M&A Cybersecurity and Compliance Analyst

Baker Hughes; Aberdeen City; Hybrid; GBP 40,000 - 80,000; Full time

Job description

Are you passionate about cybersecurity, risk & compliance?

Are you passionate about being part of a successful team?

Join us!

A leader in the Energy Technology Industry, Baker Hughes offers opportunities for qualified people who want to grow in our high-performance organization. Our leading technologies and our ability to apply them safely and effectively create value for our customers and shareholders.

Be part of our Digital Technology M&A team!

You will be supporting the HQ DT M&A team in planning and execution of the cybersecurity section of deals, and Regional Compliance and Risk Management. You will oversee the M&A and Cybersecurity and Risk function across different Baker Hughes business sites, presence and interests.

As a M&A Cybersecurity and Compliance Analyst, you will be responsible for:

• Supporting the DT M&A team during all phases of deals, with responsibilities including all timely due-diligence responses, integration and separation strategies and plans, service delivery execution and digital technology security implementation.
• Working with the Cybersecurity and CTO teams to execute the CSRC Service Delivery portions of integrations and carve-outs, including implementing cybersecurity controls and supporting the DT deal team in a timely manner.
• Maintaining the CSRC service catalogue and managing all CSRC activities in a timely manner.
• Contributing technical expertise towards the development of M&A security strategic plans and roadmaps aligned to business strategies and requirements.
• Assisting in the maintenance of M&A playbooks based on company security standards, procedures, and best practices.
• Collaborating with security team members to develop M&A security requirements for all hardware and software computing platforms.
• Having knowledge of Regulatory Compliance requirements within the EU and targeted global countries (GDPR, NIS, Digital markets and services, European Cybersecurity act).
• Keeping up to date with changing European and other regional regulations impacting IT operations.
• Monitoring regulatory developments and ensuring proactive compliance.
• Working closely with the IT security team to ensure compliance with applicable regional cybersecurity regulations.
• Conducting regular IT compliance audits, reviews, and assessments to ensure adherence to internal policies and regulatory requirements.
• Coordinating and managing third-party audits and inspections as required by regulatory authorities or clients.
• Partnering with IT and the business to continuously improve on controls or automate compliance activities.

Fuel your passion

To be successful in this role you will:

• Have a BSc. from an accredited university or college.
• Have experience in ITGC/GITC audits.
• Possess deep working knowledge of IT service management (e.g., ITIL-related disciplines).
• Have a solid working knowledge of OT security.
• Demonstrate understanding of industry security standards and regulatory/compliance requirements.
• Have hands-on experience on IT M&A / IT Compliance.
• Be team-focused and experienced at building relationships with diverse stakeholders.
• Be comfortable making difficult decisions.

Work in a way that works for you

We recognize that everyone is different and that the way in which people want to work and deliver at their best is different for everyone too. In this role, we can offer the following flexible working patterns:

• Occasionally remote working from home or another work location.
• Working flexible hours to help you fit in everything and work when you are most productive.

Working with us

Our people are at the heart of what we do at Baker Hughes. We invest in the health and well-being of our workforce, train and reward talent, and develop leaders at all levels.

Working for you

Our inventions have revolutionized energy for over a century. We prioritize rewarding those who embrace change with a package that reflects how much we value their input. Join us, and you can expect:

• Contemporary work-life balance policies and wellbeing activities.
• Comprehensive private medical care options.
• Safety net of life insurance and disability programs.
• Tailored financial programs.
• Additional elected or voluntary benefits.