SHEIN
GRC Risk Analyst III
Los Angeles · Mid
Sponsorship not specifiedDetected 11 days ago
ExpressData VisualizationCybersecurityComplianceProcess ImprovementCommunicationProblem SolvingOrganizational SkillsRisk ModelingCISSP
About the role
- SHEIN Global Security & Risk Management is a global security organization that oversees security infrastructure, risk management, data privacy, governance and regulatory compliance across SHEIN's global footprint.
- It is composed of a team of security professionals, innovators and thought leaders that have had decades of global security experience, led large scale transformations, and served in Fortune 500 executive roles.
- Here, innovation isn't simply about protecting and defending our company.
Responsibilities
- Develop applications to analyze security risks and trends via risk modeling and visualization.
- Document, track, monitor, and report risk assessment and risk management activities to bring appropriate visibility to stakeholders and leadership.
- Collaboratively work with colleagues globally to develop, implement, and mature security compliance and control frameworks and risk methodologies.
- Work closely with technology and legal partners and business units to ensure appropriate security and data protection requirements are incorporated into third-party engagements.
- Maintain a current and comprehensive understanding of relevant industry standards to incorporate into the risk management strategy, framework, and program.
Requirements
- A minimum of 5 years of experience in security risk management, including business impact analysis, risk assessment and treatment, risk metrics and trend analysis.
- Possess a bachelor's degree or higher in the field of information security, engineering, computer science or equivalent advance technology field of study.
- Strong knowledge of security and privacy standards, regulations and guidelines such as ISO 27k, NIST, CCM, PCI DSS, GDPR, CCPA.
- Strong written and verbal communication skills, with the ability to translate complex and technical issues to all levels of personnel.
- Detail oriented and highly organized, with the ability to thrive in a fast-paced environment and prioritize accordingly.
- High level of personal integrity, with the ability to professionally handle confidential matters and exudes the appropriate level of judgment and maturity.
Nice to have
- Hands-on experience with one or more programming languages for augmenting risk analysis or reporting is preferred.
- Experience with data visualization tools (e.g., Power BI, Tableau), and the application of emerging technologies in security analytics is a plus.
Skills
- Practical knowledge and experience working with threat modeling frameworks such as STRIDE, MITRE ATT&CK, OCTAVE desirable.
- Strong analytical and problem-solving skills.
Benefits
- Bonus eligible
- Healthcare (medical, dental, vision, prescription drugs)
- Health Savings Account with Employer Funding
- Flexible Spending Accounts (Healthcare and Dependent care)
- Company-Paid Short-Term and Long-Term Disability <span data-ccp-props="{"335557856":16777215,"335559739":
This listing is sourced directly from SHEIN's careers page and normalized into a canonical job model.