Sr Analyst InfoSec Compliance & Governance

About the Role

In this role you will develop the tools necessary to keep our company's assets and information secure, including Cloud Security, Infrastructure Security, Product Security, Defensive Engineering, and Identity and Access Management.

What You'll Do

• Design, develop, implement information security solutions that result in high performing technology. This may include but is not limited to the following areas: Cloud Security, Infrastructure Security, Product Security, Defensive Engineering, and Identity and Access Management.

• Implement security controls governing CI/CD pipelines, and provide technical advisory support across a rapidly modernizing and dynamic hybrid multi cloud, on prem and retail chain environment

• Develop knowledge of infrastructure standard security practices, concepts and technologies relevant to role.

• Participate in technical requirements analysis and in converting functional requirements into technical requirements.

• Ensure governance and compliance with legal and regulatory requirements while maintaining Gap Inc Information Security policies, standards, and industry best practices

• Drive automation of cloud security processes

• Participate in projects and assignments of diverse scope

Who You Are

• Demonstrate knowledge of infrastructure standard security practices, concepts and technologies relevant to specific role

• Demonstrate Proficiency in specific security technologies, applications, standards and methodologies

• Strong Java/J2EE development experience; Strong scripting skills

• Experience in pipeline security, CD authoring configuration management scripts and deployment tools

• Able to communicate difficult concepts in a simple manner

• Present problem analysis and recommended solutions in a creative and logical manner

• Experience with building effective relationships with immediate team and stakeholders