Sr Analyst, Cyber Security

Stanley Black & Decker, Inc. • New Britain, CT

6d • Hybrid

About The Position

As a Senior Analyst Cyber Security, you’ll be part of our IT – Cyber Security team working as a hybrid employee. You’ll get to lead and support cybersecurity compliance initiatives, ensuring alignment with frameworks (ISO 27001, NIST, PCI DSS, SOX, NIS 2). You will monitor and assess the effectiveness of cybersecurity and compliance controls, recommending enhancements and remediation strategies. Collaborate with IT, security, and business teams to resolve audit findings and compliance issues; escalate high-risk or unresolved issues as needed. Maintain up-to-date knowledge of regulatory requirements, standards, and best practices. Prepare and deliver compliance and audit reports to management and regulatory authorities, track and report on compliance metrics and remediation progress. Support and prepare for third-party and external audits, acting as liaison with auditors and regulators. Develop and deliver training and awareness programs on cybersecurity compliance; provide guidance to staff on compliance and audit requirements. Develop, maintain, and update IT GRC documentation (policies, procedures, risk registers, control matrices, compliance checklists). Identify, evaluate, and report on control gaps; maintain a log of compliance and audit issues and their resolution status. Collaborate across departments to ensure company-wide compliance and effective resolution of issues. Proactively identify emerging risks and propose innovative solutions to strengthen cybersecurity posture.

Requirements

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 3+ years of experience in cyber security, IT audit, or IT GRC roles.
• Strong knowledge of IT security frameworks (e.g., NIST, ISO) and regulatory requirements.
• Experience conducting IT security audits.

Nice To Haves

• Professional certifications such as CISA, CISSP, CISM, or CRISC highly desirable.

Responsibilities

• Lead and support cybersecurity compliance initiatives, ensuring alignment with frameworks (ISO 27001, NIST, PCI DSS, SOX, NIS 2).
• Monitor and assess the effectiveness of cybersecurity and compliance controls, recommending enhancements and remediation strategies.
• Collaborate with IT, security, and business teams to resolve audit findings and compliance issues; escalate high-risk or unresolved issues as needed.
• Maintain up-to-date knowledge of regulatory requirements, standards, and best practices.
• Prepare and deliver compliance and audit reports to management and regulatory authorities, track and report on compliance metrics and remediation progress.
• Support and prepare for third-party and external audits, acting as liaison with auditors and regulators.
• Develop and deliver training and awareness programs on cybersecurity compliance; provide guidance to staff on compliance and audit requirements.
• Develop, maintain, and update IT GRC documentation (policies, procedures, risk registers, control matrices, compliance checklists).
• Identify, evaluate, and report on control gaps; maintain a log of compliance and audit issues and their resolution status.
• Collaborate across departments to ensure company-wide compliance and effective resolution of issues.
• Proactively identify emerging risks and propose innovative solutions to strengthen cybersecurity posture.

Benefits

• Medical, dental, life, vision, disability, 401(k), Employee Stock Purchase Plan, paid time off, and tuition reimbursement in addition to programs & benefits in support of your well-being.
• Discounts on Stanley Black & Decker tools and other partner programs.
• Competitive salary
• Comprehensive benefits plan that includes medical, dental, life, vision, wellness program, disability, retirement benefits, Employee Stock Purchase Plan, Paid Time Off, including paid vacation, holidays & personal days, and tuition reimbursement.
• Discounts on Stanley Black & Decker tools and products and well as discount programs for many other vendors and partners.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior