information security analyst
Nike
Shanghai, Shanghai, China
2天前

Become a Part of the NIKE, Inc. Team

NIKE, Inc. does more than outfit the world’s best athletes. It is a place to explore potential, obliterate boundaries and push out the edges of what can be.

The company looks for people who can grow, think, dream and create. Its culture thrives by embracing diversity and rewarding imagination.

The brand seeks achievers, leaders and visionaries. At NIKE, Inc. it’s about each person bringing skills and passion to a challenging and constantly evolving game.

NIKE is a technology company. From our flagship website and five-star mobile apps to developing products, managing big data and providing leading edge engineering and systems support, our teams at NIKE Global Technology exist to revolutionize the future at the confluence of tech and sport.

We invest and develop advances in technology and employ the most creative people in the world, and then give them the support to constantly innovate, iterate and serve consumers more directly and personally.

Our teams are innovative, diverse, multidisciplinary and collaborative, taking technology into the future and bringing the world with it.

Become a Part of the NIKE, Inc. Team

NIKE, Inc. does more than outfit the world's best athletes. It is a place to explore potential, obliterate boundaries and push out the edges of what can be.

The company looks for people who can grow, think, dream and create. Its culture thrives by embracing diversity and rewarding imagination.

The brand seeks achievers, leaders and visionaries. At Nike, it’s about each person bringing skills and passion to a challenging and constantly evolving game.

SECTION 1 : WHO ARE WE LOOKING FOR

We’re looking for an Information Security Analyst. This role leverages information security knowledge and industry best practices to perform risk assessments of Nike internal environment and vendors support Nike.

They will be responsible scoping specific risk assessments, identifying information security risks through analysis of threats and vulnerabilities, providing control recommendations and reporting on those risks to Nike business and technology owners.

The candidate needs to be comfortable working with ambiguity, excellent analytical and problem solving skills, and able to interfacing with other internal or external organizations regarding security policy and standards violations, security controls failure, and incident response situations.

SECTION 2 : WHAT WILL YOU WORK ON

If this is you, you’ll be working with Governance, Risk, Compliance and Engagement team and perform these key tasks :

Evaluate and process exceptions to information security policies and standards.

Perform risk assessments of internal platform and third-party vendors and ensure the business objectives align with the type and volume of data used in maintaining a "need to know / use" mindset.

Utilize your thorough understanding of ITGC’s to consult with Technology units on compliance matters.

Champion information security policies, standards, controls, and processes so that compliance requirements are addressed as part of "business as usual" operations.

Consult on control design and control operations related in support of compliance requirements. Support internal compliance and external regulatory compliance programs, support to interpret technology (regulatory) requirements e.

g. Cyber Security Law requirements, MLPS (multi-level protection system), SOX control requirements. Develop and / or follow appropriate processes to keep the organization in compliance and reduce legal liabilities

Perform Compliance control validation testing to determine the operating effectiveness of IT controls for scoped systems.

Provide analysis and insights into data supporting the effectiveness of technical and process-based cyber security controls and establish automated data pipelines that feed data visualization tools, such as Tableau.

Collaborate effectively with NIKE leaders, managers, employees, and partners to provide deliberate and thoughtful engagement throughout NIKE.

Help drive execution of the Information Security training programs. Ensure the workforce stays fully informed on information security through formal trainings and oversee the development and delivery of security training and awareness campaigns.

Effective, positive verbal and written communication skills and experienced creating and developing high-quality PowerPoint presentations.

SECTION 3 : WHO WILL YOU WORK WITH

This role will report to the regional Corporate Information Security (CIS) leadership, and work with Nike business owners, technology teams, and various governance and Legal and Privacy functions.SECTION 4 : WHAT YOU BRING

  • Bachelor’s Degree and minimum of 3 years of experience leading technology teams in support of Program / Portfolio Management solutions in an IT organization (Information Security expertise a plus)
  • PMP, CISSP, CRISC, CISM, CISA or GIAC certifications beneficial
  • Strong knowledge of incident response and crisis management with the ability to identify both tactical and strategic solutions using strong verbal and written communication skills
  • Strong business acumen to quickly learn new business processes and understand how application performance requirements support the business in achieving revenue and profit goals.
  • Excellent collaboration skills - must be eager to work as part of a cohesive team and work as a partner to other teams within Nike, Inc., locally and globally
  • Exceptional communication skills, including the ability to gather relevant data and information, actively listen, dialogue freely, verbalize ideas effectively, negotiate tense situations successfully, and manage and resolve conflict
  • Proven presentation and facilitation skills
  • Must excel working in team-oriented roles that rely on ability to collaborate with others
  • Experience working successfully in a highly matrixed work environment
  • Passion for the Nike brand and for an innovative, Just Do It work environment
  • NIKE, Inc. is a growth company that looks for team members to grow with it. Nike offers a generous total rewards package, casual work environment, a diverse and inclusive culture, and an electric atmosphere for professional development.

    No matter the location, or the role, every Nike employee shares one galvanizing mission : To bring inspiration and innovation to every athlete* in the world.

    NIKE, Inc. is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.

    NIKE, Inc. is a growth company that looks for team members to grow with it. Nike offers a generous total rewards package, casual work environment, a diverse and inclusive culture, and an electric atmosphere for professional development.

    No matter the location, or the role, every Nike employee shares one galvanizing mission : To bring inspiration and innovation to every athlete* in the world.

    NIKE, Inc. is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.

    報告此工作
    checkmark

    Thank you for reporting this job!

    Your feedback will help us improve the quality of our services.

    申请
    邮箱地址
    通过点击 "继续", 我 同意neuvoo处理我的信息数据, 并给我发送电子邮件提醒 详见neuvoo 隐私政策 。我可以在任何时候取消订阅。
    继续
    申请表