Success Starts Here

As a leading global supplier of wafer fabrication equipment and services to the semiconductor industry, Lam Research develops innovative solutions that help our customers build smaller, faster, and more power-efficient devices.

We are a company comprised of people who work hard, deliver outstanding results and maintain a sense of humor during even the most challenging times. Our success results from our employees' diverse technical and business expertise, which fuels close collaboration and ongoing innovation. We know that our dynamic, global team of exceptional employees is essential to our continued growth.

Join the Lam Research team, where you can play a vital role in the future of electronics and write your own success story.

Information Security Risk Analyst - GRC

Date:  May 25, 2023

Bangalore, KA, IN, 560071

Req ID:  178304

Job Responsibilities

Lam Research is looking for an Information Security Risk Analyst to join our growing team. The Risk Analyst is responsible for performing services and activities to support the Information Security programs. This role will focus on handling information security policy. The ideal candidate will possess strong technical aptitude, particularly in areas such as operating systems, firewalls, software, USB exceptions and understanding user challenges in adhering to security controls. This role requires the ability to work with teams across different time zones, including India, Japan, and the USA. As a Risk Analyst, you will play a crucial role in ensuring information security compliance, mitigating risks, and driving overall security excellence within the organization.

  • Evaluate information security exception requests against established policies and standards to identify areas of non-compliance or vulnerability.
  • Conduct technical assessments of systems, networks, and software to identify potential security gaps or risks.
  • Collaborate with cross functional teams in Americas, Europe, Asia to understand user challenges and provide guidance on adhering to security controls and best practices.
  • Develop and maintain comprehensive documentation related to information security exceptions, including reports, findings, and recommendations for improvements.
  • Stay updated with the latest trends, technologies related to information security to proactively identify potential risks and recommend necessary adjustments.

Other Job Responsibilities

  • Implements new risk-based policies, practices, and solutions to ensure complete understanding and management of risks according to best practice. Enhance and contribute to strategies, tools, and methodologies to measure, monitor, and report risks as appropriate.
  • Use advanced knowledge to produce analytical material for discussions with cross-functional teams to understand business objectives and influence solutions to balance our risk posture.
  • Efficiently contribute to projects that impact the organization service as a key contributor on projects that may impact product teams and business units.
  • Support ISO 27001 compliance work and audits.

Minimum Qualifications

  • Bachelor’s degree or Advanced Degree in Computer Science, Information Technology, Cybersecurity, or related discipline.
  • 5+ years of experience in Information Security role.
  • At least one of the following processional certifications required: Security+, CISSP, CISA, CISM, CEH, OSCP, GMON.
  • Solid foundation in technical domains such as: Networking (switching, routing, firewalls), intrusion prevention systems, anti-malware systems and other technical security control systems.
  • Maintain comprehensive documentation for DLP program and governance processes.
  • Experience developing enterprise security policies and standards.
  • Strong verbal and written communication skills.
  • A self-motivated person that can use their creative and experience-driven analytical skills to solve problems and do analysis.

Preferred Qualifications

  • Experience within a global semiconductor company or equivalent industry experience preferred.
  • Experience working in Governance, Risk and Compliance (GRC) applications.
  • Breakdown and understand complex problems and the ability to develop a plan and innovative ways to address them.
  • Strong people and team/relationship building skills, work with cross functional global teams.
  • Knowledge and experience with Microsoft E5 security products (MDATP, Intune, AIP, Attack Simulator.
  • Knowledge and familiarity of networking fundamentals (TCP/IP, DNS, Switches, Routers, Firewalls, PKI, etc.).
  • Knowledge and experience with security infrastructure (FIDS/IPS, SIEM, Anti-Malware, DRM, DLP, vulnerability scanners, etc.).
  • Knowledge and familiarity with Active Directory and Azure Active Directory.
  • Knowledge and experience with managing security at scale on Windows, Linux, iOS, and Android based devices.
  • Ability to communicate effectively, both verbal and written to a variety of audiences (immediate team, management, other business units).

Our Commitment

We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.

Lam Research ("Lam" or the "Company") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.

We Look Forward to Your Application

Job Segment: Information Security, Computer Science, Information Systems, Linux, Technology, Research