Senior Technology Analyst – Audit and Automation
Samsara
CloudCyber SecurityIoTPythonSQL
Vice President, Information Security
BNY
full-time
Posted on:
Origin: • 🇺🇸 United States • Pennsylvania
Visit company websiteJob Level
Lead
Tech Stack
CloudCyber Security
About the role
- Participate in delivery program toll gate processes such as Permit to Design (PTD), Permit to Build (PTB) and Permit to Operate (PTO).
- Perform security assessments and control verification for applications requesting permission to deploy Production changes.
- Identify appropriate artifacts and evidence that demonstrates compliance with security requirements and ensures control satisfaction.
- Work closely with application teams (“our customers”) across numerous lines of business to effectively guide them through security requirements.
- Assist in ensuring application compliance with bank and regulatory standards.
- Evaluate Architecture Design requirements against the applicable security control requirements and identify gaps and remediation options; document findings.
- Develop metrics to measure progress and effectiveness across the security control landscape.
- Establish strong working relationships and effective communications across various organizational groups, inside and outside of security; coordinate meetings with engineering and application teams.
- Research information and train within the Security Architecture and Control Assessment disciplines.
- Assist with all phases of technology enhancements: identify, assess, evaluate, design, build, implement, integrate, automate and operationalize.
Requirements
- Bachelor’s degree is required; a master’s degree in a relevant field is preferred.
- 5+ years of work experience in information security or cyber security.
- Working knowledge of cyber security, security architecture principles, and Information Technology.
- Understanding of public cloud technologies, shared responsibility model for cloud, and experience implementing or assessing cloud security controls.
- Working knowledge of IT control frameworks such as ITIL, NIST 800-53, or ISO 27000.
- Ability to clearly document security requirements.
- Ability to organize many types of documents and meetings on a daily basis, identify and breakdown complex problems and review related information to develop and evaluate options and implement solutions; effectively communicating all phases to vastly different audiences.
- Ability to listen, understand, and collect information presented through presentations or verbal meetings.
