MathWorks nurtures growth, appreciates inclusivity, encourages initiative, values teamwork, shares success, and rewards excellence.

Responsibilities Policy and Control Development:

• Establish quality criteria and review processes for information security policy and control development, ensuring consistency, clarity, and auditability before formal approval.
• Review and validate internal security policies and IT General Controls (ITGCs) against quality criteria to ensure they are complete, accurate, traceable, and aligned with NIST, CMMC, COBIT, and ISO 27001 requirements.

Procedure Development

• Partner cross-functionally to drive development and maintenance of internal standards and procedures that support an effective and efficient system of internal controls
• Evaluate whether documented procedures accurately reflect approved security policies and meet required quality standards.
• Verify that procedures are complete, actionable, and aligned with compliance frameworks, and provide feedback or required revisions to process owners.

Control Implementation

• Drive implementation of security controls and processes by engaging with process owners, control operators, and cross-functional stakeholders.
• Independently assess and verify the correct and consistent implementation of security controls across teams and systems.
• Conduct quality checks to confirm that implemented controls meet security requirements, are supported by appropriate evidence, and remain effective over time.

Compliance Monitoring

• Perform ongoing audits, spot checks, and control tests to assess the effectiveness, reliability, and sustainability of information security controls.
• Identify deviations, gaps, or process defects and ensure that remediation actions are clearly documented, assigned, completed, and validated.
• Drive and verify the effectiveness of corrective and preventive actions, ensuring that process improvements are implemented, documented, and sustained.

Qualifications

• Experience with software development processes.
• Hands-on experience with definition and implementation of department / organizational security controls.
• Experience with performing internal process audits and process improvement work.
• Experience with / understanding of SOC 2, COBIT, ITIL, ISO, IT General Controls (ITGC), NIST 800-171, NIST 800-53, ISO 27001/2, NIST SSDF, and/or other industry standard control frameworks to document and assess Cybersecurity compliance.
• Exceptional communication skills including clear and concise writing, an engaging presentation style, and group facilitation.
• Strong teamwork skills with a demonstrated ability to collaborate across teams and roles.

Required Qualifications

• A bachelor's degree and 6 years of professional work experience (or a master's degree and 3 years of professional work experience, or a PhD degree, or equivalent experience) is required.

The MathWorks, Inc. is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here.MathWorks participates in E-Verify. View the E-Verify posters here.PDN-a0d6d22b-b9b9-4eb2-8f23-1637ec4b3308