OneIT - SOC Audit and Compliance Analyst (Global)

at  WSP

THIS OPPORTUNITY

The Global Senior Compliance Support Analyst will have multiple security related roles within the organization. Their main goal will be to improve the existing and provide a more secure computing environment for the organization to conduct their business. The global security operations team will have overlapping duties however each role will have more specifically focused duties. As such, the role and essential duties will fit into the below classifications most closely.
They must learn how to prepare the requested documentation for different Global SOC processes necessary for WSP compliance. They will actively support the SOC Managers for designing the requested documentation for different compliance processes (ITGC – IT General computers Control, ISO 27001 – Information Security Management Process, Privileged Access Management, Vulnerability Management, Identity Governance, Integrated Organizations Compliance, Metrics and Compliance reports/dashboards)

REQUIRED QUALIFICATIONS

• A Bachelor degree in IT or IT Security.
• 5 - 7 years’ of professional work experience.
• Good communications skills and strong knowledge of spoken and written English.
• Technical background with a strong understanding of security concepts and practical usage.
• Proactively seeks to improve security processes and implements security solutions, raising security awareness and overall security measures.
• Ability to work efficiently with minimal oversight/direction remotely, adjusting to changing priorities, circumstances, and personal interaction styles.
• Experience in working in transversal teams and business units across borders.
• 2 years in applying and improving corporate policies in line with security standards, regulations, and best practices (i.e., ISO 27k, NIST CSF, 52 -109 ITGC…).
• Security certifications that evidence understanding of ISO 27k family standards or equivalent.
• 2 years’ experience in a similar role within a Global Organization.
• Experience in information security, risk, compliance.
• Solid knowledge in IT Governance frameworks such as COBIT, ISO 2700x, NIST, ITIL
• During employment solid knowledge of information security regulations applicable to WSP;
• Preferred: Certified or equivalent i.e. ISO27001 Auditor, Security +, CISSP, CISM, CISA, CRISC,

Please refer the Job description for details