Governance, Risk, Compliance- Audit Security Advisor

Overview

Governance, Risk, Compliance- Audit Security Advisor- Hybrid

We’re a leader in data and AI. Through our software and services, we inspire customers around the world to transform data into intelligence - and questions into answers. We’re also a debt-free multi-billion-dollar organization on our path to IPO-readiness. If you're looking for a dynamic, fulfilling career coupled with flexibility and world-class employee experience, you'll find it here.

About the job

The Governance, Risk, Compliance - Audit team is looking for a Senior Governance, Risk, Compliance - Audit Security Advisor to bridge the gap between compliance and information security by supporting policy and standards development, risk assessments, audits, and overall security controls guidance. The position focuses on Compliance. You must have technical knowledge and / or experience in information security and the ability to communicate information security risk, controls, and mitigation strategy to management at all levels of the business across the enterprise.

Responsibilities

• Maintain an understanding and benchmark the following standards : ISO27001, ISO9001, ENS. Knowledge of other standards including : DORA, SOC, FedRamp.
• Facilitate and ensure risks are identified, measured and tracked effectively.
• Identify control gaps and deficiencies and report to management.
• Conduct scheduled and ad hoc risk reviews of applicable environments required to maintain compliance and certifications.
• Support external assessment activities related to achieving required certifications and customer contractual requirements.
• Assist in the maintenance of SAS Cloud and security policy and process development and updates, while ensuring compliance with regulations and guidance.
• Effectively communicate SAS security requirements and procedures to applicable staff.
• Operate as a consultant, researching and recommending changes to enhance or streamline quality and information security policies and processes.
• Participate in security investigations and compliance reviews, as required by contract or regulation.
• Review SAS Cloud security contract terms and ensure alignment to current policies and processes.
• Coordinate responses to RFPs and security questionnaires.
• Use the IRM tool for managing risk and policy profiles, including entity structures, build reporting dashboards, and tracking risk remediation.
• Perform issue remediation tasks such as analysis, documentation, follow-up and retesting in response to risk findings.
• Understand best practices for information security and data privacy practices and processes.
• Understand standards and best practices : SOC 2, DENS, CE+, BSI C5, GDPR, DORA, ISO 9001, ISO 27001, ISO 14001.

Required Qualifications

Preferred Qualifications

Benefits Highlights

Diversity and Inclusion

At SAS, it’s not about fitting into our culture – it’s about adding to it. We believe our people make the difference. Our diverse workforce brings together unique talents and inspires teams to create amazing software that reflects the diversity of our users and customers. Our commitment to diversity is a priority at all levels; you are welcome here.

Additional Information

SAS is an equal opportunity employer. All qualified applicants are considered for employment without regard to race, color, religion, gender, sexual orientation, gender identity, age, national origin, disability status, or any other characteristic protected by law.

SAS only sends emails from verified “sas.com” email addresses and never asks for sensitive, personal information or money. If you have any doubts about the authenticity of any communication from, or on behalf of SAS, please contact

#SAS

#J-18808-Ljbffr