, and monitor with risk owners the risk treatment on the prescribed timeline.
Review authorization and assurance documents to confirm that the level of risk is within acceptable limits for each software application, system, and network.
Ensure acceptable limits for the software application, network, or system and identify those outside of risk appetite.
Identify critical infrastructure systems with information communication technology that were designed without system security considerations.
Perform cyber risk assessments on processes, locations and applications.
Coach and provide other advice to cyber risk analysts on the team.

Basic Qualifications Bachelors Degree, or equivalent experience

Minimum 3-4 years of experience within Information Security, in a regulated business, with an ability to manage conflict, provide leadership, organize, and make decisions.

CRISC, CERA certification or similar
Use best practices and lessons learned of external organisations and academic institutions dealing with cyber issues.
Knowledge of applicable laws, statutes (e.g., in Titles 10, 18, 32, 50 in U.S. Code), Presidential Directives, executive branch guidelines, or administrative/criminal legal guidelines and procedures.
Legal, Government or Jurisprudence
Knowledge of our primary business/mission processes.
Develop policy, plans, and strategy in compliance with laws, regulations and standards to support organisational cyber activities.
Knowledge of strategic theory and practice.
Knowledge of latest technologies that have potential for exploitation.
Knowledge of current and latest cyber technologies.
Experience with OneTrust application.

SR Cyber Technical Risk Analyst