Senior Analyst Ii-Security (IT Compliance)

Are you looking for a unique opportunity to be a part of something great? Want to join a 20,000-member team that works on the technology that powers the world around us? Looking for an atmosphere of trust, empowerment, respect, diversity, and communication? How about an opportunity to own a piece of a multi-billion dollar (with a B!) global organization? We offer all that and more at Microchip Technology, Inc.

People come to work at Microchip because we help design the technology that runs the world. They stay because our culture supports their growth and stability. They are challenged and driven by an incredible array of products and solutions with unlimited career potential. Microchip's nationally-recognized Leadership Passage Programs support career growth where we proudly enroll over a thousand people annually. We take pride in our commitment to employee development, values-based decision making, and strong sense of community, driven by our Vision, Mission, and 11 Guiding Values; we affectionately refer to it as the Aggregate System and it's won us countless awards for diversity and workplace excellence.

Our company is built by dedicated team players who love to challenge the status quo; we did not achieve record revenue and over 30 years of quarterly profitability without a great team dedicated to empowering innovation. People like you.

Visit our careers page to see what exciting opportunities and company perks await!

Job Description:

Microchip Technology Inc. is a leading provider of smart, connected and secure embedded control solutions. Its easy-to-use development tools and comprehensive product portfolio enable customers to create optimal designs that reduce risk while lowering total system cost and time to market. The company's solutions serve more than 120,000 customers across the industrial, automotive, consumer, aerospace and defense, communications and computing markets. Headquartered in Chandler, Arizona, Microchip offers outstanding technical support along with dependable delivery and quality.

The IT Security Compliance Analyst is responsible for ensuring that Microchip's information systems and networks comply with the relevant cybersecurity standards and regulations. The analyst will conduct security assessments, identify gaps and risks, and implement remediation actions to enhance the security posture of the organization. The analyst will also coordinate with internal and external stakeholders to facilitate compliance audits and reviews. The analyst will report to the Sr Manager Cyber Risk Governance and work as part of a global team of cybersecurity professionals.

Job duties include, but not limited to:

• Conduct cybersecurity controls assessments in accordance with applicable regulatory guidance, including NIST 800-171, NIST 800-53, ISO 27001, and Cybersecurity Maturity Model Certification (CMMC).

• Support developing/maintaining system security documentation such as System Security Plans (SSP), Plans of Actions and Milestones (POA&M), Incident Response Plans (IRP), Contingency Plans (CP), and other various documents.

• Performing security control continuous monitoring, security audits, risk analysis, and developing mitigation strategies for information systems.

• Continuously evaluate system security posture, identifying opportunities for improvement and supporting the implementation of these improvements.

• Familiarity with developing cybersecurity policies, processes, procedures, and other documentation.

• Ensuring compliance with current cybersecurity policies, regulations. concepts, and measures when designing, procuring, adopting, and developing a new or existing system.

• Conduct training and awareness sessions for employees on cybersecurity best practices.

• Work closely with other departments, such as IT and legal, to ensure alignment and consistency in cybersecurity efforts.

• Assist in security projects driven by internal and external groups to information security.

• Also responsible for other security-related duties/projects such as customer cybersecurity surveys or as directed by management.

• Aid with incident response and cleanup actions when necessary per company or customer directions

Requirements/Qualifications:

• Bachelor's degree in Business, Computer Science, Information Security, or related degree

• Minimum of 3 years of relevant experience with cybersecurity frameworks, including NIST 800-171, NIST 800-53, CMMC, and ISO 27001. Knowledge of TISAX and SOC 2 audit compliance is beneficial.

• Experience with IT GRC and IT security control development, control testing, risk remediation, and reporting.

• Ability to work well in an organization and coordinate/interface across various groups in various geographical areas.

• Knowledge of Nessus, SCAP, STIGs, Splunk, Ivanti, EDR, system audits and vulnerability scanning.

• Relevant certifications such as Security+, CGRC, CRISC, or other industry-recognized certifications are highly desirable.

Travel Time:

0% - 25%

Physical Attributes:

Bending at Waist, Carrying, Crouching, Feeling, Handling, Hearing, Kneeling, Lifting, Pulling, Pushing, Reaching, Seeing, Stooping, Talking, Works Alone, Works Around Others

Physical Requirements:

80% Standing, 10% Walking, 10% Sitting

Microchip Technology Inc is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.

For more information on applicable equal employment regulations, please refer to the EEO is the Law Poster and the EEO is the Law Poster Supplement. Please also refer to the Pay Transparency Policy Statement.