177 joburi disponibile

*We are unable to sponsor for this permanent Full time role* Prestigious Fortune 500 Company is currently seeking a Cloud Security Governance Specialist with strong Application experience. Candidate will join a team responsible for helping to integrate security into the development of the cloud based applications. Candidate will be working closely with the product, software, and infrastructure development teams to implement best practices within the cloud based environments. Candidate will work closely with developers and system architects to diagnose, document, solution, and remediate any deviations from governance standards. Candidate will contribute to the evaluation, recommendations and implementations of cloud security controls in an automated continuous integration/deployment environment. Responsibilities : Work closely with Application Development, Cloud, Governance, and Compliance teams to help formulate and implement a strategy for cloud based security that is tailored to the specific risks facing the organization, including threat modeling and applications security advisement services. Develop and maintain a balanced cloud security governance framework based on industry standards Ensure compliance with society, regulatory, and industry standards for cloud based security. Continuously evaluate the organization's existing cloud security practices, define and measure security-related activities, and demonstrating improvements to the cloud programs within the organization. Evaluate business strategies, requirements, and user needs, existing usage cloud platforms, technical capabilities, and overall cloud application maturity, and provides strategic guidance and best-practices based recommendations for implementing governance boards and proven best practices for cloud based application/platform development, deployment, and support. Support lead security consultants in promoting and consulting on the positions that help strengthen and secure the organization by either following standards or helping direct others on technology positions. Help facilitate review of changes in company processes, standards and technology to ensure the effectiveness of security controls to meet compliance requirements Help consult with stakeholders on requirements for new and existing business/technology solutions to assure compliance to compliance frameworks and internal standards and governing policies and procedures Responsible for building effective working relationships, making sound decisions, successfully making changes, initiating action and achieving results as a trusted advisor. Qualifications: 5 years of experience in secure application/platform development and security 3 years of project management, consulting, and/or application security analyst experience Relevant post-secondary education and/or industry standard certifications preferred (ie, CompTIA, Microsoft, EC-Council, ISACA, ISC2, SANS Institute/GIAC, EMC, Amazon, VMware), AWS Certified Solutions Architect, CompTIA Cloud+ Certification, CISSP, Certificate of Cloud Security Knowledge (CCSK) Strong understanding of cloud security governance Practical understanding and use of cloud computing and cloud security tools Experience with establishing cloud security governance across an organization Thorough knowledge of common application vulnerabilities (eg OWASP Top 10), attack techniques and remediation tactics/strategies Demonstrable passion for application security, general understanding of SDLC processes and key security checkpoints along with software development methodologies Fluent in reviewing technical reports based on findings. Strong a self-starter who has the ability to operate independently and demonstrates complete ownership over assigned objectives in a "semi-structured" environment, but also recognizes when guidance is needed Strong understanding of IT security best practices by applying depth and breadth of expertise in multiple related disciplines Understanding and Passion for Agile/XP/Scrum/Kanban, Test Driven Development built on User Stories and Continuous Integration/Testing/Delivery Ability to effectively work with technical and non-technical resources Demonstrated success at leading cross-functional projects leveraging SDLC methodology. Basic knowledge of Security Analysis (manual and leveraging automated scanning tools). Familiarity with both static analysis and/or dynamic scanning tools.

*We are unable to sponsor for this permanent Full time role* Prestigious Fortune 500 Company is currently seeking a Cloud Security Governance Specialist with strong Application experience. Candidate will join a team responsible for helping to integrate security into the development of the cloud based applications. Candidate will be working closely with the product, software, and infrastructure development teams to implement best practices within the cloud based environments. Candidate will work closely with developers and system architects to diagnose, document, solution, and remediate any deviations from governance standards. Candidate will contribute to the evaluation, recommendations and implementations of cloud security controls in an automated continuous integration/deployment environment. Responsibilities : Work closely with Application Development, Cloud, Governance, and Compliance teams to help formulate and implement a strategy for cloud based security that is tailored to the specific risks facing the organization, including threat modeling and applications security advisement services. Develop and maintain a balanced cloud security governance framework based on industry standards Ensure compliance with society, regulatory, and industry standards for cloud based security. Continuously evaluate the organization's existing cloud security practices, define and measure security-related activities, and demonstrating improvements to the cloud programs within the organization. Evaluate business strategies, requirements, and user needs, existing usage cloud platforms, technical capabilities, and overall cloud application maturity, and provides strategic guidance and best-practices based recommendations for implementing governance boards and proven best practices for cloud based application/platform development, deployment, and support. Support lead security consultants in promoting and consulting on the positions that help strengthen and secure the organization by either following standards or helping direct others on technology positions. Help facilitate review of changes in company processes, standards and technology to ensure the effectiveness of security controls to meet compliance requirements Help consult with stakeholders on requirements for new and existing business/technology solutions to assure compliance to compliance frameworks and internal standards and governing policies and procedures Responsible for building effective working relationships, making sound decisions, successfully making changes, initiating action and achieving results as a trusted advisor. Qualifications: 5 years of experience in secure application/platform development and security 3 years of project management, consulting, and/or application security analyst experience Relevant post-secondary education and/or industry standard certifications preferred (ie, CompTIA, Microsoft, EC-Council, ISACA, ISC2, SANS Institute/GIAC, EMC, Amazon, VMware), AWS Certified Solutions Architect, CompTIA Cloud+ Certification, CISSP, Certificate of Cloud Security Knowledge (CCSK) Strong understanding of cloud security governance Practical understanding and use of cloud computing and cloud security tools Experience with establishing cloud security governance across an organization Thorough knowledge of common application vulnerabilities (eg OWASP Top 10), attack techniques and remediation tactics/strategies Demonstrable passion for application security, general understanding of SDLC processes and key security checkpoints along with software development methodologies Fluent in reviewing technical reports based on findings. Strong a self-starter who has the ability to operate independently and demonstrates complete ownership over assigned objectives in a "semi-structured" environment, but also recognizes when guidance is needed Strong understanding of IT security best practices by applying depth and breadth of expertise in multiple related disciplines Understanding and Passion for Agile/XP/Scrum/Kanban, Test Driven Development built on User Stories and Continuous Integration/Testing/Delivery Ability to effectively work with technical and non-technical resources Demonstrated success at leading cross-functional projects leveraging SDLC methodology. Basic knowledge of Security Analysis (manual and leveraging automated scanning tools). Familiarity with both static analysis and/or dynamic scanning tools.

