Senior Cybersecurity & GRC Analyst (Hybrid)

Stanley Black & Decker; New Britain (CT); Híbrido; USD 110 000 - 140 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical benefits

401(k) & ESPP

Paid time off

Tool discounts

Resumo da oferta

Stanley Black & Decker, Inc. in New Britain, CT seeks a Sr Analyst, Cyber Security to lead and support compliance initiatives across IT and business teams.

Hybrid work arrangement; you will align controls with ISO 27001, NIST, PCI DSS, SOX, and NIS 2 while preparing for internal and external audits. The role requires 3+ years in cyber security or IT GRC, a bachelor’s in a related field, and professional certifications such as CISA, CISSP, CISM, or CRISC.

Qualificações

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 3+ years of experience in cyber security, IT audit, or IT GRC roles.
• Professional certifications such as CISA, CISSP, CISM, or CRISC highly desirable.
• Strong knowledge of IT security frameworks (e.g., NIST, ISO) and regulatory requirements.
• Experience conducting IT security audits.

Responsabilidades

• Lead and support cybersecurity compliance initiatives, ensuring alignment with frameworks (ISO 27001, NIST, PCI DSS, SOX, NIS 2).
• Monitor and assess the effectiveness of cybersecurity and compliance controls, recommending enhancements and remediation strategies.
• Collaborate with IT, security, and business teams to resolve audit findings and compliance issues; escalate high-risk items as needed.
• Maintain up-to-date knowledge of regulatory requirements, standards, and best practices.
• Prepare and deliver compliance and audit reports to management and regulatory authorities, track and report on compliance metrics and remediation progress.
• Support and prepare for third-party and external audits, acting as liaison with auditors and regulators.
• Develop and deliver training and awareness programs on cybersecurity compliance; provide guidance to staff on compliance and audit requirements.
• Develop, maintain, and update IT GRC documentation (policies, procedures, risk registers, control matrices, compliance checklists).
• Identify, evaluate, and report on control gaps; maintain a log of compliance and audit issues and their resolution status.
• Collaborate across departments to ensure company-wide compliance and effective resolution of issues.
• Proactively identify emerging risks and propose innovative solutions to strengthen cybersecurity posture.

Conhecimentos

Cyber security

IT audit

IT GRC

Regulatory compliance

Formação académica

Bachelor’s degree in Information Security/Computer Science

Ferramentas

NIST Framework

ISO Standards

PCI DSS

Descrição da oferta de emprego

Stanley Black & Decker, Inc. in New Britain, CT seeks a Sr Analyst, Cyber Security to lead and support compliance initiatives across IT and business teams.

Hybrid work arrangement; you will align controls with ISO 27001, NIST, PCI DSS, SOX, and NIS 2 while preparing for internal and external audits. The role requires 3+ years in cyber security or IT GRC, a bachelor’s in a related field, and professional certifications such as CISA, CISSP, CISM, or CRISC.