Security Audit & Compliance Analyst

at  Thermo Fisher Scientific

Requirements:

• Bachelor’s Degree in Risk Management, Information Assurance, Information Security, Cybersecurity, IT, Law, or Data Privacy (or related field).
• 4+ years of related work experience.
• Experience analyzing laws and regulations as they apply to a specific business or market segment.
• Experience implementing Information Security Management System (ISMS) frameworks.
• Ability to explain legal, technical, and compliance topics to a broad audience.
• General understanding of cybersecurity technologies and controls

Skills and Abilities:

• Customer service mentality.
• Attention to detail, organizational skills, and time management.
• Excellent verbal and written communication skills.
• Eagerness to learn and ability to work both independently and as part of a team

• Coordinate and support internal and external cybersecurity audits, ensuring documentation and evidence availability.
• Work closely with relevant parties to identify and resolve security vulnerabilities and ensure compliance.
• Play a major role in implementing Information Security Management System (ISMS) frameworks.
• Continuously evaluate and enhance cybersecurity compliance processes.
• Monitor legal, regulatory, and compliance landscape to identify cybersecurity-related issues.
• Act as the main contact for internal and external inquiries regarding the corporate cybersecurity program.
• Complete other governance activities and provide support as required to meet the needs of the Audit and Compliance team and interested parties

Requirements:

• Bachelor’s Degree in Risk Management, Information Assurance, Information Security, Cybersecurity, IT, Law, or Data Privacy (or related field).
• 4+ years of related work experience.
• Experience analyzing laws and regulations as they apply to a specific business or market segment.
• Experience implementing Information Security Management System (ISMS) frameworks.
• Ability to explain legal, technical, and compliance topics to a broad audience.
• General understanding of cybersecurity technologies and controls.

Skills and Abilities:

• Customer service mentality.
• Attention to detail, organizational skills, and time management.
• Excellent verbal and written communication skills.
• Eagerness to learn and ability to work both independently and as part of a team.