PlayStation is looking for an Information Security Analyst to join our team and operate the day-to-day Governance, Risk and Compliance management processes.Based in San Diego, the candidate will be working with business, technical and third party partners as well as working collaboratively with the wider Information Security team across the globe.What you'll be doing:Coordinates all aspects of information security and provides consulting services to business units and other partners.Supports the security risk assessment methodology, policy, strategy, and process by performing hands-on gap and risk assessments to identify and document information security risks associated with applications, technical configuration, and emerging technologies.Supports the third-party due diligence and assurance assessment processes and able to articulate and advise on associated risks to the business, contractual requirements and resulting recommendations.Triage information security incidents, working with our 24/7 SOC teams, business partners and related third parties, as well as be responsible for reporting and raising where necessary.Works with business partners to identify and implement information security requirements related to projects and engagements.Develops information security awareness communications and education programs to the business.Monitors and reviews IT security controls to identify operational efficiency.Performing security audits related to critical systems.Identifies remediation requirements and can negotiate, track and report on remediation efforts.Works with GRC and other security tools to collect and maintain security and risk information.Maintains broad knowledge of industry trends in the field of information security and other technologies relevant to systems handled by the operations teams.Work with technical teams, partners, and leadership teams to translate security risk mitigation plans into action items to mitigate risk.Advances the InfoSec program via partnerships with shared services teams within information security.What we're looking for:At least three years of related work experience.Experience in business partner/stakeholder management.Experience in security due diligence and audits.Proven technical background in Information Security risk management, including work related to cloud infrastructure, SaaS applications, emerging technology.Experience with third party due diligence and contract reviews.Desirable Knowledge and Skills:Familiarity with AWS (or similar) cloud security and infrastructureKnowledge of and experience with SaaS and web infrastructure securityExperience with third party due diligenceAwareness of security risks associated with AI and other emerging technologiesMicrosoft Windows and Apple Mac OS hardeningPolicy administrationSecurity standards such as SOX, ISO 27001, NIST, PCIAbility to handle parallel tasks and accurately detail resolutionsExcellent attention to detail and meticulous in approachExcellent verbal and written communicationOutstanding independent problem-solving experienceBachelor's degree in Computer Science, Information Security, or related field or equivalent experienceCISSP and/ or CCSP preferred#LI-GM1
