Policy Management Specialist (Security Risk & Compliance)

3 Months ago • 5-8 Years • Cyber Security

Job Summary

Job Description

The Policy Management Specialist will lead the security policy management function within GRC end-to-end, including running policy workshops, facilitating the annual policy attestation cycle, and supporting all issues related to policy management. They will also be responsible for security onboarding and annual security refresher training, leading the National Cyber Security Awareness Month, hosting phishing programs, and supporting ad-hoc training and role-based training. The ideal candidate will have direct experience managing Security Policy programs or directly supporting them within a security or IT team. Experience creating new policies and standards as well as modifications to policies and standards as needed for various compliance and regulatory purposes is also required.
Must have:
  • Direct experience managing Security Policy programs
  • Experience creating new policies and standards
  • Experience with Archer GRC Tool
  • Strong communication skills
  • Minimum of 5-8 years of practical information security experience
Good to have:
  • Experience with SAT platforms like ProofPoint, KnowBe4, OneTrust, Archer
  • Experience developing long-term strategies for Policy Mgmt. frameworks

Job Details

Leads the security policy management function within GRC end-to-end. 

-Responsible for running policy workshops to triage policy intake request for the modification and/or creation of new policies, control standards, and procedures. This may also include troubleshooting ownership issues, or anything related to policies such as correlation to compliance frameworks, risks or general cybersecurity events and evolution.
-Responsible for facilitating the annual policy attestation cycle where owners must leverage the GRC tool, Archer to sign off or modify their control statements. This includes working together with partners across the organization who need support navigating the intricacies of policy management.
-Supporting all issues related to policy management.
-POC for everything Policy Mgmt. within GRC and for partnering areas.
-Setting long term goals and strategies to evolve policy mgmt.

Supports the Security Awareness Training (SAT) function within GRC end-to-end.

-Responsible for security onboarding for all new recruits as well as annual security refresher training. This includes maintaining current content, creation of new content, leveraging our tools for content changes and working with learning center management peers.
-Lead for National Cyber Security Awareness Month. This includes creation of the schedule of events, and executing the plan – workshops, webinars, training, games, prize, tech talks etc.
-Lead for hosting phishing program and campaigns to increase employee vigilance. This includes creating the plans, testing, prepping with technical areas to ensure conflicts don’t arise, analyzing the data during and after the phishing campaigns. This also includes fixing any and all issues that may arise regarding tool conflicts, false positives etc.
-Familiarity with common SAT platforms such as ProofPoint, KnowBe4, OneTrust, Archer etc.
-Lead for ad-hoc training and role-based training per utilized SAT platforms. Expand upon SAT program to host periodic training by function, group etc.
-Support other areas who rely on security training or awareness needs.


Required Skills

    • Direct experience managing Security Policy programs or directly supporting them within a security or IT team. Experience creating new policies and standards as well as modifications to policies and standards as needed for various compliance and regulatory purposes.
    • Experience with creating long term strategizes for the organization of Policy Mgmt. frameworks to govern internal processes with all employees.
    • Strong understanding of Archer GRC Tool. Development is not a must but navigation is.
    • Strong communication skills, ability to navigate across departments and network with various employees across the department to solve issues, host trainings, run meetings and workshops etc.
    • Supports the maturity of Governance function.
    • Develops documentation related to GRC Platform.

Required Experience

    • Minimum of 5-8 years of practical information security experience in developing and maintaining secure architectures for large enterprises is preferred.


    • Discover your inner Racker: Racker Life

About Rackspace Technology
We are the multicloud solutions experts. We combine our expertise with the world’s leading technologies — across applications, data and security — to deliver end-to-end solutions. We have a proven record of advising customers based on their business challenges, designing solutions that scale, building and managing those solutions, and optimizing returns into the future. Named a best place to work, year after year according to Fortune, Forbes and Glassdoor, we attract and develop world-class talent. Join us on our mission to embrace technology, empower customers and deliver the future.
 
 
More on Rackspace Technology
Though we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.

Similar Jobs

Blind Squirrel Games - Sr. Level Designer

Blind Squirrel Games

California, United States (Hybrid)
3 Weeks ago
Animoca Brands - Portfolio Associate / Manager

Animoca Brands

Dubai, Dubai, United Arab Emirates (Hybrid)
4 Months ago
Rackspace Technology - Technical Customer Success Manager

Rackspace Technology

Mexico City, Mexico City, Mexico (Remote)
4 Days ago
Rackspace Technology - Sales Executive DE, Level IV.

