Senior Information Security Professional 1 1

Requisition ID: 274869 

•  Relocation Authorized: None 
• Telework Type: Full-Time Telework 
• Work Location: Glendale, AZ 

Company Overview:

Since 1898, we have helped customers complete more than 25,000 projects in 160 countries on all seven. continents that have created jobs, grown economies, improved the resiliency of the world's infrastructure, increased access to energy, resources, and vital services, and made the world a safer, cleaner place.

 

Differentiated by the quality of our people and our relentless drive to deliver the most successful outcomes, we align our capabilities to our customers’ objectives to create a lasting positive impact. We serve the infrastructure; Nuclear, Security & Environmental; Energy; Mining & Metals, and the Manufacturing and Technology markets. Our services span from initial planning and investment, through start-up and operations.

 

Core to Bechtel is our values – ethics, safety, quality, people, culture, relationships, innovation and sustainability, and our covenants – integrity, respect, collaboration, trust, and delivery. They are what we believe, what customers can expect, and how we deliver.

 

Position Summary:

Are you passionate about information security? We are building the next generation computer security team for our global enterprise, and you can be a critical part of this creative, fast-paced, and exciting team. We are seeking a well-rounded experienced Information Security Professional who has subject matter expertise in governance, risk and compliance. The ideal candidates will have an open mind, bring a fresh perspective to security compliance, and be passionate about protecting, defending, and responding to the challenges of the industry. 

 

As a cybersecurity team member, you will use bleeding-edge tools, and analysis techniques and have the opportunity to work with some of the best-in-the-industry cybersecurity personnel. You will also be surrounded by a great learning environment where continued learning is encouraged and supported. As an Information Security and Compliance professional you will assist the team in many aspects, including but not limited to evaluating third party risk, define and embed security best practices, perform proactive cyber hygiene scans, and ensure that information security policies and procedures meet or exceed the highest standards. 

 

Applicants must have a strong technical background and a thorough understanding of information risks as it relates to the business, viewing security holistically, applying risk management intelligently, using creative problem-solving techniques while maintaining compliance, and the ability to work successfully with other technical and functional groups. This position is remote with some travel to office or project locations as needed. 

 

Responsibilities:

• Evaluate current GRC (Governance, Risk management and Compliance) processes and work flows to leverage technology and automate processes for improvement and efficiency while retaining or enhancing objective risk determination. Be a driving force supporting multiple cybersecurity frameworks and Information Security Management System (ISMS).
• Conduct cyber security risk assessments of Bechtel’s vendors, partners, and suppliers.
• Implement effective and appropriate GRC controls, providing robust protection against emerging security threats. Evaluate hardware and software components, third-party services and data management solutions for cyber security risks and verify associated security controls.
• Participate in the change control process to identify and determine risk to the organization through an understanding of information assets, business processes, systems, and architectures.
• Assist Cyber Security team with meeting or exceeding maturity benchmarks as determined by leadership. Collaborate closely with stakeholders to identify, communicate and proactively manage current and future security risks.
• Perform third party risk assessments and develop guidance that addresses gaps, automates risk scoring, and ensures recommended mitigations are implemented prior to deployment. Work to improve vendor management, risk, and information security policies, standards, and procedures.
• Coordinate with Bechtel’s Legal, privacy, IS&T and security  departments to ensure adequate controls are being met. Work with subject matter experts in drafting security architectures to be shared within the organization.
• Demonstrate ability to effectively communicate complex risks via verbal, written, profiles, and other methods to information security teammates and leadership. 

 

Qualifications and Skills:

Basic Qualifications:

• High School Diploma or equivalent + 6 years relevant experience.
• Must b