Information Security GRC Specialist

Company Description

At Western Digital, our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible, possible.

At our core, Western Digital is a company of problem solvers. People achieve extraordinary things given the right technology. For decades, we’ve been doing just that. Our technology helped people put a man on the moon.

We are a key partner to some of the largest and highest growth organizations in the world. From energizing the most competitive gaming platforms, to enabling systems to make cities safer and cars smarter and more connected, to powering the data centers behind many of the world’s biggest companies and public cloud, Western Digital is fueling a brighter, smarter future.

Binge-watch any shows, use social media or shop online lately? You’ll find Western Digital supporting the storage infrastructure behind many of these platforms. And, that flash memory card that captures and preserves your most precious moments? That’s us, too.

We offer an expansive portfolio of technologies, storage devices and platforms for business and consumers alike. Our data-centric solutions are comprised of the Western Digital®, G-Technology™, SanDisk® and WD® brands.

Today’s exceptional challenges require your unique skills. It’s You & Western Digital. Together, we’re the next BIG thing in data.

Job Description

This is a Hybrid work environment with 3 days in office.

Job Description

As an Information Security GRC Specialist, you will be critical in managing and assessing information security risks, developing robust risk management strategies, and generating insightful reports and metrics.  You will collaborate with cross-functional teams, providing expert guidance and analysis to enhance our information security posture and ensure compliance with industry standards and regulations.

Key Responsibilities

• Lead risk assessment and mitigation across the organization, including conduct thorough risk assessments to identify, evaluate, and prioritize information security risks
• Identify vulnerabilities, threats, and potential impacts on the organization's information and technology assets.
• Develop and drive implementation of effective risk management strategies to mitigate identified risks, ensuring alignment with industry best practices and regulatory requirements.
• Collaborate across the organization to ensure the integration of risk management practices into organizational processes and projects.
• Generate comprehensive reports and metrics to communicate the status of information security risks to stakeholders and leadership.
• Analyze security data to identify trends, vulnerabilities, and areas for improvement.
• Collaborate with internal and external auditors to facilitate security audits and assessments.
• Stay current with industry trends, emerging threats, and best practices for information security and risk management.
• Provide expert guidance and support in developing and maintaining information security policies, standards, and procedures.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or equivalent work experience.
• 8+ years of experience in information security, including risk management, risk assessments, reporting, and metrics analysis, and hands-on with at least one of the following:  security engineering, network security, identity and access management, security operations, and/or software development security.
• Relevant certifications such as CISSP, CISM, CRISK, or similar are highly desirable.
• Strong understanding of information security frameworks, standards, and best practices (e.g., ISO 27001, NIST, GDPR).
• Experience in conducting risk assessments, vulnerability assessments, and compliance audits.
• Familiarity with regulatory requirements such as SOX, GDPR, or other industry-specific standards.
• Proficiency in risk assessment methodologies, tools, and techniques.
• Experience in generating and interpreting information security metrics and reports.
• Excellent analytical and problem-solving skills with attention to detail.
• Strong communication and interpersonal skills, with the ability to explain complex security concepts to non-technical stakeholders.
• Ability to work independently and collaboratively in a fast-paced environment.

Additional Information

Western Digital is committed to providing equal opportunities to all applicants and employees and will not discriminate based on their race, color, ancestry, religion (including religious dress and grooming standards), sex (including pregnancy, childbirth or related medical conditions, breastfeeding or related medical conditions), gender (including a person’s gender identity, gender expression, and gende