Senior Information Security Analyst

Description

Senior Information Security Analyst

Location: Salt Lake City, UT (hybrid flex) or at any NICE U.S. office locations

The Senior Information Security Analyst will conduct internal audits focused on verifying and enhancing the company's compliance and information technology controls. Coordinate and work with audit teams, and internal control owners. Conduct timely and effective audit planning, execution, and reporting. Complete the audit planning and audit report writing process for audits. Conduct training and process analysis with control owners and operators. Assist with other audit matters and projects. Provide updates and escalate issues in a timely manner.

A Typical Day Might Include the Following:

1. Act as lead for future audit success by preparing internal control owners for external audits.

1. Track and ensure visibility of developing compliance framework standards

1. Help facilitate and or conduct internal gap assessments and audit readiness assessments.

1. Assess inherent and residual risks, evaluate control designs, develop, and execute audit tests.

1. Document control narratives and walkthroughs.

1. Comfortably assume core audit responsibilities in all audit phases.

1. Participate as a key team member on audit projects, having responsibility for more complex areas.

1. Assist team leaders, managers, senior and staff auditors in accomplishing team objectives.

1. Identify and assess the impact of control deficiencies.

1. Draft audit reports.

1. Present audit findings to management through status updates and closing meetings.

1. Assist in the development of cost-justified, value-added management actions.

1. Effectively handle larger and more challenging workloads on successive assignments.

1. Produce excellent results in audit projects across multiple business areas and for different team leaders.

1. Proficient in the use of automated work papers and other department and company tools.

1. Ensure effective and efficient execution of audits in conformance with professional and department standards, budgets, and timelines.

1. Maintain internal audit competency through ongoing professional development.

1. Participate in the review of co-worker's work.

1. Always follow the company Code of Ethics and NICE CXone policies and procedures.

1. Communicate in an effective and professional way with customers in and outside of NICE CXone.

1. This job description is not intended to be all-inclusive, and employee will also perform other reasonable related business duties as assigned by immediate supervisor and other management as required.

This organization reserves the right to revise or change job duties as the need arises.

To Land This Gig You'll Need:

Education Requirement:

Bachelor's Degree in information technology, Business Management, Finance, Accounting, or equivalent work experience required. Master's degree preferred. CISSP, CISA, CIA, or CPA preferred.

Experience Requirement:

1. 4+ years of experience in audit, public accounting, finance, or financial services.

1. Experience of common compliance frameworks. (PCI-DSS, SOC 2 Type 2, ISO 27000, etc)

1. Experience testing compliance controls with control owners.

1. Strong written, verbal, and interpersonal communication skills.

1. High level of energy, and the desire to work in a fast-changing environment.

1. Proficient knowledge of PCs and Servers -- Windows, Linux, and Unix preferred.

1. Experience in auditing the security of deployments in AWS and/or Azure environment.

Experience Preferred:

1. Experience in domestic & international privacy laws such as HIPAA, PCI, NIST security framework, GDPR, etc.

1. Familiarity with industry best practices and regulations for software and/or telecom industry.

1. Understanding of ISO 27000, PCI-DSS, SOC 2 Type 2

ABOUT NICE CXone: NICE CXone makes it easy and affordable for organizations around the globe to provide exceptional customer experiences while meeting key business metrics. NICE CXone provides the world's No. 1 cloud customer experience platform, NICE CXone™, combining best-in-class Omnichannel Routing, Workforce Optimization, Analytics, Automation and Artificial Intelligence on an Open Cloud Foundation. NICE CXone is a part of NICE (Nasdaq: NICE), the worldwide leading provider of both cloud and on-premises enterprise software solutions.

NICE is committed to provide an environment based on equal opportunity for all qualified applicants and employees. It is the policy of NICE to afford equal employment opportunities to qualified individuals, regardless of age, race, color, creed, religion, citizenship, ancestry, national origin, sex, gender, pregnancy, mental or physical disability, marital status, veteran status, service in the Armed Forces, sexual or affectional orientation, atypical hereditary cellular or blood traits, genetic information, status as a victim of domestic or sexual violence, and/or any other status protected by any applicable federal, state and/or local statute or regulation.