Security And Privacy Compliance Principal

Qualifications:

- 8-10 year(s) of direct working experience in Security and Privacy Compliance or general risk program management or related field is required.
- Knowledge security and privacy regulations/frameworks (GDPR, CCPA, PCI-DSS, ISO27001, SOX, etc.).
- At least one of certifications: CISSP, CISM, CISA, CRISC, CIPT, CIPM, CIPP/E or other certification related to security and privacy compliance required.
- Knowledge and understanding of privacy by design and security design requirements is a must
- Experience and working knowledge of security related technology (e.g. Identity Management tools, Firewalls, etc.)
- Working knowledge of ERP systems (e.g. NetSuite, PeopleSoft FDM and Oracle eBusiness) security and privacy standards and implementation is preferred.

Job responsibilities and duties include:

- perform security and privacy compliance assessments
- manage security and privacy compliance projects
- Build/Develop compliance programs to assess readiness on new/existing compliance requirements
- Design and close remediation with process owners
- Perform or lead process engineering assessments/consultation on new features implementations/changes that impacts the security and privacy compliance requirements
- Manage internal/external audits of the Oracle NetSuite services including schedule timelines, resources needed etc.
- Assist management in strategy
- Present reports to senior management
- Review/QA program manager and senior analyst work