IT Compliance & Product Security Analyst

Woodward is committed to creating a great workplace for all team members. Our company and its members are committed to acting with integrity, being respectful and accountable to one another, and staying humble and driven, while maintaining the highest professional and ethical standards.

We are steadfastly committed to attracting the best talent across our communities creating a rewarding workplace. Together we are fulfilling our purpose to design and deliver energy control solutions our partners count on to power a clean future.

Woodward supports our members’ wellbeing and regularly benchmarks with other companies in our industry to offer an extensive Total Reward package for this position. Salary will be determined by the applicant's education, experience, knowledge, skills, and abilities, as well as internal equity and alignment with market data. 

Estimated annual base pay: $95,000(minimum) - $123,000(midpoint) - $152,000(maximum)

All Levels are eligible for the benefits below:

• All members included in annual cash bonus opportunity. 
• 401(k) match (4.5%)
• Annual Woodward stock contribution (5%)
• Tuition reimbursement and Training/Professional Development opportunities for all members  
• 12 paid holidays, including floating holidays. 
• Industry leading medical, dental, and vision Insurance upon date of hire
• Vacation / Sick Time / Vacation Buy-up / Short Term Disability / Bereavement leave. 
• Paid parental leave.
• Adoption Assistance  
• Employee Assistance Program, including mental health benefits. 
• Member Life & AD&D / Long Term Disability / Member Optional Life 
• Member referral bonus 
• Spouse / Child Optional Life / Optional AD&D / Healthcare and Dependent Care Flexible Spending 
• Voluntary benefits, including:  
  • Home / Auto Insurance discounts 
  • Whole Life Insurance / Critical Illness Insurance / Legal Assistance / Military Leave 

Key Responsibilities:

• Oversees and manages the Vulnerability Management program, reports on Woodward’s progress mitigating vulnerabilities, key performance indicators, and progress to resolving issues.
• Develops cases for process and tool improvements using vulnerability, incident, and secure development metrics; assists incident response teams.
• Creates and updates IT compliance and product security policies to align with regulations and best practices.  Inputs vulnerability management changes and procedures into core policies.
• Tracks and analyzes changes in relevant laws and regulations to ensure vulnerability management compliance. Identifies emergent threats and other challenges to a robust vulnerability management program. 
• Performs audits of IT systems to ensure adherence to internal policies such as vulnerability management and remediation.
• Advise segments on threats to cyber-physical security development, incorporating customer specifications, threat analysis, regulatory requirements, and lifecycle activities.

Key Skills:

• Regulatory Expertise: In-depth understanding of IT compliance regulations (NIST, CMMC, SOX, ISO, GDPR, CRA, PART-IS) and segment industry standards such as IEC 62443, ISO 21434 and DO-326A. Understands the standards development lifecycle
• Risk Assessment: Expert in evaluating compliance and supply chain security risks, implementing mitigations, and conducting Failure Mode Effects Analysis and advanced cyber-physical assessments.
• Audit Management: In-depth skill in planning, executing, and managing internal and external IT compliance and product security audits to ensure adherence to standards and customer expectation.
• Policy Development: Expertise in analyzing current policy, identifying contemporary language changes, working with legal and other stakeholders to write effective policies to drive a secure environment in line with business objectives
• Data Analysis: Expertise in analyzing complex data sets to monitor compliance status and detect potential issues or anomalies.
• Communication: Detailed understanding and ability to convey complex compliance and product security information clearly and concisely to diverse stakeholders and build consensus.
• Problem Solving: Adept at resolving complex product security and compliance challenges by applying analytical thinking and innovative solutions. Ability to look outside and pull in non-traditional information sources.
• Technical Knowledge: Strong understanding of IT infrastructure, security controls, and systems to assess compliance effecti