NIKE, Inc., Beaverton, OR. Will reference and enforce the direction set by
the Corporate Information Security team (CIS) and the technology teams in
Beaverton, OR. Will drive consumption and adoption of the existing CIS security
services. Will evaluate and recommend activities to support an information
security program. Will coordinate with cross functional teams for alignment and
establish practices for validation of controls throughout the design and
delivery lifecycle. Will facilitate business and technology risk decisions.
Will apply the security control standards and practices to be embedded within
each system and environment. Will communicate and influence at the program
management, technical lead, and senior leadership levels. Will partner with
business and technology to provide expert security guidance into the design and
implementation of enterprise capabilities. Will consult with both technology
and business teams to identify priorities and security capability requirements
and incorporate these requirements into the security strategy. Will work
closely with different work streams end-to-end in releasing secure and
compliant infrastructure, applications and experiences at the speed of
business. Will have zero to five direct subordinates. Will engage in ten
percent or less domestic and international travel.
Education: Bachelor’s degree in computer science, business information management,
or engineering. Experience: eight
years of overall progressive experience in information security architecture. Skills/Requirements: 4
years of experience: (1) apply security control standards and best
practices; (2) security architecture, including SAP S4 Hana, SAP S4 Finance,
UX, and SAP S4; (3) cloud deployment models, secure coding, cyber security,
data migration, and data security; (4) SAP industry best practices, including
SAP systems and Data and Information flows; (5) compliance controls with
respect to regulatory laws; (6) identifying complex problems in enterprise
environments; and (7) reviewing and mapping business requirements and systems
and creating a threat landscape to determine the business risk appetite.
