22 ago
|
Levi Strauss
|
Ciudad de México
22 ago
Levi Strauss
Ciudad de México
Job Location: Mexico City, Mexico
Calling all originals: At Levi Strauss & Co., you can be yourself — and be part of something bigger. We’re a company of people who like to forge our own path and leave the world better than we found it. Who believe that what makes us different makes us stronger. So add your voice. Make an impact. Find your fit — and your future.
The Sr. Cyber Risk Analyst will be a member of the Cyber Risk team. The position is responsible for implementing the cyber risk operational strategy, which includes managing the Governance, Risk, and Compliance (GRC) tool, performing internal and 3rd party security risk assessments, and driving effective alignment to the Risk Management policy. The position reports to the Manager, Cyber Risk.
About the Job
- Program alignment to ISO 27005, CIS Top 18 Controls, and the NIST Cybersecurity Framework.
- Oversees initial project development surrounding new processes and integrating new processes with existing ones. Communicates these changes to impacted clients and other resources.
- Support the OneTrust GRC tool responsibilities, escalating any strategic or large decision-making to the risk manager.
- Assist in tiering the backlog of LS&Co.; vendors using the defined vendor tiering criteria and perform internal and 3rd party security risk assessments. Prioritize and select controls based on risk assessment frameworks, and partner with internal stakeholders to document each control.
- Determine the effectiveness of in-scope controls by implementing the risk management framework aligned to ISO 27005, including management of the security risk policy, control mapping, and implementation of the risk management process in the OneTrust GRC tool.
- Drive the policy lifecycle management process to manage & govern policies, policy lifecycle, attestation, communication, issue and actions, policy processes, and overall governance; manage the Cyber Risk Policy and make revisions as needed.
- Manage the day-to-day exception
📌 Sr. Cyber Risk Analyst (Ciudad de México)
🏢 Levi Strauss
📍 Ciudad de México