FBS Information Security Specialist
农民商务服务是农民运营的一部分，旨在建立全球对识别，招聘，雇佣和保留顶尖人才的方法。通过将国际影响力与美国专业知识结合起来，我们构建了多元化且高性能的团队，这些团队能够在当今竞争激烈的市场上壮成长。我们相信每个成功的企业的基础都在于拥有正确的人有正确技能。这就是我们帮助农民建立一个赢得胜利的团队来实现一致和可持续的结果的地方。由于我们没有本地法律实体，我们已经与 Capgemini 合作，它作为记录的雇主。卡普杰明尼负责管理当地工资和福利。你在我们之旅中可以期待什么：· 一家有强大的市场存在的坚实创新型公司 · 有动态，多元化和多元文化的工作环境 · 有深入的市场知识和战略愿景的领导者 · 持续学习和发展要求总结：使用广泛的基于风险的方法来独立进行各种互联媒体至高网络安全风险的中间到先进技术分析。分析并确定所有企业系统/网络的安全需求；提供建议，以保护高度复杂的信息系统，确保系统和数据的机密性，完整性和可用性。根据最佳实践进行高复杂性的安全测试和安全风险评估，同时解决业务挑战，并改善业务流程。独立管理和作为所有公司安全技术平台的中小企业；分析严重的安全违规事件；参与任何公司技术平台的架构讨论；记录公司安全政策责任：•识别，评估，记录和阐明所有类型的数据安全和数据隐私风险，除了适当的反措施和控制来解决数据安全和个人隐私问题。•确定积极缓解中等至重大风险的机会，并管理网络防御信息威胁或目标分析以及企业内部产生威胁信息。•开展第三方数据安全风险评估，项目安全评估，商业风险评估和对大多数公司系统和潜在新系统进行安全测试。•执行技术和非技术工作。
查看英文原文
FBS – Farmer Business Services is part of Farmers operations with the purpose of building a global approach to identifying, recruiting, hiring, and retaining top talent. By combining international reach with US expertise, we build diverse and high-performing teams that are equipped to thrive in today’s competitive marketplace.
We believe that the foundation of every successful business lies in having the right people with the right skills. That is where we come in—helping Farmers build a winning team that delivers consistent and sustainable results.
Since we don’t have a local legal entity, we’ve partnered with Capgemini, which acts as the Employer of Record. Capgemini is responsible for managing local payroll and benefits.
What to expect on your journey with us:
· A solid and innovative company with a strong market presence
· A dynamic, diverse, and multicultural work environment
· Leaders with deep market knowledge and strategic vision
· Continuous learning and development
Requirements
Summary:
Utilize a wide range of risk-based methodologies to independently perform intermediate to advanced technical analysis of a broad range of interdependent medium to high cybersecurity risks. Analyze and establish security requirements for all company systems/networks; advise how to protect a highly complex information system to ensure the confidentiality, integrity, and availability of systems and data. Independently perform security testing and security risk assessments of high complexity according to best practices to address business challenges while also improving business processes. Independently manage and serve as a SME for all company security and technology platforms; analyze severe security breaches and incidents; participate in architectural discussion for any company technology platform; and document corporate security policies
Responsibilities:
•Identify, assess, document, and articulate all types of data security and data privacy risks in addition to appropriate countermeasures and controls to address data security and data privacy concerns.
•Identify opportunities to proactively mitigate moderate to major risks, and manage threat or target analysis of cyber defense information and production of threat information within the enterprise.
•Conduct third party data security risk assessments, project security assessments, business risk assessments and security testing for most company systems and potential new systems.
•Perform technical and nontechnical risk, and vulnerability assessments of relevant technology focus areas including local and global computing environment, network, infrastructure and applications, etc.
•Perform risk analysis when any application or system undergo a major change.
•Capture security controls to integrate security within the process, to identify key security objectives, and to maximize software security while minimizing disruption to plans and schedules.
•Design processes to ensure legal and regulatory security compliance requirements are met.
•Lead process improvement in detecting and responding to cybersecurity incidents and events.
•Review, approve and ensure implementation of sophisticated security configurations. Interpret irregular and indeterminate patterns of noncompliance to determine their impact on levels of risk and overall effectiveness of the enterprise’s cybersecurity program.
•Oversee detective, protective or corrective measures when cybersecurity incidents are discovered.
•Participate in audits of cyber programs and projects.
•Track audit findings and recommendations to ensure appropriate mitigation actions are taken.
•Demonstrate ownership of assigned audit actions or regulator requests by diligently providing responses and evidence within established timeframes.
•Build and manage relationships with a wide network of local business and IT front-line and senior stakeholders.
•Lead cross-functional projects that incorporate local and global teams.
•Demonstrate the value of information technology (IT) security throughout all levels of the organization.
•Influence business and IT teams to create innovative and sophisticated solutions to complex problems.
•Create, review, and update security policies, procedures, standards and guidelines.
•Act as a SME for most company technology platforms and main contact point for IT groups seeking intermediate to advanced security input.
•Participate in architectural discussions for all company technology platforms
Benefits
This position comes with a competitive compensation and benefits package.
· A competitive salary and performance-based bonuses.
· Comprehensive benefits package.
· Flexible work arrangements (remote and/or office-based).
· You will also enjoy a dynamic and inclusive work culture within a globally renowned group.
· Private Health Insurance.
· Paid Time Off.
· Training & Development opportunities in partnership with renowned companies.
Originally posted on Himalayas