Global Cybersecurity Governance Analyst (remote in the US)

Thousands of us around the world wake up every day with a common purpose: to make the world a safer, more secure and sustainable place. Science is in our DNA; we are endlessly curious and passionate about seeking and speaking the truth. We take delight in knowing that our work makes a meaningful contribution to society, and we are proud that our culture is centered on integrity, collaboration, inclusion, and excellence. UL Solutions stands at the forefront of technological advancement, and we are continually challenged to find new ways to foster innovation and positive change. Satisfying? Yes. Exciting? Absolutely!

The Global Cybersecurity Governance Analyst will be responsible for helping mature our Cyber Security Program and support activities related to development and maintenance of the policies, standards, procedures, controls and Control Framework Assessments and evaluation. 

This position will be working in partnership with the with other Global Cybersecurity teams and other teams across UL Solutions to support the delivery of its overall mandate by managing the ongoing strategy and development of governance framework and policies. This includes the management of all security awareness and training tasks and timelines. In addition to developing training strategies and goals the ideal candidate will be comfortable in developing and delivering security training to business teams.   

This role will be part of Global Cybersecurity Governance team, reporting to the Global Cybersecurity Governance Manager. 

The Global Cybersecurity Governance Analyst candidates will be evaluated based on their ability perform the duties listed above while demonstrating the skills and competencies necessary to be highly effective in the role. These skills and competencies include: 

• Governance and adherence to Cybersecurity program with mitigating controls and action plans for areas of opportunity
• Facilitate the governance and review process of the security framework
• Experience with assisting with the governance and review process of the Global Cybersecurity policies and standards and related processes.
• Helps to manage Global Cybersecurity policies and the exception management process
• Experience in reviewing processes and managing tools to proactively monitor and govern the effectiveness of Cybersecurity controls and services.
• Operational level understanding and experience with security awareness training including:developing and managing security training strategies and goals
  • developing information security training materials
  • conducting simulated phishing exercises
  • presenting classroom and online security awareness training to the workforce and executives
• Operational level understanding of Information Security frameworks like ISO, NIST, TISAX and PIPL etc.
• Support the GRC team in establishing annual and long-term goals, defining governance strategies, objectives, metrics, and reporting mechanisms

Education, Training and Previous Experience 

Candidates will be evaluated primarily on their ability to demonstrate the competencies required to be successful in the role, as described above. For reference, the typical work experience and educational background of candidates in this role are as follows: 

• BS or MA in Business, Computer Science, Information Security, or a related field
• [2+] years of work experience in information security, especially in a cybersecurity governance role
• [2+] years of experience designing, implementing, and executing cybersecurity governance solutions, tools and technologies across complex, large-scale environments, all the way from project initiation to the desired end state of operationally healthy and sustainable services.
• [2+] years of experience writing and developing Information Security policies, procedures, guidelines, and metrics including Exception Management Processes.
• Experience with Governance and Awareness and Training tools
• [2+] years of experience in assisting with governance issues, or similar experience managing applications, projects or systems that require identification, evaluation, and remediation if risk 
• Ability to build and maintain strong relationships across departments/teams and effectively communicate solution designs to stakeholders and leadership.
• [2+] years of experience with regulatory compliance and information security management frameworks (e.g., International Organization for Standardization [IS0] 27000, COBIT, National Institute of Standards and Technology [NIST] 800)

Desired, but not required: 

• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), and/or Certified Information Systems Auditor (CISA)

Knowledge and Skills 

• Experience writing and developing Information Security policies, procedures, guidelines, and metrics including Exception Management Processes.
• Experience writing and developing Information Security policies, procedures, guidelines, and metrics including Exception Management Processes.
• An understanding of organizational mission, values, goals, and consistent application of this knowledge.
• An ability to work on several tasks simultaneously and pay attention to sources of information from inside and outside one’s network within an organization.
• An ability to apply original and innovative thinking to produce new ideas.
• An understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business.
• An ability to effectively influence others to modify their opinions, plans or behaviors.
• Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each part.
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.
• Strong problem-solving and troubleshooting skills.

Personal Characteristics (Optional) 

• Can interface with, and gain the respect of, stakeholders at all levels and roles in the company.
• Is a confident, energetic self-starter, with strong interpersonal skills.
• Has good judgment and a sense of urgency, and has demonstrated commitment to high standards of ethics, regulatory compliance, customer service and business integrity.
• Instinctive and creative.
• Self-motivated and possessing a high sense of urgency and personal integrity.
• Highest ethical standards and values.

• Mission: For UL Solutions, corporate and social responsibility isn’t new. Making the world a safer, more secure and sustainable place has been our business model for the last 125 years and is deeply engrained in everything we do.  You will shape the way we approach and deliver our solutions to promote safe living and working environments for people everywhere.
• People: Ask any UL Solutions employee what they love most about working here, and you’ll almost always hear, “the people”. Work with colleagues, who you can listen and learn from and challenge each other so that you can continually push for excellence and results.
• Interesting work: Your work at UL Solutions will challenge you to try fresh approaches, be empowered to drive change and help you gain in-depth experience in your field. And as a global company, in many roles,  you will get international experience working with colleagues around the world.
• Grow & achieve: Growth and development are part of our DNA. Grow & achieve with targeted development, reward and recognition programs as well as our very own UL University that offers extensive training programs for employees at all stages as well as a technical training track for applicable roles.
• Total Rewards: The salary range for this position is $80,000 - $90,000 and is based upon years of experience that is commensurate with the level of the position.

All employees at UL Solutions are eligible for annual bonus compensation. The target for this position is 5% of the base salary offered. Employees are eligible for health benefits such as medical, dental and vision; wellness benefits such as mental & financial health; and retirement savings (401K) commensurate with the standard rewards offered in each individual location or country, for the relevant position level.

We also provide employees with paid time off including vacation (15 days), holiday including floating holidays (12 days) and sick time off (72 hours).

Internal applicants with questions related to the Total Rewards for this position should submit a ticket via askHR for more insights.

Working at UL Solutions is an exciting journey that twists and turns daily. We thrive in the twists and revel in the turns. This is our every day. This is our normal.

Curious? To learn more about us and the work we do, visit our company page www.UL.com