empty

Information Security Manager (GRC)

Oracle

Job Description

Posted on: 
November 26, 2024

Summary and company overview

Who We Are

We are a world class team of high caliber application security researchers, analysts and engineers who thrive on new challenges. We are an inclusive and diverse team with a full spectrum of experience distributed globally. We have the resources of a large enterprise and the energy of a start-up, working on a critical greenfield software assurance project collaboratively with our cloud team. The Software Assurance organization has the mission to make application security and software assurance, at scale, a reality. We are a dedicated team, leveraging each other’s insights and abilities to produce cutting edge solutions to difficult problems through automation and CI/CD. Join us to grow your career and create the future of software assurance at scale together.

Responsibilities

  • Manage and oversee the implementation of GRC programs across the organization.
  • Maintain an in-depth understanding of the broad regulatory landscape impacting the organization, translating changes into actionable initiatives to ensure ongoing compliance.
  • Develop and monitor key program metrics.
  • Ensure compliance with internal security requirements and standards.
  • Develop and implement security policies and procedures.
  • Maintain risk registers, develop mitigation strategies, and track the completion of corrective actions.
  • Manage security awareness and training programs.
  • Manage and mentor a team of GRC professionals.

Job Requirements

What You’ll Bring

  • Proven experience managing GRC efforts in a highly regulated environment, with deep knowledge of risk management, compliance, and/or related functions.
  • Strong understanding of regulatory requirements such as National Institute of Standards and Technology (NIST) and Center for Internet Security (CIS) standards, and the General Data Protection Regulation (GDPR).
  • Experience developing and implementing security policies and procedures.
  • Expertise in maintaining risk registers and developing corrective action plans.
  • Ability to compile and analyze security metrics and performance data.
  • Experience managing security awareness and training efforts.
  • Experience conducting or supporting IT audits.
  • Strong written and verbal communications skills, with the ability to communicate complex security concepts to diverse stakeholders.
  • 7+ years of relevant work experience.
  • 6-8+ years of experience in managing GRC initiatives for regulated organizations.

Nice to Have

  • Strong knowledge of Oracle security policies, compliance requirements, and standards.
  • Certifications: professional certifications such as the Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or Certified Information Systems Security Professional (CISSP).
  • Experience with incident management: experience in developing, executing, and managing incident response plans.
  • Data privacy experience: familiarity with data privacy regulations and standards, particularly in the context of e-commerce, AdTech, or social media platforms.

Additional commentary

What We’ll Give You

  • A team of very skilled and diverse personnel across the globe.
  • The resources of a large, global operation while still having the small, start-up feel of a smaller team day to day.
  • Ongoing extensive training and skills development to further your career aspirations.
  • Incredible benefits and company perks.
  • An organization filled with smart, enthusiastic, and motivated colleagues.
  • The opportunity to impact and improve our systems and delight our customers.

Disclaimer:

Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.

Range and benefit information provided in this posting are specific to the stated locations only

US: Hiring Range: from $120,100 to $251,600 per annum. May be eligible for bonus, equity, and compensation deferral.

Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle’s differing products, industries and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity.

Oracle US offers a comprehensive benefits package which includes the following:

  1. Medical, dental, and vision insurance, including expert medical opinion
  2. Short term disability and long term disability
  3. Life insurance and AD&D
  4. Supplemental life insurance (Employee/Spouse/Child)
  5. Health care and dependent care Flexible Spending Accounts
  6. Pre-tax commuter and parking benefits
  7. 401(k) Savings and Investment Plan with company match
  8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation.
  9. 11 paid holidays
  10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours.
  11. Paid parental leave
  12. Adoption assistance
  13. Employee Stock Purchase Plan
  14. Financial planning and group legal
  15. Voluntary benefits including auto, homeowner and pet insurance

The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted.

Summary and company overview

Who We Are

We are a world class team of high caliber application security researchers, analysts and engineers who thrive on new challenges. We are an inclusive and diverse team with a full spectrum of experience distributed globally. We have the resources of a large enterprise and the energy of a start-up, working on a critical greenfield software assurance project collaboratively with our cloud team. The Software Assurance organization has the mission to make application security and software assurance, at scale, a reality. We are a dedicated team, leveraging each other’s insights and abilities to produce cutting edge solutions to difficult problems through automation and CI/CD. Join us to grow your career and create the future of software assurance at scale together.

Apply now