This job is closed

We regret to inform you that the job you were interested in has been closed. Although this specific position is no longer available, we encourage you to continue exploring other opportunities on our job board.

Delta Air Lines - Atlanta, GA

posted 2 months ago

Full-time - Mid Level
Onsite - Atlanta, GA
Air Transportation

About the position

The Security Engineer - Governance, Risk, and Compliance is responsible for leading the development and maintenance of Delta's Information Security policies, standards, and procedures. This role focuses on fostering a secure culture within the organization, reducing security risks, and ensuring compliance with applicable frameworks and regulations. The position emphasizes collaboration with various teams to enhance security awareness and drive process improvements, ultimately contributing to the overall effectiveness of Delta's Information Security program.

Responsibilities

  • Provide Policy and Standards subject matter leadership through the development and maintenance of Delta's Information Security policies, standards, and procedures.
  • Improve Delta's security positioning through process improvement, policy, automation, and the continuous evolution of capabilities.
  • Manage human risk and develop a strong security-driven culture where security is part of every employee's day-to-day operation and attitudes.
  • Analyze and identify the top human risks to the organization and the behaviors that must change to mitigate those risks.
  • Develop, review, implement, and maintain a security awareness training program to mitigate human risks.
  • Ensure security awareness programs meet all industry regulations, standards, and compliance requirements.
  • Develop Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) for a metrics dashboard to track and report operational capabilities, success factors, risks, threats, and compliance metrics.
  • Ensure up to date process and procedure documentation for the team.
  • Identify process improvement/automation opportunities and innovate new ways of doing things.
  • Communicate, and deliver, the value of Information Security throughout all of Delta.
  • Work as a member of the broader GRC, IT and Delta teams.

Requirements

  • Exceptional communication skills with the ability to tell powerful and compelling stories through excellent writing.
  • Demonstrated customer focus and ability to evaluate decisions through the eyes of the customer.
  • Ability to create metrics, documentation, presentations, and procedures that communicate results effectively.
  • Organized and detail-oriented, able to work well under deadlines in a changing environment.
  • High degree of initiative and ability to manage multiple tasks under pressure.
  • Strong interpersonal, problem solving, prioritization, presentation, and facilitation skills.
  • Demonstrated ability to work independently and collaboratively with others.
  • Experience with creating and writing security policies or standards in support of organizational security programs.
  • Ability to interact confidently with various levels of technical and leadership positions.
  • Proven experience (3+ years) in governance, risk, or compliance roles in relevant frameworks.

Nice-to-haves

  • Bachelor's degree or higher in a relevant field (information systems, cybersecurity, communications, behavioral science, and/or computer science).
  • Experience across Information Security and IT domains such as Governance, Risk, and Compliance, IT operations, incident response, etc.
  • Exposure to relevant standards such as ISO/IEC 27001 and 27002, NIST 800, and COBIT.
  • Experience in developing executive presentations or status communications for multiple organization roles.
  • A history of driving transformational change and building relationships across IT and the Business.
  • Creative and visual skills including graphic, web, print and slide design.
  • Working knowledge of scripting languages (e.g., Python, PowerShell) for automating tasks.
  • CISSP, CISA, CISM, Security+ or other relevant security certifications.
  • Experience with RSA Archer or equivalent GRC tool.

Benefits

  • Competitive salary, industry-leading profit sharing program, and performance incentives.
  • 401(k) with generous company contributions up to 9%.
  • Up to 2-weeks of vacation for new hires, earned for use in the following vacation year.
  • Up to 56 hours of paid personal time within a 12-month period.
  • 10 paid holidays per calendar year.
  • 12-weeks of paid maternity/parental leave for birthing parents.
  • 2-weeks of paid parental leave for non-birthing parents.
  • Comprehensive health benefits including medical, dental, vision, short/long term disability and life insurance.
  • Family care assistance through fertility support, surrogacy and adoption assistance, lactation support, and subsidized back-up care.
  • Holistic Wellbeing programs to support physical, emotional, social, and financial health.
  • Domestic and International space-available flight privileges for employees and eligible family members.
  • Career development programs to achieve long-term career goals.
  • World-wide partnerships to engage in community service and sustainability goals.
  • Business Resource Groups to promote inclusion and provide perspective.
  • Recognition rewards and awards through the platform Unstoppable Together.
  • Access to over 500 discounts, specialty savings and voluntary benefits through Deltaperks.
Job Description Matching

Match and compare your resume to any job description

Start Matching
© 2024 Teal Labs, Inc
Privacy PolicyTerms of Service