高级网络安全专家，漏洞管理
Senior Cybersecurity Professional, Vulnerability Management
职位描述
你准备好在Mondelēz International实现目标了吗？
加入我们的使命，引领零食的未来。打造独一无二的自己。
我们正在寻找一位高级网络安全专业人员加入我们的团队，作为企业漏洞管理计划的熟练贡献者。成功候选人将展示对漏洞管理技术方面的深入理解，以及在开发报告指标和关键绩效指标（KPI）、直接管理与供应商和业务团队的关系、领导合规监控活动方面的能力和经验，以确保Mondelēz的信息技术和运营技术资产相关的漏洞风险得到适当缓解。
你的贡献包括：
- 负责Mondelēz范围内的漏洞管理工作。
- 主导流程来跟踪所有漏洞修复工作，并让组织内各个团队和供应商对时间表负责。在需要的时候和地方升级问题和故障。
- 主导流程，持续监控各种信息来源（如威胁情报源）中的漏洞，并评估其对Mondelēz环境的影响。
- 主导流程来评估发现的严重性，与相关团队制定修复计划，并为不同层级的利益相关者（如高管和技术人员）生成全面报告。
- 通过执行资产清单、安全配置和持续监控、跟踪和报告以及漏洞服务目录，支持信息安全和业务团队。
- 支持与IT和OT系统相关的漏洞管理工作，包括云和非云资产及技术。
- 根据行业标准编写和审查政策文档。
- 支持安全编码标准文档的定期更新，并对客户组织进行NIST网络安全框架的持续评估。
- 开发和维护企业范围内漏洞的报告和KPI。
- 开发和维护漏洞管理仪表板，供企业内各业务、系统、应用和数据所有者使用。
- 协助新应用程序的漏洞评估，并作为顾问资源为开发人员提供支持，以确保安全代码的创建。
要求：
渴望推动自己的未来并加速职业发展。你将带来以下经验和知识：
- 至少4年的经验
查看英文原文
Job Description
Are You Ready to Make It Happen at Mondelēz International?
Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.
We are looking for a Senior Cybersecurity Professional to join our team as a proficient contributor to an Enterprise Vulnerability Management Program. The successful candidate will showcase deep understanding of the technical aspects of Vulnerability Management as well as ability and experience in developing reporting metrics and KPIs, directly managing relationships with vendors and business teams, and leading compliance monitoring activities to ensure that vulnerability related risks to Mondelēz Information and Operational Technology assets are properly mitigated.
How you will contribute:
- Oversee Vulnerability Management activities across Mondelēz.
- Own processes to track all vulnerability remediation efforts and hold various teams across the organization and vendors accountable for timelines. Escalating issues and problems when and where needed.
- Own processes to continuously monitor various sources of information (i.e., threat intelligence feeds) for vulnerabilities and assess their impact to Mondelēz’s environment.
- Own processes that assess criticality of findings, create remediation plans with applicable teams and produce comprehensive reports for various levels of stakeholders (i.e., executive and technical).
- Support Information Security and Business groups by performing asset inventory, secure configurations and continuous monitoring, tracking and reporting and vulnerability service catalog.
- Support Vulnerability Management activities related specifically to IT and OT systems including Cloud and non-cloud assets and technologies.
- Write and review policy documentation based on industry standards.
- Support regular updates to secure coding standards documentation and the ongoing assessment of the customer organization against the NIST Cyber Security Framework.
- Develop and maintain reporting and KPIs on vulnerabilities across the enterprise.
- Develop and maintain Vulnerability Management Dashboards to be used by business, system, application and data owners across the enterprise.
- Assist with vulnerability assessments of new applications and act as an advisory resource to their developers to help ensure the creation of secure code.
Requirements:
A desire to drive your future and accelerate your career. You will bring experience and knowledge in:
- Minimum 4 years in Information/Cyber Security field, with at least 2 years working in Vulnerability Management.
- Experience with vulnerability scanning tools (e.g., Tenable, Wiz.io, etc) including set-up, configuration, architecture, reporting, scanning best practices.
- Knowledge of security concepts and methodologies such as vulnerability assessments, application vulnerability testing, enterprise security strategies, network and cloud security.
- Knowledge of security frameworks such as CIS and NIST.
- Excellent written and verbal communications skills, including presentational skills and able to clearly communicate issues to management and other key stakeholders.
- Knowledge of creating reporting dashboards on Vulnerability Management reporting tools.
No Relocation support availableBusiness Unit Summary
At Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about.
We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. We are proud to hold the top position globally in biscuits, chocolate and candy and the second top position in gum.
Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen—and happen fast.
Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Job Type
RegularInformation SecurityTechnology & DigitalOriginally posted on Himalayas