Mid - level SailPoint Identity Security Cloud Platform Specialist enhancing Identity and Access Management at Boeing. Collaborating on application onboarding and identity governance solutions for a transforming IAM ecosystem.
About the role
- Global Manager of Information Security overseeing the Governance, Risk, and Compliance program at BCM One. Leading audits, developing policies, and ensuring legal compliance in a hybrid role.
Responsibilities
- Define and implement the organization's GRC program, including policies, procedures, and controls
- Oversee and manage our global information security governance and compliance programs
- Develop and maintain robust security policies, procedures, and best practices
- Coordinate internal and external audits (SOC, ISO, Cyber Essentials Plus), ensuring readiness and compliance
- Conduct internal audits, identify gaps, and recommend corrective actions
- Deliver training sessions and security awareness initiatives across the organization
- Lead third-party risk assessments (TPRM) and respond to vendor security assessments
- Chair ISMS Management Review meetings and monitor cyber risk metrics
- Support IT with vulnerability management and penetration testing planning
- Contribute to data privacy and governance compliance under GDPR, UK DPA, NZ Privacy Act, etc.
- Support Business Continuity Planning (BCP) testing and documentation
Requirements
- Bachelor’s degree in Computer Science, Information Systems, or related field (or equivalent work experience)
- 10+ years of experience in IT governance, compliance, or risk management at a global company
- Proven experience with international compliance, specifically GDPR, data protection laws, and compliance initiatives
- Six Sigma is a nice to have
- ISO 27001 Internal Auditor certification is highly desirable
- Strong understanding of information security and IT governance frameworks
- Familiarity with telecommunications and technologies like networking and VoIP is preferred
- Ability to manage complex, cross-functional projects with a high attention to detail
- Excellent communication and stakeholder engagement skills
- Proficient in Microsoft Office Suite, especially SharePoint, OneDrive, Outlook, Teams, etc.
Benefits
- Competitive industry salaries
- Comprehensive medical, dental, and vision insurance
- Company-provided life and disability insurance
- Matching 401 (k) plan
- Employee Emergency Assistance Fund
- Paid holidays and vacation time
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Security Guard ensuring safety and security at Lincoln Electric facility in Euclid, Ohio. Monitoring access control systems, alarm systems, and coordinating emergency responses effectively.
Cybersecurity & Data Security Junior Associate supporting organizations in data protection through risk assessments and policy development. Collaborating with teams for meaningful contributions in cybersecurity.
Senior Security Consultant delivering complex cybersecurity engagements for high - profile clients. Advising organizations on critical national infrastructure security and compliance.
Safety Specialist focused on fortifying safety culture through engineering and efficiency measures. Managing compliance and conducting training in a hybrid work setting.
Manufacturing Security Specialist ensuring safe and secure satellite manufacturing at ICEYE. Focused on protecting facilities, production, and sensitive information from threats.
Information Security Specialist responsible for implementing security solutions in Tokio Marine. Analyzing and enhancing cybersecurity architectures and tools for diverse IT projects.
Security Engineer II focusing on EDR at Cyderes, providing expert technical support and improving security postures across enterprise environments.
Security Engineer responsible for managing Microsoft Sentinel and Defender XDR systems at Cyderes, a cybersecurity service provider. Focused on detection engineering and platform optimization in a hybrid work setting.
Entra ID Security Specialist developing Identity & Access Management solutions focusing on Microsoft Entra ID. Strategically enhancing modern identity and security architectures in a hybrid work environment.