Job Information
T-Mobile USA, Inc Sr Analyst, Information Security Compliance in Bellevue, Washington
At T-Mobile, we invest in YOU! Our Total Rewards Package ensures that employees get the same big love we give our customers. All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That's how we're UNSTOPPABLE for our employees! Job Overview Are you ready to make a difference in the world of wireless security? Then come join the T-Mobile team as a Sr Analyst, Enterprise Info Security! The Sr Analyst will... Be instrumental in enabling T-Mobile's security compliance to various regulations and audits such as PCI (Payment Card Industry), NY DFS (New York Department of Financial Services), ISO 27001 (International Organization for Standardization), and more! Become a subject matter expert on security regulations, requirements, and best practices across the enterprise to enable compliance for systems, processes, and people. Partner with coworkers to assess compliance risk and create appropriate strategies to effectively comply with requirements then track remediation. Conduct or assist with regular compliance reviews and assessments. Build strong working relationships within own organization and across technology and business teams; consult on and drive organizational compliance strategy and governance; and effectively manage and communicate the activities, status, risks, and issues associated with the compliance program. Main Responsibilities: Develop and maintain partnerships across the enterprise, such as IT operations, development and application support, finance, legal, privacy, risk management, etc. Understand and be aware of strategies and methods that support security and compliance across the enterprise. Consult and advise business and partners on security requirements related to regulations, industry standards, and company policies. Maintain accurate inventory of technology, processes and people that are required to comply with regulations, industry standards, and company policies Investigate and evaluate complex technologies, systems, processes, projects or initiatives, and controls to identify security risks and compliance gaps; work collaboratively with partner teams for resolution if needed; manage remediation timelines and escalations to ensure compliance Develop and test formal security controls Facilitate assessments and certifications with external auditors Minimum Requirements: Qualifications: Computer Science, Information Technology, or related field from an accredited 4-year college or university, Equivalent experience in lieu of degree might be considered. Knowledge of security GRC (Governance, Risk, Compliance), cybersecurity standards and best practices 4-7 years' experience in security, information technology, security GRC (Governance, Risk, Compliance) or related field Experience with standards such as PCI DSS, NY DFS, ISO 27001 or similar Experience managing internal and/or external regulatory related audits and assessments Ability to manage multiple activities or projects simultaneously Ability to understand and speak about various areas of IT technology and security and collaborate with partners from network, technology, business, and legal organizations Ability to identify problems, analyze data and communicate conclusions effectively Ability to read, identify and interpret policies, regulations, and contract security requirements Strong verbal, written and presentations skills Desired: CISSP, CISM, CISA certification Desired: experience as a PCI QSA or ISA Lead and/or participate in strategic key initiatives to enable cybersecurity compliance; consult with and provide feedback to management on compliance strategies and goals Support the budget for assigned projects and initiative