Title: Security Analyst, Policy & Compliance - SNEI SD
Location: CA-San Diego
Sony Network Entertainment International LLC (SNEI), a subsidiary of
Sony Corporation of America, is the premier provider of digital entertainment.
Through the Sony Entertainment Network portal, consumers around the world are
able to access their favorite digital entertainment conveniently and instantly
on their favorite connected devices. SNEI offers the latest and highest quality
music, video, and game content through Sony Entertainment Network as well as
PlayStation Network while also delivering third-party services. In
addition, SNEI provides a compelling consumer experience through innovative
content discovery features and a simple user interface that is globally
consistent, yet locally relevant.
Security Analyst
– Policy & Compliance
Location:
San Diego, CA
Reporting to the Director of Security
Governance, the Security Analyst is an entry to mid-level member of the Sony
Network Entertainment (SNEI) Security team. The Security Analyst will assist the Director of Security Governance to
ensure that policy and compliance documentation, requirements and controls are
properly and timely identified, mapped, tracked, reviewed, and reported for the
organization to increase its security posture. The
Security Analyst will ensure that documentation, assessment information, and
GRC software are kept up to date. The
Security Analyst will work closely with other members of the Security Team to
gather control information to support the Security Program and SNEI Common
Control Framework metrics and reporting.
Responsibilities:
* Works with
security management to develop and maintain the SNEI Common Control Framework.
* Works with GRC
tools to ensure security and risk information is collected and kept up to date.
* Performs policy research,
development, maintenance and management function for the Security Team.
* Monitors and
reviews security controls to identify operational effectiveness.
* Helps design new
controls for addition to the SNEI Common Control Framework and works with
Security Team members to implement these controls effectively.
* Gathers and
collects security information to provide timely security metrics reports for
security management.
* Maps policies,
procedures, and processes to controls to ensure adequate control coverage.
* Performs process
and control walkthroughs and documents control narratives as assigned.
* Helps to maintain
the vulnerability & compliance management programs.
* Helps to ensure
that assets are tracked and appropriate controls are applied.
* Helps develop
remediation lists and tracks completion of work done to remediate control
deficiencies.
* Works with
Security Team members to track and coordinate assigned security projects.
* Assists with
evaluations of security technology & trends.
* Helps conduct
training sessions and develops training materials as assigned.
* Maintains clear
communications, documentation, and timely support for security compliance
activities.
* Bachelor’s degree
in information technology related field.
* Some technical
and/or security experience, a plus.
* Experience
working within a team to deliver and track solutions.
* Ability to
identify, monitor and remediate security compliance issues.
* Hands-on
experience working with Archer GRC tools and enterprise software, a plus.
* Ability to
complete assigned work on time and to specifications.
* CISSP, CISA,
CISM, or other certifications a plus.
* Excellent verbal
and written communication skills.
Sony is an
Equal Opportunity Employer. All persons will receive consideration for
employment without regard to race, color, religion, gender, pregnancy, national
origin, ancestry, citizenship, age, legally protected physical or mental
disability, covered veteran status, status in the U.S. uniformed services,
sexual orientation, marital status, genetic information or membership in any
other legally protected category.
We strive to
create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.
We sincerely
appreciate the time and effort you spent in contacting us and thank you for
your interest in SNEI.
Job: Information Technology
