Information Security Analyst

Responsibilities

• Implement and operate global, enterprise-wide information security risk management practices aligned with ISO 27001 and NIST
• Serve as a primary security risk partner to manufacturing and operations teams
• Lead technical and business process risk assessments across systems, applications, and operational processes
• Develop and drive the implementation of effective technical and non-technical risk treatment plans
• Collaborate with cross-functional stakeholders to embed risk management into projects and workflows
• Analyze security and risk data to identify trends and opportunities for control improvement
• Partner with internal and external auditors to support security assessments and remediation efforts
• Contribute to the development and maintenance of information security policies, standards, and procedures

Requirements

• Bachelor’s degree in Information Security, Computer Science, or equivalent practical experience
• 5+ years of progressive experience in information security with a focus on risk management and assessments
• Hands-on experience in a technical security domain (e.g., security engineering, network security, IAM, or AppSec)
• Proven ability to perform independent risk assessments across technical and business processes
• Strong working knowledge of ISO 27001 and NIST frameworks

Preferred Qualifications

• Experience supporting manufacturing, operational technology (OT), or globally distributed environments
• Professional certifications such as CISSP, CISM, or CRISC
• Technical certifications such as GCIH, GPEN, CEH, or OSCP
• Experience supporting compliance or audit activities in regulated environments

About the Company

Sandisk understands how people and businesses consume data and relentlessly innovates to deliver solutions that enable today’s needs and tomorrow’s next big ideas through advanced memory technologies.