IT Analyst II :GRC

Do you want to help solve the worlds most pressing challenges? Feeding the worlds growing population and slowing climate change are two of the worlds greatest challenges. AGCO is a part of the solution Join us to make your contribution.
AGCO is looking to hire candidates for the position of Cybersecurity Analyst II : GRC.
The Cybersecurity Risk Analyst plays a cross:functional cybersecurity role in Enterprise Security, Operational Technology, and Product Security. The GRC Analyst II is a highly integrated role that will develop relationships with teams across the enterprise to influence and achieve cybersecurity goals related to governance, risk, and compliance. Using best practices, your days will involve leading risk activities across product, enterprise, and manufacturing teams, reviewing and ensuring policies and standards are met, and staying abreast of the latest regulatory trends. You will serve the enterprise as a subject:matter:expert (SME) in governance, risk, and compliance. You will help develop models and lead teams through threat modeling exercises and the resulting risk analysis using industry:leading best practices for qualitative and quantitative modeling. This role will enjoy a varied daily agenda that prioritizes data:driven decisions.
Your Impact
stylemargin:bottom:11.0px:
:
Assist in maintaining an active crosswalk mapping between all policies and standards and the NIST Cybersecurity Framework (CSF), ISO 21434, etc.
:
Define threat modeling strategies that the GRC team can coach and lead teams to execute across teams within enterprise, product, and manufacturing sectors.
:
Serve as an independent voice for the GRC team.
:
Innovate, research, and assist in leading risk analysis efforts across various project teams, following a standard threat analysis and risk assessment model.
:
Conduct regularly defined risk register reviews, following up with project leads on identified risks and next steps, escalating areas of high risk appropriately.
:
Maintain the exceptions request process, including documenting and highlighting risks, providing reports, and follow:up with current exceptions.
:
Assist in defining the annual program calendar for all GRC activities, including compliance audits, risk reviews, and general assessments.
:
Maintain clear reporting and documentation across projects to aid decision:making, tracking, and KPI/KRI development.
:
Lead the development of standards and control checks to determine various team and project compliance with policies and standards.
Your Experience and Qualifications
stylemargin:bottom:11.0px:
:
Bachelors degree with overall 7 years industry experience in an information technology or GRC role. Minimum 5years ' of relevant experience.
:
Experience developing or maintaining cybersecurity policies or risk management frameworks and experience within enterprise environments, cloud computing, product security, or manufacturing security.
:
Willingness to raise risks clearly and in productive fashions.
:
Familiarity with NIST Cybersecurity Framework, ISO standards, or other common benchmarks
:
Experience with various risk methodologies (FAIR, NIST RMF, ISO3100, Loss Exceedance Curves)
:
Ability to evaluate cybersecurity risk and business value across a wide variety of scenarios and Willingness to learn new technologies or methodologies quickly.
:
Comfortable working in a fast:paced, global organization with dispersed teams
A Plus If You Have
stylemargin:bottom:11.0px:
:
Experience working in an Agile, Scrum, or SAFe environment.
:
Appropriate cybersecurity or risk management certificates, including CRISC, CISSP, GTSRT, etc.
:
Experience working with GRC tools, managing policy documentation, and/or actively assessing cybersecurity risk.
:
Familiarity with agriculture or manufacturing
Your Benefits
:
GLOBAL DIVERSITY : Diversity means many things to us, different bra
Job Type: Permanent