Sr Analyst InfoSec Compliance & Governance

About the Role

What You'll Do

• Design, develop, implement information security solutions that result in high performing technology. This may include but is not limited to the following areas: Cloud Security, Infrastructure Security, Product Security, Defensive Engineering, and Identity and Access Management.

• Implement security controls governing CI/CD pipelines, and provide technical advisory support across a rapidly modernizing and dynamic hybrid multi cloud, on prem and retail chain environment

• Develop knowledge of infrastructure standard security practices, concepts and technologies relevant to role.

• Participate in technical requirements analysis and in converting functional requirements into technical requirements.

• Ensure governance and compliance with legal and regulatory requirements while maintaining Gap Inc Information Security policies, standards, and industry best practices

• Drive automation of cloud security processes

• Participate in projects and assignments of diverse scope

Who You Are

• Demonstrate knowledge of infrastructure standard security practices, concepts and technologies relevant to specific role

• Demonstrate Proficiency in specific security technologies, applications, standards and methodologies

• Strong Java/J2EE development experience; Strong scripting skills

• Experience in pipeline security, CD authoring configuration management scripts and deployment tools

• Able to communicate difficult concepts in a simple manner

• Present problem analysis and recommended solutions in a creative and logical manner

• Experience with building effective relationships with immediate team and stakeholders