Senior Security GRC Analyst

Overview:

At Zebra, we are a community of innovators who come together to create new ways of working. United by curiosity and a culture of caring, we develop smart solutions that anticipate our customer’s and partner’s needs and solve their challenges.

Being part of Zebra Nation means you are seen, heard, valued, and respected. Drawing from our unique perspectives, we collaborate to deliver on our purpose. Here you are part of a team pushing boundaries today to redefine the work of tomorrow for organizations, their employees, and those they serve.

You’ll have opportunities to learn and lead in a forward-thinking environment, defining your path to a fulfilling career while channeling your skills toward causes you care about—locally and globally.

Come make an impact every day at Zebra.

What We're Looking For:

Senior Security GRC Analyst

Evaluates, monitors, and assesses the design and operating effectiveness of security controls, defenses and countermeasures to intercept and prevent internal or external attacks or attempts to infiltrate company email, data, e-commerce and web-based systems. Serves as a key governance partner driving EU regulatory compliance (e.g., NIS2, GDPR)

Responsibilities:

• Evaluates and tests the design and operational effectiveness of security controls, countermeasures, and defensive architectures across company email, data, e-commerce and complex web-based systems.
• Executes gap assessments and ongoing compliance assurance for key European and international cybersecurity regulations (e.g., NIS2 , GDPR, and Cyber Resilience Act). Translates complex statutory mandates into actionable internal security requirements.
• Executes highly important information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information and systems.
• Internal or external, client-focused, working in conjunction with Professional Services and outsourcing functions.
• Manages complex company-wide, web-enabled GRC solutions.
• Manages department key performance metrics and actively engage in the continuous improvement of the Information Security department
• Creates reports that highlight areas where process or technology (i.e. IT infrastructure) may be improved, and advise Information Security, IT and other Business Units, on findings.
• Prepares appropriate documentation (e.g. narratives, flowchart, control matrices, segregation of duties analyses, application controls, assessment reports, etc.) in support of all assurance and consulting work performed.
• Conducts information security compliance to policy assessments (e.g. ISO2700X, NIST, etc.) to evaluate risk, compliance, and control effectiveness, focusing on long-term strategies for a public company, and partner with business units to support implementation of remediation plans