Senior Cybersecurity Analyst - SOX Controls

Target • Brooklyn Park, MN

1d • $88,000 - $158,000 • Hybrid

About The Position

Target is an iconic brand, a Fortune 50 company and one of America’s leading retailers. Target as a tech company? Absolutely. We’re the behind-the-scenes powerhouse that fuels Target’s passion and commitment to cutting-edge innovation. We anchor every facet of one of the world’s best-loved retailers with a strong technology framework that relies on the latest tools and technologies—and the brightest people—to deliver incredible value to guests online and in stores. Target Technology Services is on a mission to offer the systems, tools and support that guests and team members need and deserve. Our high-performing teams balance independence with collaboration, and we pride ourselves on being versatile, agile and creative. We drive industry-leading technologies in support of every angle of the business, and help ensure that Target operates smoothly, securely and reliably from the inside out. SOX IT is a team of experienced Cybersecurity professionals that serve a critical function in maintaining shareholder confidence in Target’s financial reporting. It achieves this by ensuring systems that process financial transactions are well-controlled and meet SOX IT General Controls requirements. It has the exciting challenge of evolving with Target’s rapidly changing technology environment to have the right controls applied to the right systems at the right time. This involves understanding changes occurring across Target’s environment and taking proactive action to respond to those changes. SOX IT’s core responsibilities also involve onboarding new applications, advising on controls, conducting ongoing testing to monitor compliance, support annual audit activities, and educating technology teams. Deep business and technical expertise are foundational to the team as it scopes financial processes and designs compliant patterns in a microservice environment. Success of the program relies on maintaining trusted partnerships with our technology teams, business teams, internal auditors, and external auditors. As a member of SOX IT, you will play a key role in maintaining Target’s SOX compliance. It will challenge you to quickly learn new technologies and processes, cultivate partnerships across the organization, critically think through risks and controls, assess effectiveness of those controls, and influence others to take action. Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.

Requirements

• Bachelor's degree
• 5+ years of information security or other relevant experience
• Relevant certifications like CISA, CISSP, CISM
• In-depth knowledge and experience in SOX programs and application of ITGC
• Knowledge of cloud technology and security controls.
• Knowledge of operating system security (ex. Windows/Linux) and databases (ex. Mongo, Postgres).
• In-depth knowledge and experience testing the effectiveness of controls
• Experience in agile teams and modern technologies (ex. microservice architecture)
• Strong verbal, written and presentations skills
• Ability to navigate ambiguity and develop trusted business relationships
• Ability to identify problems, analyze data and present conclusions
• Ability to lead down, across, and up in order to influence desired outcomes

Nice To Haves

• Knowledge of information security frameworks such as ISO, HiTrust, or PCI is preferred

Responsibilities

• Provide subject-matter expertise in SOX IT risks and controls (access, change management, and operations)
• Conduct in-depth process assessments and technical testing of key IT controls
• Support onboarding of new applications and technology teams to the SOX program
• Advise on design of IT controls and actions to reduce information security risks
• Advise on remediation and perform impact assessments when IT deficiencies are identified
• Develop trusted relationships with key stakeholders (tech/business, internal audit, external audit)
• Summarize and report key risks to Cybersecurity leadership
• Identify innovative opportunities to continuously mature the program and the value it delivers to the organization
• Continuously develop your technical skills to align with Target’s evolving technology environment
• Stay current with new and evolving security topics, technologies, and requirements via formal training and self-directed education

Benefits

• In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family.
• Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves.
• Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation.
• Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits.
• We care about and invest in you as a team member, so that you can take care of yourself and your family.
• Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves.
• Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation.
• Find competitive benefits from financial and education to well-being and beyond at https://corporate.target.com/careers/benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level