Sr. Manager I Product Management, Risk Expert, Cybersecurity- Policy

  • Walmart
  • Bentonville, AR, United States
  • 08/24/2021

Job Description

Position Summary...

What you'll do...

The Technology Policy Team oversees the development of technology policies globally for Walmart’s technology teams, addressing both Information Security Policies and General Technology Policies.

Reporting directly to the Vice President of Governance, Risk and Compliance, you will help to ensure that technology policies meet the needs of the business and are aligned with applicable legal, compliance, and operational excellence standards.  You will write policies and standards that are up-to-date, comprehensive, easy to understand and ultimately being followed by Walmart technology teams worldwide. 

You will make an impact by:

  • Providing information technology governance administration and direction for a global technology organization 
  • Modeling governance concepts (ITIL, COBIT, CMM) and providing policy guidance through collaboration and consensus building
  • Writing information technology policies and standards that directly support our business objectives and fulfill regulatory requirements, contractual obligations, and industry standards
  • Supporting policies and continually meeting or exceeding best practices while adhering to higher-level guidance and internal controls
  • Developing processes to identify additional policy gaps
  • Engaging subject matter experts to facilitate the creation of new policy drafts
  • Negotiating policy language to best address the competing needs of different Tech constituencies (while remaining compliant with applicable legal, compliance, and standard requirements).

You Will Sweep Us Off Our Feet If:

  • You have [5] years’ experience working in IT
  • You have hands-on experience writing tech policies and standards
  • You are familiar with IT and IT Security standards (ISO, ITIL, CORBIT, COSO, NIST-CFS, HIPAA, PCI-DSS, etc)
  • You have excellent grammar skills and apply them in everything you do
  • You are efficient and organized and apply those skills in your writing and daily performance
  • You are comfortable communicating and working with people at various levels and in diverse roles
  • You have knowledge and experience related to a variety of technology or information security topics.
  • You are able to produce technical writing that can be understood and implemented by non-technical professionals.

If you’re ready to apply your talents and skills to providing governance to a global technical organization, then come work with us today!

Minimum Qualifications...

Outlined below are the required minimum qualifications for this position. If none are listed, there are no minimum qualifications.

Bachelor’s degree in Computer Science, Information Technology, Engineering, Computer Information Systems, or risk related field and 6 years' experience in information technology or risk related field within the last 10 years OR 8 years' experience in information technology or risk related field within the last 10 years.

Preferred Qualifications...

Outlined below are the optional preferred qualifications for this position. If none are listed, there are no preferred qualifications.

Creating and presenting technical strategies and technical solution recommendations, Current and emerging technologies (for example, mobile, cloud, federation, network, cryptography, firewalls, security technologies, intrusion detection and/or prevention devices, penetration testing, architecture), Designing and implementing technical solutions for information security, Integrating new technologies into existing technology portfolio, Investigations, audits, or assessments, evidence handling, and document collection and retention consistent with judicial best practices, Leading cross-functional teams providing support through the project lifecycle, Payment card industry data security (PCI), International Organization for Standardization (ISO), Health Insurance Portability and Accountability Act (HIPPA), and/or Sarbanes-Oxley Act (SOX) compliance and/or reporting process, Risk frameworks (for example, COBIT, ISO 27005), Working in a global environment

CISA - Certified Information Systems Auditor - Certification, CISSP - Certified Information Systems Security Professional - Certification

Primary Location...

8TH AND J STREETS, BENTONVILLE, AR 72712-0000, United States of America

Employer Job Listing Link

https://click.appcast.io/track/ao9c4in-org?cs=37f&jg=1yfx&bid=lUf2CslKyPxm6i440ZgUYA==