[Hiring] Principal Information Security Analyst @Nike

Role Description

We're looking for a Principal Information Security Analyst to join the Information Risk Management (IRM) team within Corporate Information Security (CIS). This role is a senior individual contributor and program leader who will deliver against an information security and cybersecurity assessment plan integrated into a broader enterprise risk management program supported by executive management.

• Leverage deep expertise in security policies, standards, controls, and industry best practices to perform and lead risk assessments of Nike systems and systems managed for Nike by vendors.
• Drive strategic advancement of Nike's Third-Party Risk Management (TPRM) program.
• Establish risk-profiling methodologies, tiered assurance frameworks, vendor lifecycle controls, and executive reporting capabilities.
• Serve as a recognized subject matter expert in information risk and cybersecurity across Nike.
• Identify, initiate, and lead cross-functional programs that extend beyond IRM’s immediate scope.

Qualifications

• Bachelor's degree in Business Information Management, Computer Science, or a related field; will accept any suitable combination of education, experience, and training.
• 8+ years of experience in information security, risk management, GRC, third-party risk management, or a related field.
• 3+ years of experience performing vendor/third-party risk assessments and leading internal information security risk assessments in a large enterprise environment.
• Deep knowledge of information security principles and practices, best practice security architectures, general procedures, and guidelines.
• Exceptional analytical and problem-solving skills.
• Superb communication skills (written and verbal).
• Demonstrated ability to mentor, coach, and quality-review the work of other risk analysts.

Requirements

• Experience designing or operationalizing third-party risk management programs.
• Experience assessing systems against security standards and performing control validation or baseline assessments.
• Experience reviewing third-party SOC reports, security baseline documentation, and vendor assurance evidence.
• Experience partnering with Procurement, Legal, and Privacy on vendor risk and contractual security requirements.
• Advanced knowledge of Excel and PowerPoint; experience organizing and analyzing large datasets preferred.
• CISSP, CISM, CRISC, or relevant GIAC Management Focus Area certifications strongly preferred.

Benefits

• Open to remote work except in South Dakota, Vermont, and West Virginia.
• The annual base salary for this position ranges from $149,100.00 to $313,900.00 based on geographic market.
• Information about benefits can be found here .

Company Description

This role reports to the Director of Information Risk Management within Corporate Information Security (CIS). You will build strong partnerships with the IRM team, CIS leadership, Nike business and technology process owners, and various governance and legal functions.