Senior Cybersecurity Compliance Analyst

Posted:
12/4/2024, 7:48:15 PM

Location(s):
Hilversum, North Holland, Netherlands ⋅ North Holland, Netherlands

Experience Level(s):
Senior

Field(s):
IT & Security

Become a Part of the NIKE, Inc. Team

NIKE, Inc. does more than outfit the world's best athletes. It is a place to explore potential, obliterate boundaries and push out the edges of what can be. The company looks for people who can grow, think, dream and create. Its culture thrives by embracing diversity and rewarding imagination. The brand seeks achievers, leaders and visionaries. At Nike, it’s about each person bringing skills and passion to a challenging and constantly evolving game.

WHO YOU’LL WORK WITH

As a Senior Cybersecurity Compliance Analyst, you will work with Nike’s internal and external audit teams and the business and technology teams in our logistic centre to perform and support control validation testing as part of the annual SOX (Sarbanes Oxley) audit process. You will be part of Nike’s EMEA cybersecurity team and report to the EMEA Director of Cybersecurity. 
 

WHO WE ARE LOOKING FOR

Your role on the team will include leveraging your knowledge of industry best practices, people and problem-solving skills to ensure regulatory (e.g., SOX, Sarbanes Oxley) and non-regulatory (e.g., Company Policy and standards) compliance functions are properly executed. 

You must be passionate about control practices and compliance, as you'll need a strong working knowledge of industry best practice frameworks, such as ISO, NIST and CoBIT and controls testing/validation and control design methodologies.  You will regularly meet with business and technology teams and their leaders to ensure controls are designed and effective in meeting our regulatory requirements. You will work cross-functionally within the Corporate Information Security, Risk and Compliance (CIS) teams and across Nike,Inc. for information security compliance operations.  

We're looking for someone who has clearly demonstrated skills and experience, since your responsibilities will include, but not be limited to:

  • Ensure controls are design  and operating effectively in meeting our SOX requirements.  
  • Consult on control design and control operations related in support of compliance requirements.
  • Understand the relationship between information security policies, standards, procedures, and controls as they pertain to the delivery and maintenance of quality systems so that you can effectively advocate information security rationale to business stakeholders.

This opportunity requires skills and experience related to controls design & testing to ensure compliance with regulatory requirements for SOX.  This role requires experience in the SOX compliance space with a focus on the emergence of Cloud controls design, tooling (e.g. IAM solutions) You must be comfortable working in an ambiguous, yet fast-paced, environment.   

  • Proven experience in IT Audit, internal Audit, and/or IT compliance history 
  • Knowledge of information security principles, frameworks, and best practices (e.g., PCI DSS, COBIT, COSO, NIST and ISO 27000).
  • Excellent collaboration skills – must be eager to work as part of a cohesive team and work as a partner to others within Nike, Inc. both at WHQ and globally.
  • Current on information security technologies, trends, standards, and best practices.
  • Bachelor's degree in Business Information Management, Information Security, Computer Science, Finance, or Accounting or relevant years of experience. 
  • CISA, CRISC, CISSP, or CISM certifications are beneficia but, not required. 
  • Strong business acumen to quickly learn new business processes and understand how the SOX ITGC’s support the business in achieving annual compliance.
     

WHAT YOU’LL WORK ON

As a Senior Cybersecurity Compliance Analyst, your role on the team will include leveraging your knowledge of industry best practices, people and problem-solving skills to ensure regulatory (e.g., SOX, Sarbanes Oxley) and non-regulatory (e.g., Company Policy and standards) compliance functions are properly executed. 

Note: Relocation support is not available for this role.