Risk and Compliance Analyst
Poland
Responsibilities
Location Kraków, PL Job ID REQ-052110PerkinElmer is searching for a Risk and Compliance Analyst to join our risk and compliance program. As part of the CISO function, directly reporting to the Head of Risk and Compliance, the Risk and Compliance Analyst will support the design and operation of our compliance program supporting a 1B+ in revenue global manufacturing and services business. The successful candidate will have the opportunity to partner with a global risk and compliance team in Boston, Massachusetts; Pune, India; and Rodgau, Germany.The security and compliance team will collaborate regularly within a PerkinElmer office location.
The successful candidate will bring expertise and leadership across risk and compliance disciplines including control design and operation, risk management, third party audits such as SOC 2, ISO 27001, UK Cyber Essentials Plus, and FedRAMP, security sales enablement, third party vendor risk management, customer and vendor security contract reviews, and the development of policies and procedures. This role requires a strong work ethic, the right blend of technical and non-technical skills, and the ability to align security decisions to business requirements across leadership within a global organization.
Ensuring the successful design, implementation, documentation, and operation of information technology general controls.
Implement control best practices and business unit security ownership across the PerkinElmer organization.
Partner closely with other team members within the CISO function within the areas of security architecture and engineering and security incident response and threat intel, to ensure alignment with the cross-team requirements.
Build a risk management program and governance, risk and compliance council that aligns to ISO 27001.
Assist global sales and pre-sales teams in responding to customer’s security and compliance related inquiries and questionnaires.
Complete SOC 2 Type 2, UK Cyber Essentials Plus, ISO 27001 audits, and incorporate additional audit standards as the needs of the business evolve.
Evaluate PerkinElmer requirements for CMMC 2.0 compliance and build a roadmap and business case.
Lead the development, maintenance and review of information security policies and procedures.
Collaborate with business stakeholder across Perkin Elmer including, but not limited too, R&D, Quality Management, and Operations.
Work cross functionality with the legal team regarding data privacy and security contract reviews for vendors and customers.
Support US Federal Government CMMC 2.0 and FedRAMP compliance as needed.
Support security investigations and responding to information security incidents.
Mentor and coach junior team members.
Support information security awareness activities.
Nothing in this job description restricts management’s right to assign or reassign duties and responsibilities of this job at any time.
We offer:
Private healthcare including dental care – MEDICOVER,
Life and long-term disability insurance – GENERALI,
Gym card - MULTISPORT,
Social Fund Subsidies,
Home Office allowance,
Tuition reimbursement,
Referral awards,
Internal career development opportunities in multiple business areas,
and up to 4 additional days of vacation by length of service in the company
PerkinElmer is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability status, age, or veteran status or any other characteristics protected by applicable law. PerkinElmer is committed to a culturally diverse workforce.
