Information Security Analyst 4 at Sandisk

Sandisk

Irvine, CA, us·3h ago

SeniorFull-time

Salary Range

$66,300 - $89,700 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for an Information Security Analyst to join Sandisk’s Information Security Governance, Risk Management, and Compliance (GRC) program. This role will focus on advancing the Responsible GenAI Program and supporting enterprise-wide information security risk management frameworks.

Key Responsibilities

→Operate and manage the Responsible GenAI program, overseeing intake, coordination, and tracking of GenAI use cases, platforms, and vendors.
→Conduct GenAI risk assessments focused on data sensitivity, access controls, model interfaces, and memory sources, recommending mitigation strategies for high-risk use cases.
→Ensure compliance with legal and regulatory standards by collaborating with Legal and procurement SMEs on privacy, licensing, and governance requirements.
→Implement enterprise-wide risk management frameworks aligned with ISO 27001, NIST CSF 2.0, and other industry standards.
→Conduct technical and business process risk assessments to identify, evaluate, and mitigate information security risks.
→Collaborate cross-functionally to embed risk management into organizational processes, projects, and compliance initiatives.
→Support audits and reporting by generating risk metrics and assisting with internal and external security assessments.

Requirements

✓Experience in Information Security Governance, Risk Management, and Compliance (GRC)
✓Knowledge of GenAI risk assessments and governance
✓Familiarity with ISO 27001 and NIST CSF 2.0
✓Strong understanding of legal and regulatory standards
✓Ability to collaborate cross-functionally and support audits and reporting