I
Sr. Analyst, IT Security Compliance
Job Description
As a key member of the Security Compliance team, reporting to the Team Lead Security Compliance, you will:
- Execute day-to-day cybersecurity risk, compliance, and assurance activities.
- Support global cybersecurity certifications including ISO 27001 and ISO 27017 , evaluating control effectiveness and reviewing evidence of controls.
- Assist in achieving ISO 27001 certification by identifying risks and implementing controls.
- Maintain and continuously improve 3M s Information Security Management System (ISMS) .
- Create, update, and manage ISMS documentation, reports, and audit records.
- Act as Subject Matter Expert (SME) for PCI DSS , advising stakeholders, conducting internal assessments, and driving PCI DSS v4.0.1 reviews, gap assessments, and control evaluations.
- Provide high-level knowledge support on other frameworks and standards including SOC 2, COBIT, NIST, SWIFT, and GDPR .
- Deliver timely written reports, metrics, and updates to cybersecurity management.
- Collaborate and communicate effectively across teams and with stakeholders.
More Info
Key Skills
About Company
3M touches virtually every part of your life. Our people and technology make the impossible, possible. Every day we apply our science to enhance people’s lives. This is 3M Science. Applied to Life.™
Skills:
Risk Assessment, Primavera P6, MS Project, Cost management systems, Scheduling and critical path analysis, Data-driven reporting and analytics, Project Controls, Excel-based cost models, Project risk analysis and mitigation planning, Cost estimation and variance analysis
Skills:
Power Bi, Networking, Cybersecurity, Identity Management, Security Controls, Iso 27001, Compliance, Documentation Management, NIST CSF, Vendor Risk Management, Risk assessment methodologies, CIS Controls, GRC platforms, IT risk governance, Dashboard and reporting tools, Security questionnaires, SOC reports, Microsoft Office Suite