| Urgent need - Security Engineer - Analyst - San Jose, CA (Open to Remote) at Remote, Remote, USA |
| Email: [email protected] |
| From: Ben, Spar Info Sys [email protected] Reply to: [email protected] Hi Partners, Please share some suitable profile on below role along with location, Visa status and expected pay rate for this role. Job Title: Security Engineer/Analyst Location: San Jose, CA (Open to Remote also) Experience Required: Min 4 - 7 years Open to C2C Mandatory Areas - Security Engineer/Analyst Good To have Skills Skill 1 Yrs of Exp Practices and Principles Mandatory if Applicable Must have Certifications Security related certifications, CISSP desired NOTE: The ideal candidate should have over 5 years of security experience, preferably in the third-party security field. This role will be working directly with business and technology partners, vendors, and legal to assess vendor security issues and risks, prioritize risk mitigation activities and guide the business to make risk-based decisions. We are looking for someone with outstanding security, communication, negotiation and interpersonal skills. The candidate should have good experience with Information Security and Risk Management Practices and Principles as well as some Automation and Technical experience. Job Description: Demonstrable understanding of cybersecurity risk assessment and risk management methodologies. Key qualification includes deep understanding of security and technical domains to best inform the program and assessment execution. Work directly with business and technology partners, vendors, and legal to assess vendor security issues and risks, prioritize risk mitigation activities and guide the business to make risk-based decisions. Evaluate information security program maturity, security controls, and security documentation for Clients strategic vendors. Review threat models for third-party integrations and provide guidance. Review and assess Client vendors security posture before onboarding them to Client. Communicate security risks to the business and build risk mitigation plans. Support legal team with negotiation around Information security contract requirements. Collaborate with cross-functional departments within Security, Procurement, Legal on process improvements and workflow integrations to provide improved customer experience. Communicate and present key vendor security initiatives, practices and issues to business units. Collaborate to develop executive reporting Provide metrics to report on vendor security program maturity. Benchmark the program against the third-party risk assessment programs from similar companies and propose improvement Develop continuous vendor monitoring capability by implementing Bit Sight or similar technology. Create dashboards for executive reporting on BI tools (PowerBI preferred), JIRA. Develop automation for enhancing the program, as needed. Keywords: business intelligence California |
| [email protected] View all |
| Wed Nov 15 23:18:00 UTC 2023 |