Information Security Risk Analyst 4

The Enterprise Security group is dedicated to protecting the company’s information, systems, people, and physical assets. We support users around the world and partner with teams to manage security risks, enabling them to achieve their business objectives securely. 

This role supports Governance, Risk and Compliance (GRC) activities across the Asia-Pacific region. As part of the GRC team, this role connects regional stakeholders with the global GRC function, translates security expectations into practical guidance, and helps employees adopt secure behaviors. Professional fluency in Korean is essential for delivering training, localizing communications and engaging Korean-speaking stakeholders; Mandarin language proficiency is a plus.

• Plan and deliver security awareness campaigns, training and phishing-awareness activities for APAC audiences, reinforcing practical behaviors such as recognizing suspicious messages, protecting sensitive information and reporting concerns.
• Localize global awareness content, preserving technical accuracy while adapting language, examples and delivery methods to regional business needs and cultural context.
• Serve as the APAC liaison between the global GRC team and regional business, IT, HR and other relevant stakeholders; gather feedback, coordinate activities and communicate priorities across regions and time zones.
• Create clear security communications and facilitate Korean-language training and stakeholder discussions, making security requirements understandable to technical and nontechnical audiences.
• Use GRC platforms to manage assigned workflows, maintain records, coordinate control and compliance evidence.
• Support regional assessments, evidence collection and audit preparation in partnership with the global GRC team, maintaining accurate documentation and following up on outstanding actions.
• Prepare dashboards and status reports, and monitor awareness measures such as training completion, campaign engagement and phishing-awareness outcomes to identify improvement opportunities.
• Escalate regional risks, communication gaps and overdue actions through established channels, and recommend improvements to awareness content, workflows and stakeholder coordination.

• Experience developing or delivering information security awareness programs, employee training or security communications, with an understanding of phishing, social engineering and secure handling of information
• Strong written, verbal and presentation skills, with the ability to explain security topics clearly, build stakeholder relationships and coordinate across functions
• Experience coordinating activities across regions or time zones, balancing global requirements with local needs, and managing concurrent priorities with attention to detail and follow-through

• Minimum of 5 years of related experience with a Bachelor’s degree; or 3 years and a Master’s degree
• Professional fluency in spoken and written Korean, including the ability to deliver training, localize security content and engage Korean-speaking business stakeholders (mandatory)
• Mandarin language proficiency to support communication and awareness activities (desired but not mandatory)
• Relevant certifications in information security, risk or audit, such as Security+, CRISC, CISA or CISSP, are helpful but not required

We believe it is important for every person to feel valued, included, and empowered to achieve their full potential. By bringing unique individuals and viewpoints together, we achieve extraordinary results.

Lam Research ("Lam" or the "Company") is an equal opportunity employer. Lam is committed to and reaffirms support of equal opportunity in employment and non-discrimination in employment policies, practices and procedures on the basis of race, religious creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic information, marital status, sex (including pregnancy, childbirth and related medical conditions), gender, gender identity, gender expression, age, sexual orientation, or military and veteran status or any other category protected by applicable federal, state, or local laws. It is the Company's intention to comply with all applicable laws and regulations. Company policy prohibits unlawful discrimination against applicants or employees.

Lam offers a variety of work location models based on the needs of each role. Our hybrid roles combine the benefits of on-site collaboration with colleagues and the flexibility to work remotely and fall into two categories – On-site Flex and Virtual Flex. ‘On-site Flex’ you’ll work 3+ days per week on-site at a Lam or customer/supplier location, with the opportunity to work remotely for the balance of the week. ‘Virtual Flex’ you’ll work 1-2 days per week on-site at a Lam or customer/supplier location, and remotely the rest of the time.