Principal Security & Compliance Analyst Oracle
Redwood City, CA

Job Description

Executes security controls to prevent hackers from infiltrating company information or jeopardizing e-commerce programs.

Researches attempted efforts to compromise security protocols. Maintains security systems for routers and switches. Administers security policies to control access to systems. Maintains the company's firewall. Uses applicable encryption methods. Provides information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information.

Leading contributor individually and as a team member, providing direction and mentoring to others. Work is non-routine and very complex, involving the application of advanced technical/business skills in area of specialization. Prefer 8 years relevant experience and BA/BS degree.

Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans status or any other characteristic protected by law.

The Oracle Cloud Compliance Security & Risk Management organization ensures the security and compliance of Oracle Cloud from initial design to compliance by way of security policy, processes, and procedure standards definition, assessment/audit and certification, operation and continuous monitoring of cloud based security infrastructure.

Successful candidates for this role must be very comfortable taking a leadership role with regulatory compliance in a fast-paced organization. Candidates will be expected to lead SOC audit compliance efforts, as well as maintain existing regulatory compliance obligations.

Primary responsibilities of this role will include:

* Leads and manages third party SOC audits of Cloud Services with external audit companies, collecting evidence from internal teams, explaining evidence to auditors.
* Manages Financial, Healthcare and potentially other audit assessments/certifications, documentation packages, and conducts analysis and results on a continuous basis;
* Evaluates regulatory compliance requirements and engages with a variety of cross functional teams;
* Assists with engineering design and development of cloud based systems;
* Evaluates and provides reasonable assurance that risk management, control requirements, and governance systems are functioning as intended and will enable the organization's objectives and goals to be met;
* Reports risk management issues and internal controls deficiencies and provides recommendations for improving the organization's operations, in terms of both efficient and effective performance;
* Evaluates information security and associated risk exposures;
* Evaluates regulatory compliance program with consultation from legal counsel;
* Evaluates the Service's audit readiness
* Maintains open communication with management and teams across Oracle Cloud Operations;
* Engages with other internal and external strategic resources as appropriate
* Evaluates applicable global standards & compliance frameworks to establish internal standards, guidelines, policies, processes, and procedures;
* Designs, develops and publishes internal program frameworks, checklists, policy, processes, procedures using creative publishing and editing software tools;
* Systematically and comprehensively documents the Cloud Service's compliance program;
* Other duties as assigned;

Qualifications:

* Excellent verbal and written communication skills
* CISSP, CISA, CISM, CCSK, or PMP certifications desired
* Prefer 3-5 years relevant experience working on SOC, SOX, HIPAA, or PCI audits.
* Prior Cloud Service Provider experience a plus.
* Prefer JD or Engineering degree
* Experience with an external audit firm is preferred

Oracle employee benefits programs are designed individually for each region to ensure they best meets the needs of employees and their eligible dependents. See how ORACLEflex and other benefits help employees thrive at Oracle. http://www.oracle.com/us/corporate/careers/index.html

Oracle is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans status or any other characteristic protected by law.

Please send your resume to debbie.de.haas@oracle.com