Information Security Manager (GRC) - Oracle

**Job Description** **Who We Are** We are a world class team of high caliber application security researchers, analysts and engineers who thrive on new challenges. We are an inclusive and diverse team with a full spectrum of experience distributed globally. We have the resources of a large enterprise and the energy of a start-up, working on a critical greenfield software assurance project collaboratively with our cloud team. The Software Assurance organization has the mission to make application security and software assurance, at scale, a reality. We are a dedicated team, leveraging each other's insights and abilities to produce cutting edge solutions to difficult problems through automation and CI/CD. Join us to grow your career and create the future of software assurance at scale together. Work You'll Do + Manage and oversee the implementation of GRC programs across the organization. + Maintain an in-depth understanding of the broad regulatory landscape impacting the organization, translating changes into actionable initiatives to ensure ongoing compliance. + Develop and monitor key program metrics. + Ensure compliance with internal security requirements and standards. + Develop and implement security policies and procedures. + Maintain risk registers, develop mitigation strategies, and track the completion of corrective actions. + Manage security awareness and training programs. + Manage and mentor a team of GRC professionals. Career Level - M3 **Responsibilities** **What You'll Bring** + Proven experience managing GRC efforts in a highly regulated environment, with deep knowledge of risk management, compliance, and/or related functions. + Strong understanding of regulatory requirements such as National Institute of Standards and Technology (NIST) and Center for Internet Security (CIS) standards, and the General Data Protection Regulation (GDPR). + Experience developing and implementing security policies and procedures. + Expertise in maintaining risk registers and developing corrective action plans. + Ability to compile and analyze security metrics and performance data. + Experience managing security awareness and training efforts. + Experience conducting or supporting IT audits. + Strong written and verbal communications skills, with the ability to communicate complex security concepts to diverse stakeholders. + 7+ years of relevant work experience. + 6-8+ years of experience in managing GRC initiatives for regulated organizations. **Nice to Have** + Strong knowledge of Oracle security policies, compliance requirements, and standards. + Certifications: professional certifications such as the Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or Certified Information Systems Security Professional (CISSP). + Experience with incident management: experience in developing, executing, and managing incident response plans. + Data privacy experience: familiarity with data privacy regulations and standards, particularly in the context of e-commerce, AdTech, or social medial platforms. **What We'll Give You** + A team of very skilled and diverse personnel across the globe. + The resources of a large, global operation while still having the small, start-up feel of a smaller team day to day. + Ongoing extensive training and skills development to further your career aspirations. + Incredible benefits and company perks. + An organization filled with smart, enthusiastic, and motivated colleagues. + The opportunity to impact and improve our systems and delight our customers. Disclaimer: **Certain US customer or client-facing roles may be required to comply with applicable requirements, such as immunization and occupational health mandates.** **Range and benefit information provided in this posting are specific to the stated locations only** US: Hiring Range: from $120,100 to $251,600 per annum. May be eligible for bonus, equity, and compensation deferral. Oracle maintains broad salary ranges for its roles in order to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect Oracle's differing products, industries and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. Oracle US offers a comprehensive benefits package which includes the following: 1. Medical, dental, and vision insurance, including expert medical opinion 2. Short term disability and long term disability 3. Life insurance and AD&D 4. Supplemental life insurance (Employee/Spouse/Child) 5. Health care and dependent care Flexible Spending Accounts 6. Pre-tax commuter and parking benefits 7. 401(k) Savings and Investment Plan with company match 8. Paid time off: Flexible Vacation is provided to all eligible employees assigned to a salaried (non-overtime eligible) position. Accrued Vacation is provided to all other employees eligible for vacation benefits. For employees working at least 35 hours per week, the vacation accrual rate is 13 days annually for the first three years of employment and 18 days annually for subsequent years of employment. Vacation accrual is prorated for employees working between 20 and 34 hours per week. Employees working fewer than 20 hours per week are not eligible for vacation. 9. 11 paid holidays 10. Paid sick leave: 72 hours of paid sick leave upon date of hire. Refreshes each calendar year. Unused balance will carry over each year up to a maximum cap of 112 hours. 11. Paid parental leave 12. Adoption assistance 13. Employee Stock Purchase Plan 14. Financial planning and group legal 15. Voluntary benefits including auto, homeowner and pet insurance The role will generally accept applications for at least three calendar days from the posting date or as long as the job remains posted. **About Us** As a world leader in cloud solutions, Oracle uses tomorrow's technology to tackle today's problems. True innovation starts with diverse perspectives and various abilities and backgrounds. When everyone's voice is heard, we're inspired to go beyond what's been done before. It's why we're committed to expanding our inclusive workforce that promotes diverse insights and perspectives. We've partnered with industry-leaders in almost every sector-and continue to thrive after 40+ years of change by operating with integrity. Oracle careers open the door to global opportunities where work-life balance flourishes. We offer a highly competitive suite of employee benefits designed on the principles of parity and consistency. We put our people first with flexible medical, life insurance and retirement options. We also encourage employees to give back to their communities through our volunteer programs. We're committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by calling +1 888 404 2494, option one. **Disclaimer:** Oracle is an Equal Employment Opportunity Employer*. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans' status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law. *** Which includes being a United States Affirmative Action Employer**