Rackspace Technology

Germany (Hybrid)
3 Months ago
Salt AI - Technical Writer - Documentation Lead

Salt AI

Los Angeles, California, United States (Remote)
1 Month ago
Electronic Arts - Security Architect

Electronic Arts

Texas, United States (Remote)
1 Month ago
PwC - Consultant Expérimenté / Manager Cybersécurité | CDI | H/F

PwC

Toulouse, Occitanie, France (On-Site)
4 Months ago
Zones - SOC Analyst L2

Zones

Bengaluru, Karnataka, India (On-Site)
2 Months ago
LeoVegas - Cloud Security Engineer

LeoVegas

Växjö, Kronoberg County, Sweden (Hybrid)
3 Months ago
ByteDance - Data Security - Security Governance Engineer

ByteDance

Singapore (On-Site)
3 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Rackspace Technology - Professional Services Delivery Director

Rackspace Technology

United States (Remote)
3 Weeks ago
Rackspace Technology - Senior Platform Engineer (Azure)

Rackspace Technology

Germany (Remote)
3 Months ago
Notion - Account Executive, Mid-Market, France

Notion

Dublin, County Dublin, Ireland (On-Site)
4 Months ago
Notion - Mid-Market Customer Success Manager

Notion

San Francisco, California, United States (On-Site)
4 Months ago
Rackspace Technology - Senior MLOPs Engineer

Rackspace Technology

San Antonio, Texas, United States (Remote)
3 Months ago
Seedify - Marketing Content Producer

Seedify

Ukraine (Remote)
1 Month ago
Rackspace Technology - Presales Data Science Architect – AWS Cloud

Rackspace Technology

Mexico City, Mexico (On-Site)
3 Months ago
Rackspace Technology - DEVOP Engineer (AWS Terraform)-PSDE III

Rackspace Technology

India (Remote)
2 Months ago
Notion - Head of Enterprise Product Marketing

Notion

San Francisco, California, United States (On-Site)
4 Months ago
Notion - Software Engineer, Native Windows Development (Contract)

Notion

San Francisco, California, United States (On-Site)
4 Months ago

Get notifed when new similar jobs are uploaded

Jobs in Mexico City, Mexico

Luxoft - Data Engineer for Market Data Projects (with Streamlit Expertise)

Luxoft

Mexico City, Mexico City, Mexico (Remote)
2 Months ago
Evolution - Commercial Team Manager Mexico

Evolution

Mexico City, Mexico City, Mexico (On-Site)
1 Month ago
Paypal - Business Project Management 4

Paypal

Mexico City, Mexico City, Mexico (On-Site)
3 Months ago
Nissan - Assistant, Supervision | Team Leader

Nissan

Jiutepec, Morelos, Mexico (On-Site)
4 Months ago
HP - Print SLED Pursuit Engagement Lead

HP

Ciudad Guzmán, Jalisco, Mexico (On-Site)
3 Months ago
Netflix - Localization Senior Specialist, LATAM

Netflix

Mexico City, Mexico City, Mexico (On-Site)
2 Weeks ago
Luxoft - Administrative Assistant

Luxoft

Guadalajara, Jalisco, Mexico (On-Site)
2 Months ago
Netflix - Marketing Manager, Mexico

Netflix

Mexico City, Mexico City, Mexico (On-Site)
2 Weeks ago
Rackspace Technology - Presales Data Science Architect – AWS Cloud

Rackspace Technology

Aguascalientes, Aguascalientes, Mexico (On-Site)
3 Months ago
Luxoft - Murex BAU Consultant - Mexico

Luxoft

Mexico City, Mexico City, Mexico (Remote)
2 Months ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

PwC - IN-Associate – Power Platform -Ms Dynamics– Advisory  - Chennai

PwC

Chennai, Tamil Nadu, India (On-Site)
4 Months ago
Barracuda Networks  Inc  - Senior Software Engineer - IP/IR

Barracuda Networks Inc

Bengaluru, Karnataka, India (On-Site)
3 Months ago
Ubisoft - Vulnerability Platform Specialist

Ubisoft

Montreal, Quebec, Canada (On-Site)
1 Month ago
PwC - Enterprise systems manager

PwC

Johannesburg, Gauteng, South Africa (On-Site)
4 Months ago
PwC - Technologie & Operation Intern

PwC

Pointe-Noire, Kouilou, Republic Of The Congo (On-Site)
3 Months ago
PwC - IN_Associate _Internal audit services_Internal Audit Services _Advisory_Bangalore

PwC

Bengaluru, Karnataka, India (On-Site)
2 Months ago
PwC - Cloud & IT Transformation Senior Associates

PwC

Makati, Metro Manila, Philippines (On-Site)
4 Months ago
PwC - IN_Associate _ Internal Audit _Internal Audit Services_ Advisory_ Bangalore

PwC

Bengaluru, Karnataka, India (On-Site)
3 Months ago
ByteDance - Cloud Security Solution Architect, APAC

ByteDance

Singapore (On-Site)
3 Months ago

Get notifed when new similar jobs are uploaded