GRC Analyst - CIS at Nike

Become a Part of the NIKE, Inc. Team NIKE, Inc. does more than outfit the world's best athletes. It is a place to explore potential, obliterate boundaries and push out the edges of what can be. The company looks for people who can grow, think, dream and create. Its culture thrives by embracing diversity and rewarding imagination. The brand seeks achievers, leaders and visionaries. At Nike, it's about each person bringing skills and passion to a challenging and constantly evolving game. Who are we looking for: We're looking for a GRC Analyst to join Nike's Corporate Information Security Governance, Risk, and Compliance (GRC) team, which is responsible for enterprise-wide GRC ensuring Nike leadership has the information needed to make strategic risk-based decisions and maintaining compliance with international regulations while enabling the achievement of Nike business objectives globally. This role will meet with business and technology teams across Nike and consult with them on their security and compliance requirements. We want an individual who is passionate about GRC, someone with a good working knowledge of industry best practice frameworks, such as ISO, NIST and CoBIT. Responsibilities of the Candidate: If this is you, you'll be working with the GRC team and performing these key tasks: Evaluate and process exceptions to information security policies and standards. Perform risk assessments of third-party vendors and ensure the business objectives align with the type and volume of data used in maintaining a "need to know/use" mindset. Utilize your thorough understanding of ITGC's to consult with Technology units on compliance matters. Champion information security policies, standards, controls, and processes so that compliance requirements are addressed as part of "business as usual" operations. Consult on control design and control operations related to support of compliance requirements. Perform Compliance control validation testing to determine the operating e