Risk and Compliance Specialist

Description and Requirements
"At BMC trust is not just a word - it's a way of life"
Description And Requirements
CareerArc Code

CA-MM

Hybrid
"At BMC trust is not just a word - it's a way of life"
We are an award-winning, equal opportunity, culturally diverse, fun place to be. Giving back to the community drives us to be better every single day. Our work environment allows you to balance your priorities, because we know you will bring your best every day. We will champion your wins and shout them from the rooftops. Your peers will inspire, drive, support you, and make you laugh out loud

We help our customers free up time and space to become an Autonomous Digital Enterprise that conquers the opportunities ahead - and are relentless in the pursuit of innovation

Our IS&T (Information Services and Technology) department provides all the required technology and operational support services to run our business here in BMC We have over 200 servers on premises to support production, disaster recovery, databases, applications and over 1000 servers in Lab environment. IS&T is transformational not only for BMC but also for the customer experience, because we give a 360 degrees view to the customer about the products they should know, opportunities in the pipeline, and any service issues outstanding with the customer. We use cutting-edge technologies to manage BMC's infrastructure and showcase it to the customers – program is called BMC on BMC

BMC is looking for an experienced Risk And Compliance Specialist to join our amazing global Corporate Cybersecurity team

BMC Software is looking for a motivated and skilled Security Compliance engineer to join the corporate IS&T Corporate Cyber Security Risk & Compliance team. In this role you will be responsible for ensuring that the security capabilities and posture of the services provided by the IS&T team and the business is in compliance with the policies and standards mentioned as part of the Information Security Management System, along with review of vendor exhibits and provide responses to customer assessments. A wide breadth of security, compliance and audit skills will be required to perform the assigned tasks.

Here is how, through this exciting role, YOU will contribute to BMC's and your own success:
Compliance Requirements

• Provide assistance/ownership to 3rd-party certifications, internal audits, and customers assessments for BMC's IS&T services
• Coordinate compliance requirements and validate artifacts for SOX, SOC, ISO, and others as needed
• Provide assistance to other cyber security teams, as required
• Maintain upkeep of the Compliance related document libraries
• Collaborate with legal, privacy and project management office for certification milestones and related subject matters
• Play a key role in the administration and usage of the GRC platform

Contract Reviews

• Review of vendor exhibits and provide responses to customer assessments
• Provide guidance to other assurance and governance teams

Tools and Technologies

• Co-ordinate with other Cyber Security teams to understand the purpose and usage of their tools and technologies and provide guidance on their compliance activities.

To ensure you're set up for success, you will bring the following skillset & experience:

• Bachelor's degree in computer science, information technology, systems engineering, or a related field. Security/privacy certifications, a plus.
• Understanding of IT security (and related) compliance frameworks like NIST, ISO, SOC 2, GDPR, HIPAA
• Exposure to government compliance requirements such as FedRAMP, a plus
• Security and privacy assessment experience in a SaaS organization/product, a plus
• Good oral and written communication skills to collaborate with the team
• Willing to learn new tools and technologies
• Broad understanding of security and privacy concepts
• Business communication and writing skills
• Technical documentation / report writing skills and experience
• Understanding and awareness of current developments in the prevailing global Cybersecurity environment.
• Self-starter
• Person that can take initiative to solve complex problems
• Ability to work independently
• Willingness to broaden scope of knowledge and skills in the field of cyber security

Our commitment to you
BMC's culture is built around its people. We have 6000+ brilliant minds working together across the globe. You won't be known just by your employee number, but for your true authentic self. BMC lets you be YOU

If after reading the above, You're unsure if you meet the qualifications of this role but are deeply excited about BMC and this team, we still encourage you to apply We want to attract talents from diverse backgrounds and experience to ensure we face the world together with the best ideas

BMC is committed to equal opportunity employment regardless of race, age, sex, creed, color, religion, citizenship status, sexual orientation, gender, gender expression, gender identity, national origin, disability, marital status, pregnancy, disabled veteran or status as a protected veteran. If you need a reasonable accommodation for any part of the application and hiring process, visit the accommodation request page.

BMC Software maintains a strict policy of not requesting any form of payment in exchange for employment opportunities, upholding a fair and ethical hiring process.