About Analog Devices

Analog Devices, Inc. (NASDAQ: ADI ) is a global semiconductor leader that bridges the physical and digital worlds to enable breakthroughs at the Intelligent Edge. ADI combines analog, digital, and software technologies into solutions that help drive advancements in digitized factories, mobility, and digital healthcare, combat climate change, and reliably connect humans and the world. With revenue of more than $9 billion in FY24 and approximately 24,000 people globally, ADI ensures today's innovators stay Ahead of What's Possible™. Learn more at www.analog.com and on LinkedIn and Twitter (X).

Business Information Security Officer

PRINCIPAL DUTIES AND RESPONSIBILITIES

Relationship Management:

• Strong consulting skills with an ability to communicate with multiple departments and levels of management to resolve technical and procedural security risks.
• Ability to clearly communicate and report detailed status to senior management and peers.
• Proactively engage various stakeholders in the business unit as appropriate to get their ‘buy in’ for security initiatives.
• Be successful at influencing changes without direct reporting line authority.
• Reporting status of progress through scorecards at various levels of the organization, including functional score cards, management score cards, and executive score cards.

Compliance and Risk Leadership:

• Demonstrated experience in identifying, assessing, and resolving product security risks and compliance measures.
• Operate as an intermediary for various Risk and Compliance programs (Responsible AI, Cybersecurity, Internal Audit, Business Continuity, Privacy, Product Security, Security Engineering) to ensure the applicable requirements have been tailored to the organization that the BISO aligns too.
• Establish agreement and lead RACI documentation efforts for process improvements related to security and compliance management.
• Help promote training, awareness and best practices within BU operations teams with regard to needed processes and procedures to maintain a secure operating model.
• Strong project management skills with experience defining objectives, identifying resource needs, and ability to execute detailed plans towards goal completion.

Business Process Analysis:

• Ability to identify information security risks, or research and quantify risks reported by others, within de-centralized processes and then articulate and drive proper treatment of risk, including logging and managing exceptions on-going, with relevant stakeholders.
• Ability to frame business process improvement in the context of a departmental or enterprise wide view.

Sales Support:

• Review end customer contracts and provide support for deal closure within the context of what security requirements and liabilities are needed.
• Manage customer audits and RFP responses for BU

Management:

• Influence without authority, collaborate to drive a common compliance methodology and risk management methodology to support consistencies across de-centralized teams.
• Required to act as a team lead to support success of key compliance initiatives, taking the lead role, and assigning/delegating tasks across distributed teams, keeping track of cross functional milestones and deliverables, and driving timely completion in support for the business objectives to operate in a compliant manner.
• Mentoring for non-security personnel across the business.

Compliance Frameworks:

• Individual should have a thorough understanding of cyber security best practices.
• Experience with applying cyber security governance frameworks into a business process including ISO 27002, COBIT, or COSO.
• Experience with various compliance, privacy, and regulatory standards including Sarbanes-Oxley, SSAE 16, PCI-DSS, ISO 27001, HIPAA, TiSAX, CMMC, and Responsible AI frameworks and state and international privacy laws.
• Experience administering and/or auditing various information security technologies/areas including firewalls, intrusi