Zostań członkiem zespołu NIKE, Inc.
NIKE, Inc. to nie tylko firma, która ubiera najlepszych sportowców na świecie. To miejsce, w którym możesz odkryć swój potencjał, przekroczyć granice oraz sprawić, że niemożliwe staje się możliwe. Firma poszukuje ludzi, którzy chcą się rozwijać i potrafią myśleć, marzyć oraz tworzyć. Jej kultura rozwija się dzięki różnorodności i wspieraniu kreatywności. Potrzebni są w niej ludzie ambitni, urodzeni liderzy i prawdziwi wizjonerzy. W NIKE, Inc. każda osoba wnosi do gry swoje umiejętności oraz pasje. Dzięki temu ciągle się rozwijamy.
NIKE, Inc. does more than outfit the world's best athletes. It is a place to explore potential, obliterate boundaries and push out the edges of what can be. The company looks for people who can grow, think, dream and create. Its culture thrives by embracing diversity and rewarding imagination. The brand seeks achievers, leaders and visionaries. At NIKE, Inc. it's about each person bringing skills and passion to a challenging and constantly evolving game.
NIKE is a technology company. From our flagship website and five-star mobile apps to developing products, managing big data and providing leading edge engineering and systems support, our teams at NIKE Global Technology exist to revolutionize the future at the confluence of tech and sport. We invest and develop advances in technology and employ the most creative people in the world, and then give them the support to constantly innovate, iterate and serve consumers more directly and personally. Our teams are innovative, diverse, multidisciplinary and collaborative, taking technology into the future and bringing the world with it.
Who Are We Looking For
We're looking for an Information Security Analyst to join Nike's Corporate Information Security Governance, Risk, and Compliance (GRC) team, which is responsible for enterprise wide GRC ensuring Nike leadership has the information needed to make strategic risk-based decisions and maintain compliance with international regulations while enabling the achievement of Nike business objectives globally. This role will meet with business and technology teams across Nike and consult with them on their security and compliance requirements. We are looking for an individual who is passionate about GRC, someone with a good working knowledge of industry best practice frameworks, such as ISO, NIST and CoBIT.
What Will You Work On
If this is you, you'll be working with the GRC team and performing these key tasks:
Assess moderately complex platforms against Nike security and configuration standards
Evaluate and process exceptions to information security policies and standards
Participate in complex internal risk assessments, identifying information security risks through analysis of threats and vulnerabilities, and reporting on those risks to Nike business and technology owners
Perform risk assessments of critical third-party vendors and ensure the business objectives align with the type and volume of data used in maintaining a "need to know/use" mindset
Utilize your thorough understanding of ITGC's to consult with Technology units on compliance matters
Champion information security policies, standards, controls, and processes so that compliance requirements are addressed as part of "business as usual" operations
Lead Nike business units in control design and control operations related in support of compliance requirements
Perform Compliance control validation testing to determine the operating effectiveness of IT controls for scoped systems
Provide analysis and insights into data supporting the effectiveness of technical and process-based cyber security controls and establish automated data pipelines that feed data visualization tools, such as Tableau
Collaborate effectively with NIKE leaders, managers, employees, and partners to provide deliberate and thoughtful engagement throughout NIKE
Help drive execution of the Information Security training programs. Ensure the workforce stays fully informed on information security through formal trainings and oversee the development and delivery of security training and awareness campaigns
Effective, positive verbal and written communication skills and experienced creating and developing high-quality PowerPoint presentations
Who Will You Work With
You will report into the Governance, Risk and Compliance - India Technology Center Director , in support of global GRC processes and procedures, and will work cross-functionally within the Corporate Information Security (CIS) teams and across Nike. You will regularly meet with Nike business and technology teams.
What You Bring
Knowledge of information security principles and practices, general procedures and guidelines
A general understanding of technology use, trends and risks as it applies in a business context and environment
Experience reviewing third party SOC reports
Experience/working knowledge with PCI DSS (Former QSA is a benefit).
Knowledge of information security principles, frameworks, and best practices (e.g., PCI DSS, COBIT, COSO, NIST and ISO 27000)
Excellent collaboration skills - must be eager to work as part of a cohesive team and work as a partner to others within Nike, Inc. both at WHQ and globally
Experience with ServiceNow, Confluence or JIRA
NASZ PLAN ZATRUDNIENIA
1. Aplikuj
Nasze zespoły składają się z osób o różnych umiejętnościach, wiedzy, pomysłach i doświadczeniach, a każda z nich może dać od siebie coś innego. Chcemy, żebyś znalazł(a) tu coś dla siebie – zapoznaj się z opisami stanowisk, działami i zespołami, aby odkryć, jakie stanowisko będzie dla Ciebie odpowiednie.
2. Poznaj osobę rekrutującą lub przystąp do oceny
W przypadku stanowisk korporacyjnych rekruter(ka) skontaktuje się z Tobą w celu rozpoczęcia procesu rekrutacyjnego i przez cały okres jego trwania będzie pozostawać z Tobą w kontakcie. Rekrutacja na stanowisko związane ze sprzedażą wymaga przeprowadzenia procesu interaktywnej oceny, który obejmuje czat i quizy, a jego ukończenie zajmuje około 10–20 minut. Niezależnie od stanowiska, chcemy jak najlepiej poznać naszych kandydatów i nasze kandydatki, więc zachęcamy do opowiedzenia nam o tym, jak rozumiesz pojęcie obsługi klienckiej na światowym poziomie oraz co sprawia, że jesteś osobą wyjątkową.
3. Rozmowa kwalifikacyjna
Warto podejść do tego etapu z pewnością siebie. W tym celu zapoznaj się z naszymi oczekiwaniami i przygotuj się na pytania, które pomogą nam pogłębić wiedzę o Tobie i Twoim doświadczeniu.
