Job Information
PMI WW Brands LLC GRC Program Analyst in Seattle, Washington
About us: Stanley is defined by Creativity, Building and Invention. We are makers of the legendary bottle and box. Driven by purpose, passion and performance. Obsessed with making a difference. And keeping our promises. Proud of our yesterday. And focused on building the team of tomorrow. Position Overview Join the Bear Force as our IT GRC Analyst. Be a part of a company defined by creativity, building, and invention. This role plays a critical role in defining our technical risk and policy programs. We're looking for a self-motivated problem solver to collaborate with IT and business stakeholder teams to establish policies and processes to validate our adherence to our policies. What You'll Do Design and drive risk assessment activities. Understand, assess, and formally articulate Security Risks, Standards, Guidelines, and Policy Create and maintain relationships with key business, Legal, People, IT and other stakeholders throughout the company, while advancing our agenda for standards-backed security practices Partner with stakeholders in Supply Chain, IT, Security, Legal, and Operations to develop and implement a Business Continuity Program Drive remediation action plans to ensure they are designed appropriately to mitigate security/privacy risks Support business and product release commitments by driving risk identification, mitigation and acceptance for unmitigated security risks with key partners in and outside of IT Consult with business or security partners on information security requirements and applicability to business processes, products, or services Focus on continuous improvement of operational processes and designing innovative and automated operational functionality - we're looking for someone who can help us level up Who You Are A self-motivated and collaborative problem solver with ability to work in dynamic environment 3+ years' experience in Technical Security Governance, Compliance, Internal Audit in an IT environment Familiarity with industry best practices such as Common Vulnerability Scoring System (CVSS), and regulatory compliance frameworks (NIST CSF, ISO27001, PCI, HIPAA) Background and understanding of global privacy regulation - GDPR, CCPA, PIPA, etc. Technical knowledge and understanding of infrastructure, including network segmentation, Zero Trust architecture, Identity and Access Management, CIS Benchmarks, Network Security, and Vulnerability Management Verbal and written communication skills strong enough to distill the above for a non-technical audience Possession of certifications such as CISA, CISM, CIPP, CISSP or other relevant certifications Salary Range $90,000 - 115,000 annually. Stanley is committed to a diverse and inclusive work environment. Stanley is an equal opportunity employer and does not discriminate based on race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please reach recruiting@stanley1913.com. The base pay range for this position is for a successful candidate within the state listed. The successful candidate's actual pay will be based on multiple factors, such as work location, job-related knowledge, skills, qualifications, and experience. Stanley is a total rewards company, which includes rewards beyond base salary. At Stanley, full-time employees are eligible for an annual bonus, based on company and individual results. In addition, we offer a variety of employee benefits, personalized time off, 14-Paid holidays, dental, vision, 401(k), and much more. About HAVI HAVI is a global, privately owned company that connects people with ideas, data with insights, supply with demand, restaurants with deliveries and ultimately, people with the products they love. Whether we ar