Information Security GRC Analyst

About Adobe

Changing the world through digital experiences is what Adobe’s all about. We give everyone—from emerging artists to global brands—everything they need to design and deliver exceptional digital experiences! We’re passionate about empowering people to create beautiful and powerful images, videos, and apps, and transform how companies interact with customers across every screen.

We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere in the organization, and we know the next big idea could be yours!

The Opportunity for an Information Security GRC Analyst

Do you enjoy solving problems and being the go-to person with the answers? Are you able to talk with customers? Are you interested in seeing how the business works up-close and contributing to ensure that sales go through effectively? This job blends information security with evangelism, program management, business savvy and an eye for detail with timely execution. We are a critical hub for Sales, Legal, Engineering, Compliance, Operation and Marketing teams in presenting Adobe's security posture and overcoming customer security objections and concerns. We assist these teams throughout the sales cycle, helping to close business while accurately representing Adobe's information security posture.

Roles and Responsibilities

• Answer customer questions around information security as they pertain to Adobe's individual applications & solutions and overall security posture.
• Provide support to sales organizations by speaking expertly and knowledgably about the information security control framework at Adobe.
• Advise customers as to how each solution's security controls align with the applicable security compliance frameworks (e.g. SOC 2 and ISO 27001).
• Answer information gathering security questionnaires to support the sales process.
• Help maintain our knowledge-base and self-service tooling for security-related questionnaires, questions, and responses.
• Assist with supporting documentation (e.g. white papers, architectural diagrams, sample questionnaires, and other related software security documents) for sales enablement.
• Act as a representative of Adobe’s cybersecurity division during sales calls with customers.
• Support corporate and product marketing initiatives and campaigns as they relate to security.
• Assist Legal with security language and terms in contract negotiations.

What you’ll need to succeed

• A Computer Science Bachelor’s Degree or equivalent experience in cyber security.
• Knowledge and Skills: Must be able to learn and understand software security development concepts, design and architecture. Being a highly qualified professional who is innovative, organized, and consistent. The ideal candidate will have industry knowledge, an ability to manage expectations and the relationships with a diverse set of partners, and flex between the strategic and the tactical understanding.
• Ability to clearly convey the value of industry-wide software security concepts such as encryption, authentication and authorization, cross domain protection, security vulnerabilities and testing strategies.
• Familiarity with security industry certifications such as ISO 27001 and SOC 2 Type II is required.
• Ability to understand and learn to communicate the importance of security controls within different domains is needed.
• Able to handle high priority, time-sensitive issues.
• Communication: Strong written and oral skills. Attentiveness to detail while maintaining organization. Ability to deal with high priority, time sensitive issues.
• Dependability: Meet commitments, work independently, accept accountability, be adaptable to change, set personal standards, and stay focused under pressure.
• Legal/contract experience a plus.
• Jira and RFPIO proficiency a plus.

Key skills/competency

• Information Security
• GRC (Governance, Risk, and Compliance)
• Compliance Frameworks (SOC 2, ISO 27001)
• Security Posture
• Sales Enablement
• Risk Management
• Cybersecurity
• Contract Negotiation
• Problem Solving
• Customer Communication