About this role
Job title: Principal Information Security Analyst
About the Role The Principal Information Security Analyst will be a key member of Skyworks’ Information Security team. This role collaborates with cross-functional teams to ensure physical, administrative, and technical controls protect Skyworks’ information resources and will support the strategy and execution of the Information Security program in partnership with senior management.
What You'll Do
- Privacy Program Management: Oversee privacy program and ensure compliance with applicable data protection laws; create/update the privacy data map for GDPR, CPRA, PIPL, and DPDP; perform privacy impact assessments and/or security assessments as needed; educate users on privacy by design requirements when deploying new systems.
- Governance, Risk and Compliance: Contribute to the continuous improvement of Skyworks’ information security risk management program; develop, maintain, and enforce information security policies, standards, and guidelines; assist with risk assessments to identify threats and vulnerabilities and develop mitigations; collaborate with cross-functional teams to collect evidence for customer audits and frameworks such as ISO27001, CMMC, TISAX, GDPR, CCPA; maintain the security risk register and track remediation progress; update monthly metrics and dashboards showing maturity of the program; provide cybersecurity expertise/consulting to teams and management; perform other security duties as needed.
- Third-Party Risk Management: Maintain an up-to-date inventory of third-party vendors and their risk profiles; assess and monitor new and existing vendors to ensure security and compliance; issue corrective action requests and track progress through closure; utilize security ratings services to evaluate vendor security posture.
- Security Awareness & Training: Manage security awareness and training initiatives.
What We're Looking For
- Strong knowledge of privacy program management and data protection regulations (GDPR, CPRA, PIPL, DPDP).
- Experience performing privacy impact and privacy/security assessments and contributing to risk assessments; ability to develop mitigations.
- Experience in governance, risk and compliance, policy development, audits and evidence collection for standards such as ISO27001, CMMC, TISAX, GDPR, CCPA.
- Experience with third-party risk management and vendor security ratings.
- Ability to collaborate with cross-functional teams; excellent written and verbal communication; demonstrated ability to educate others on privacy by design and security concepts.
- Results-oriented, pragmatic and proactive problem-solver; acts as a subject matter expert for information security when needed.