Information Security Business Partner, DISH

• Bachelor's Degree or equivalent experience and at least 4-8 years of directly related experience
• Must have a solid understanding of SOX, PCI, CPNI, CCPA, and similar IT Compliance and Privacy regulations
• Experience with NIST, ISO, and other industry standards
• Expert user of Microsoft/Google Suite and an eGRC tool
• Analytical aptitude with an emphasis on investigative, methodical critical questioning, and logical thinking; a data-driven decision maker
• Strong understanding of mitigation methodologies and our responsibility as a company to adhere to regulatory requirements about information security, privacy, and/or data security
• Experience leading through others and rolling out new security controls or programs
• Solid working knowledge of information security concepts and controls
• Excellent project management skills, with the ability to work within deadlines, juggle multiple priorities, design project plans, and provide project updates
• Ability to work independently with little direction and/or supervision
• Superior communication skills with the ability to ask questions, escalate roadblocks early, and interact effectively at multiple levels in the organization
• Keen attention to detail with the ability to correct on the fly and work independently
• Solid interpersonal and verbal/written communication skills
• Requires a well-organized, cheerful, and persuasive individual, who can manage multiple priorities at once
• Must have good meeting management and communication skills to keep conversations focused and productive
• Must be self-driven; able to manage schedules, meet deadlines, coordinate with others, and perform tasks with minimal supervision
• Must have the ability to work with a diverse audience, under tight deadlines, and negotiate successful outcomes to challenging problems

Desirable

• The ISBP is a key part of our Information Security and Governance, Risk, and Compliance (GRC) teams. This position is full-time with standard work hours, has no supervisory duties, and requires very little travel
• Be responsible for working with subject matter experts (SME) and management to drive the security issue management program
• Support the Security Issue Management program to ensure real-time updates are made to open issues
• Maintain the repository of logged issues and provide reporting where required
• Review internal policies, industry standards, and relevant regulations and understand how they apply in the DISH environment
• Partner with security teams to identify and analyze security requirements to align with NIST standards
• Maintain an inventory of documentation that supports information security compliance
• Guide issue documentation through approval workflows and incorporate feedback from each stage of the review process
• Support end user questions, and conduct training related to the issue management program
• Develop and maintain indices, glossaries and other supporting documentation
• Publish and distribute issue management program metrics and dashboards