Principal Information Security Analyst – Information Risk Management

Position Type Full Time Career area Information Technology Location Remote Job ID R\-92375* Become a Part of the NIKE, Inc. Team NIKE, Inc. does more than outfit the world’s best athletes. It is a place to explore potential, obliterate boundaries and push out the edges of what can be. The company looks for people who can grow, think, dream and create. Its culture thrives by embracing diversity and rewarding imagination. The brand seeks achievers, leaders and visionaries. At NIKE, Inc. it’s about each person bringing skills and passion to a challenging and constantly evolving game. Open to remote work except in South Dakota, Vermont and West Virginia. The annual base salary for this position ranges from $149,100\.00 in our lowest geographic market to $313,900\.00 in our highest geographic market. Actual salary will vary based on a candidate's location, qualifications, skills and experience. Information about benefits can be found here. **WHO WE ARE LOOKING FOR** -------------------------- We're looking for a **Principal Information Security Analyst** to join the Information Risk Management (IRM) team within Corporate Information Security (CIS). This role is a senior individual contributor and program leader who will deliver against an information security and cybersecurity assessment plan integrated into a broader enterprise risk management program supported by executive management. You will leverage deep expertise in security policies, standards, controls, and industry best practices to perform and lead risk assessments of Nike systems and systems managed for Nike by vendors. You will also drive strategic advancement of Nike's Third\-Party Risk Management (TPRM) program—establishing risk\-profiling methodologies, tiered assurance frameworks, vendor lifecycle controls, and executive reporting capabilities that protect Nike's most sensitive data across a complex global vendor ecosystem. Our ideal candidate is a trusted advisor with superb communication skills, exceptional analytical and problem\-solving ability, intellectual curiosity, and proven experience translating complex security risks for both technical and non\-technical audiences—including executive leadership, procurement, legal, privacy, and technology partners. You thrive in cross\-functional environments, influence without authority, and bring a principal\-level perspective to program design, not just execution. Beyond assessment execution and program delivery, this role carries a broader organizational mandate. You will serve as a recognized subject matter expert in information risk and cybersecurity not only within CIS, but across Nike. Partner teams including Procurement, Legal, Privacy, Engineering, and the broader Nike Business will look to you as a trusted, accessible authority on information risk. You will also identify, initiate, and lead cross\-functional programs that extend beyond IRM’s immediate scope, efforts such as enterprise\-wide data gov