Sr Analyst, Cyber Security

Stanley Black & Decker, Inc.•New Britain, CT

1d•Hybrid

About The Position

As a Senior Analyst Cyber Security, you’ll be part of the IT – Cyber Security team working as a hybrid employee. This role involves leading and supporting cybersecurity compliance initiatives, ensuring alignment with frameworks such as ISO 27001, NIST, PCI DSS, SOX, and NIS 2. Key responsibilities include monitoring and assessing the effectiveness of cybersecurity and compliance controls, recommending enhancements, and collaborating with various teams to resolve audit findings. The Senior Analyst will also maintain knowledge of regulatory requirements, prepare compliance reports, support external audits, and develop training programs. Additionally, the role requires developing and maintaining IT GRC documentation, identifying control gaps, and proactively proposing solutions to strengthen cybersecurity posture. Stanley Black & Decker is the world's largest tool company, an industry visionary, solving problems and advancing the manufacturing trade through innovative technology and its Industry 4.0 Initiative. The company is committed to ensuring its state-of-the-art “smart factory” products and services provide greater quality to customers and greater environmental and social value to the planet. With a rich history dating back to 1843, it has evolved into a vibrant, diverse, global growth company with approximately 43,500 professionals globally, operating in 60 countries with over 20 brands.

Requirements

Bachelor’s degree in Information Security, Computer Science, or a related field.
3+ years of experience in cyber security, IT audit, or IT GRC roles.
Strong knowledge of IT security frameworks (e.g., NIST, ISO) and regulatory requirements.
Experience conducting IT security audits.

Nice To Haves

Professional certifications such as CISA, CISSP, CISM, or CRISC highly desirable.

Responsibilities

Lead and support cybersecurity compliance initiatives, ensuring alignment with frameworks (ISO 27001, NIST, PCI DSS, SOX, NIS 2).
Monitor and assess the effectiveness of cybersecurity and compliance controls, recommending enhancements and remediation strategies.
Collaborate with IT, security, and business teams to resolve audit findings and compliance issues; escalate high-risk or unresolved issues as needed.
Maintain up-to-date knowledge of regulatory requirements, standards, and best practices.
Prepare and deliver compliance and audit reports to management and regulatory authorities, track and report on compliance metrics and remediation progress.
Support and prepare for third-party and external audits, acting as liaison with auditors and regulators.
Develop and deliver training and awareness programs on cybersecurity compliance; provide guidance to staff on compliance and audit requirements.
Develop, maintain, and update IT GRC documentation (policies, procedures, risk registers, control matrices, compliance checklists).
Identify, evaluate, and report on control gaps; maintain a log of compliance and audit issues and their resolution status.
Collaborate across departments to ensure company-wide compliance and effective resolution of issues.
Proactively identify emerging risks and propose innovative solutions to strengthen cybersecurity posture.

Benefits

Competitive salary
Medical
Dental
Life insurance
Vision insurance
Disability insurance
401(k)
Employee Stock Purchase Plan
Paid time off, including paid vacation, holidays & personal days
Tuition reimbursement
Wellness program
Discounts on Stanley Black & Decker tools and other partner programs
Access to a wealth of learning resources, including our digital learning portal
Opportunity to grow and develop skills along multiple career paths within a global company with 20+ brands
Access to state-of-the-art learning resources, including our Lean Academy and online university (where you can get certificates and specializations from renowned colleges and universities)
Diverse & Inclusive Culture
Opportunity to make positive changes locally and globally through volunteerism, giving back, and sustainable business practices