Sr. Analyst, IT Security Compliance

As a key member of the Security Compliance team, reporting to the Team Lead Security Compliance, you will:

• Execute day-to-day cybersecurity risk, compliance, and assurance activities.
• Support global cybersecurity certifications including ISO 27001 and ISO 27017 , evaluating control effectiveness and reviewing evidence of controls.
• Assist in achieving ISO 27001 certification by identifying risks and implementing controls.
• Maintain and continuously improve 3M s Information Security Management System (ISMS) .
• Create, update, and manage ISMS documentation, reports, and audit records.
• Act as Subject Matter Expert (SME) for PCI DSS , advising stakeholders, conducting internal assessments, and driving PCI DSS v4.0.1 reviews, gap assessments, and control evaluations.
• Provide high-level knowledge support on other frameworks and standards including SOC 2, COBIT, NIST, SWIFT, and GDPR .
• Deliver timely written reports, metrics, and updates to cybersecurity management.
• Collaborate and communicate effectively across teams and with stakeholders.