Grainger
North America's leading B2B supplier of maintenance, repair and operating supplies and related services.
Chicago, IL

Risk & Compliance Analyst II

Sorry, this job was removed at 2:55 p.m. (CST) on Friday, January 18, 2019
Find out who's hiring in Chicago.
See all Cybersecurity + IT jobs in Chicago
Apply
By clicking Apply Now you agree to share your profile information with the hiring company.

This position drives compliance of global business units with Grainger’s Global Risk Management and Compliance activities in alignment with Grainger’s IT Risk Management and Compliance Program. Team member will assess processes to identify gaps in business processes and controls, and assist in the design and documentation of processes to address the gaps in order to drive compliance in alignment with the risk management framework. Additional responsibilities include design, implementation and facilitation of Risk Metrics and Measures and the Security Awareness programs.

Principal Duties & Responsibilities: 

  • Works with business teams across the global organization to execute the ES Compliance and Risk Management program framework, extending processes as necessary to help business partners identify information risk and manage mitigation to an acceptable level
  • Provides inputs to global risk management processes in developing controls needed for the mitigation of risk for business processes which are not compliant with information security and risk frameworks
  • Lead other team members within the Risk and Compliance organization in assessing risk, developing appropriate controls and advising on creation of action plans to address gaps.
  • Collaboratively works to influence and socialize ES strategies, standards, policies, procedures, communications and governance.
  • Provides guidance with respect to needed changes to established IT Security policies based on day-to-day interactions with Grainger businesses.
  • Serves as subject matter expert in providing advice to global business units regarding compliance with applicable frameworks including ISO 27001, NIST Cybersecurity Framework (CSF), Cloud Controls Matrix (CCM) and standards including the Payment Card Industry Data Security Standard (PCI DSS) as well as other frameworks and standards as required.
  • Takes actions as directed to ensure business awareness of Data Privacy guidance, including the General Data Protection Regulation (GDPR), and appropriate engagement of Data Privacy office, as needed.
  • Provides advice to global business units on actions needed to align business requirements with relevant global security frameworks, standards, policies, and procedures.
  • Proactively provides relevant inputs to the global risk framework based on the latest government and industry information regarding new threats and vulnerabilities and communicate relevant information to appropriate teams, soliciting action plans if needed.
  • Coordinates deployment and measurement of security awareness efforts across Grainger global business units
  • Works closely with global business, contract and legal teams to assess proposed terms and conditions, align with appropriate risk profile and provide feedback on changes needed.
  • Monitors and manages ES risk register to ensure that all business risks are accurately represented and actively managed.
  • Aligns individual goals to Risk and Compliance team goals with S.M.A.R.T. objectives
  • Recognizes opportunities to balance risk and creativity in quickly responding to business opportunities

Preferred Education & Experience: 

 

  • CISSP (Certified Information Systems Security Professional) certification or candidate for certification required
  • CISA (Certified Information Security Auditor), CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control) or CIPP (Certified Information Privacy Professional) certifications helpful, but not required
  • Experience working with ISO 27001 (or similar) security framework, PCI DSS and CSA CCM standards in operational IT environment required
  • Experience applying other security frameworks (e.g., CSF, COBIT), laws and standards (e.g. Sarbanes-Oxley, GDPR, HIPAA) helpful, but not required
  • Working experience with IT Security risk frameworks such as ISO 27005, OCTAVE, FAIR, NIST RMF very helpful
  • Operational experience in applying risk frameworks to technologies (including cloud, containers) and continuous processes (including DevOps and Agile software deployment) very helpful
  • Working knowledge of compliance tools such as the Unified Compliance Framework (UCF) Common Controls Hub (CCH) helpful, but not required
  • Must be able to work in a collaborative team environment with individuals at appropriate levels of the Company
  • Effective negotiation skills
  • Good verbal and written communication, facilitation, and interpersonal skills

“Grainger is an Equal Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, gender identity, sexual orientation, disability, or protected veteran status.”

 

See More
Apply Now
By clicking Apply Now you agree to share your profile information with the hiring company.

What are Grainger Perks + Benefits

Grainger Benefits Overview

With benefits starting day one, Grainger is committed to your safety, health and wellbeing. Our benefits provide a wide range of programs and resources for nearly every aspect of the full life you and your family lead – supporting your life today and in the future.

Some benefits are provided automatically, while others are offered at reduced group rates. Whatever you need, you’ve got this because you’ve got Grainger. Visit GraingerTotalRewards.com for a complete picture.

Culture
Volunteer in local community
Partners with nonprofits
Open door policy
Employee resource groups
Employee-led culture committees
Quarterly engagement surveys
Hybrid work model
In-person all-hands meetings
Employee awards
Flexible work schedule
Remote work program
Diversity
Dedicated diversity and inclusion staff
Highly diverse management team
Mandated unconscious bias training
Diversity manifesto
Diversity employee resource groups
Team members connect in, African American, Asian-Pacific Islander, Disability, Equality Alliance, Generational, Latino, Veterans and Women's Business Resource Groups.
Hiring practices that promote diversity
Diversity recruitment program
Health Insurance & Wellness Benefits
Flexible Spending Account (FSA)
Disability insurance
Dental insurance
Vision insurance
Health insurance
Life insurance
Pet insurance
Wellness programs
Mental health benefits
Transgender health care benefits
Abortion travel benefits
Financial & Retirement
401(K)
Team members can contribute up to 75% of pay up IRS limits on a pre- or post-tax basis. Your contributions are always 100% vested.
401(K) matching
Grainger automatically contributes 6% of your eligible pay into your retirement savings plan account each pay period. This contribution is always 100% vested.
Employee stock purchase plan
You are eligible to participate in Grainger's ESPP once you have completed at least 90 days of service and are regular full-time or regular part-time, scheduled to work at least 20 hours a week.
Performance bonus
Charitable contribution matching
For every $1 a team member donates to charity, Grainger amplifies that impact with a $3 matched donation.
Child Care & Parental Leave Benefits
Generous parental leave
Family medical leave
Adoption Assistance
Grainger supports team members and their families who are in the process of adopting by reimbursing up to $6,000 per adoption for eligible expenses.
Return-to-work program post parental leave
Fertility benefits
Vacation & Time Off Benefits
Generous PTO
Paid volunteer time
Paid holidays
Flexible time off
Bereavement leave benefits
Office Perks
Commuter benefits
Company-sponsored outings
Free snacks and drinks
Beverages and coffee on demand in our downtown locations.
Onsite office parking
We offer employees discounted parking rates at our Chicago office locations.
Relocation assistance
Mother's room
Onsite gym
Professional Development Benefits
Job training & conferences
Tuition reimbursement
Our tuition reimbursement plan covers the first $5,250 per year towards a degree program. Amounts that exceed $5,250 are reimbursed at 50% and there is no program maximum.
Lunch and learns
Promote from within
Mentorship program
Continuing education available during work hours
Online course subscriptions available
Customized development tracks
Paid industry certifications
Personal development training

More Jobs at Grainger

Apply Now
By clicking Apply Now you agree to share your profile information with the hiring company.
Learn more about GraingerFind similar jobs like this