ISOCompliance Analyst

One team. Global challenges. Infinite opportunities. At Viasat, we're on a mission to deliver connections with the capacity to change the world. For more than 35 years, Viasat has helped shape how consumers, businesses, governments and militaries around the globe communicate. We're looking for people who think big, act fearlessly, and create an inclusive environment that drives positive impact to join our team.

We are seeking an Information Security Analyst to help maintain a continuous state of compliance for the ISO 27001:2022 framework. You will work within our greater security organization working with the business to implement, assess, and audit security practices and technical configurations to ensure compliance goals across the company. Your responsibilities include ensuring we are complying with applicable program regulations and standards and ensuring proper security controls are operating effectively.

You will also help develop performance metrics to measure our success. And as technology changes, you will be continuously tuning the program for optimal effectiveness.

You are a self-starter, that can work independently, prioritize work based on the impact to the business, and manage multiple efforts simultaneously. You will possess a broad knowledge of modern technology and security best practices, superior analytical skills, attention to detail, and discipline to ensure consistency and accuracy. Excellent verbal and written communication skills are critical to build and maintain relationships with stakeholders.

• Communicating with interested parties across several product lines and technologies on compliance activities
• Support engineering and IT requests related to security and compliance impacting changes within the target environments.
• Own the resolution of identified information security and data issues.
• Facilitating the ISO
  27001 ISMS or similar activities as the second line of defense, providing advisory activities for Company systems
• Assist in the development, maintenance and automation of security, risk, and compliance artifacts and documentation, including all exceptions and alternative controls implemented to address non-standard use cases.
• Develop and implement comprehensive control effectiveness testing programs to validate ISO
  27001 compliance
• Identify and lead security control ownership across all ISO
  27001 Annex A requirements
• Lead internal audits and coordinate external certification reviews including audit scheduling, execution, and follow-up
• Interacting with auditors to determine context of the risk associated with findings
• Stay informed of industry changes, trends, and guidelines related to information security
• Performing formal and informal risk assessments

• 8+ years experience in the risk and compliance field focusing on ensuring that the company adheres to federal, state and industry laws and benchmarks
• 8+ years experience working with ISO
  27001:2022 including auditing and/or implementation of controls
• ISMS Lead Auditor or Lead Implementor certified or capable of acquiring certification upon hire
• Ability to prepare disparate development teams for the rigors of IT framework controls
• Deep understanding of laws and regulations related to enterprise security and risk
• Broad knowledge of infrastructure, networking, security, and endpoint technologies.
• Excellent administrative and interpersonal skills with attention to detail and a high degree of accuracy, together with the ability to lead several simultaneous projects
• Exceptional interpersonal and communication skills, both oral and written; with an ability to ask clear, concise questions involving sophisticated technology to get requisite answers from business partners and…