Compliance readiness analystCiena

Since 1992, Ciena has been driven by a relentless pursuit of network innovation. We believe in a network that grows smarter, more agile, and more responsive every day. This means that when you digitally interact in your world - picking up the phone, streaming video, texting a friend or loved one - your interactions are being enabled by Ciena technologies. Ciena makes your social / entertainment / business existence REAL.
No candidate will meet every single desired qualification. If your experience looks a little different from what we've identified below and you think you can bring value to the role, we'd love to learn more about you!
The Security Organization
The Security team at Ciena is a tight knit group of skilled professionals who share the same passion for defending against cyber criminals. With the increase in volume and sophistication of cyber-crime, we are growing and have tons of exciting work planned.
Responsibilities:
Assist in the implementation and execution of Ciena's overall Security program vision and activities.
Risk oriented mindset with a good understanding of cyber and information security risks to an organization's systems, processes, and intellectual property. Use sound judgment in assessing the significance of risks or issues.
Act as a liaison between auditors and internal stakeholders and lead external SOC 2 and ISO 27001 assessments
Assist in the monitoring, analysis and reporting of security governance and compliance controls. Support for possible evaluation of internal controls, risk assessments, communications, and maintenance of documentation.
Collate and document current processes and controls for different areas to demonstrate current security and controls environment.
Ability to review and summarize process/control documents.
Understand and interpret policy/procedures/flow charts. Update process flows and documentation with any process/control changes.
Assess monitoring results and metrics for possible control or process improvements and provide periodic progress reports to management.
Assist with gap analyses, implementation and documentation efforts towards compliance frameworks and certification programs such as NIST Cybersecurity framework, CISv8, SOC 1/2, ISO 27001/27002, SOX, GDPR, etc.
Strong critical thinking, organization, problem solving, and interpersonal skills, including ability to effectively address issues in collaboration with others and ability to proactively identify and address problems.
Assist in coordinating with auditors and penetration testers for different audits and security assessments. Support security audits and assessments to ensure timely completion, while maintaining positive and collaborative engagement with all stakeholders.
Review the progress and any findings and work with different teams to manage remediation of control gaps from the assessments and audits.
Facilitate timely identification, escalation, remediation, and follow-up for outstanding audit issues.
Experience working with implementing and validating security and IT controls as well as leading remediation of control gaps.
Minimum Qualifications:
Bachelor's degree in Cybersecurity, Computer Engineering, Information Technology, or related field.
Excellent presentation, speaking and written communication skills to manage communication with a diverse group of stakeholders at all organization levels.
Ability to clearly express concepts and ideas, verbally and in writing.
Assist in influencing stakeholders to implement necessary process modifications to meet regulatory and policy needs.
Experience with enterprise security tools and security architecture best practices
Experience with preparing and testing IT Contingency Plans
Experience with internal controls, risk assessments, business process and internal IT control testing or operational auditing
Preferred Qualifications:
Candidate will possess ability to be a successful self-starter
Knowledge of IT security aspects towards key areas like cloud computing, DevOps, database management systems, SDLC, IT General Controls (ITGC) and agile development methodologies.
Possesses relevant security certifications such as CISSP, CISA, CIA, CISM, CompTIA Security+, CCSP, GSEC, etc.
Experience of working on reporting, analytics, and data modeling tools such as Power BI, Tableau, ThoughtSpot, Looker, etc.
Proficient in working on Microsoft Word, Excel, PowerPoint, and computer literate with an interest in learning new software programs.
Ability to work after hours if needed
#LI-SM
At Ciena, we are committed to building and fostering an environment in which our employees feel respected, valued, and heard. Ciena values the diversity of its workforce and respects its employees as individuals. We do not tolerate any form of discrimination.
If contacted in relation to a job opportunity, please advise Ciena of any accommodation measures you may require.
Ciena

Manila City, Metro Manila
Permanent
Full-time