*We are unable to sponsor for this permanent Full time role* Prestigious Fortune 500 Company is currently seeking a Cloud Security Governance Specialist with strong Application experience. Candidate will join a team responsible for helping to integrate security into the development of the cloud based applications. Candidate will be working closely with the product, software, and infrastructure development teams to implement best practices within the cloud based environments. Candidate will work closely with developers and system architects to diagnose, document, solution, and remediate any deviations from governance standards. Candidate will contribute to the evaluation, recommendations and implementations of cloud security controls in an automated continuous integration/deployment environment. Responsibilities : Work closely with Application Development, Cloud, Governance, and Compliance teams to help formulate and implement a strategy for cloud based security that is tailored to the specific risks facing the organization, including threat modeling and applications security advisement services. Develop and maintain a balanced cloud security governance framework based on industry standards Ensure compliance with society, regulatory, and industry standards for cloud based security. Continuously evaluate the organization's existing cloud security practices, define and measure security-related activities, and demonstrating improvements to the cloud programs within the organization. Evaluate business strategies, requirements, and user needs, existing usage cloud platforms, technical capabilities, and overall cloud application maturity, and provides strategic guidance and best-practices based recommendations for implementing governance boards and proven best practices for cloud based application/platform development, deployment, and support. Support lead security consultants in promoting and consulting on the positions that help strengthen and secure the organization by either following standards or helping direct others on technology positions. Help facilitate review of changes in company processes, standards and technology to ensure the effectiveness of security controls to meet compliance requirements Help consult with stakeholders on requirements for new and existing business/technology solutions to assure compliance to compliance frameworks and internal standards and governing policies and procedures Responsible for building effective working relationships, making sound decisions, successfully making changes, initiating action and achieving results as a trusted advisor. Qualifications: 5 years of experience in secure application/platform development and security 3 years of project management, consulting, and/or application security analyst experience Relevant post-secondary education and/or industry standard certifications preferred (ie, CompTIA, Microsoft, EC-Council, ISACA, ISC2, SANS Institute/GIAC, EMC, Amazon, VMware), AWS Certified Solutions Architect, CompTIA Cloud+ Certification, CISSP, Certificate of Cloud Security Knowledge (CCSK) Strong understanding of cloud security governance Practical understanding and use of cloud computing and cloud security tools Experience with establishing cloud security governance across an organization Thorough knowledge of common application vulnerabilities (eg OWASP Top 10), attack techniques and remediation tactics/strategies Demonstrable passion for application security, general understanding of SDLC processes and key security checkpoints along with software development methodologies Fluent in reviewing technical reports based on findings. Strong a self-starter who has the ability to operate independently and demonstrates complete ownership over assigned objectives in a "semi-structured" environment, but also recognizes when guidance is needed Strong understanding of IT security best practices by applying depth and breadth of expertise in multiple related disciplines Understanding and Passion for Agile/XP/Scrum/Kanban, Test Driven Development built on User Stories and Continuous Integration/Testing/Delivery Ability to effectively work with technical and non-technical resources Demonstrated success at leading cross-functional projects leveraging SDLC methodology. Basic knowledge of Security Analysis (manual and leveraging automated scanning tools). Familiarity with both static analysis and/or dynamic scanning tools.

Multiple Vacancies: Oracle Analyst/Consultant/Senior Consultant/Manager Roles Location: Milano - Roma Tipologia: Permanent/Indeterminato Inizio: ASAP Una delle più dinamiche e innovative multinazionali globali di consulenza è alla ricerca di candidati da inserire nella Business Unit di Oracle. In pipeline svariati progetti prestigiosi sui quali ampliare le proprie conoscenze ed esperienze apportando un valore aggiunto per un'ampia possibilità di carriera. Nello specifico, le figure richieste avranno un'esperienza pregressa tra i 2 e i 10 anni in società di consulenza o provenienti da importanti compagnie nazionali/multinazionali e saranno familiari in almeno una delle aree EBS o Cloud di Oracle Una buona conoscenza della lingua inglese, permetterà' ai candidati scelti di integrarsi adeguatamente nei nuovi team da formare e in quelli già esistenti, con la possibilità di una crescita di visibilità a livello internazionale. I candidati target della ricerca avranno esperienza funzionale e/o tecnica nelle seguenti aree: -Oracle E - Business Suite, le cui competenze dovranno essere incentrate su almeno uno dei seguenti moduli: Oracle Customer Relationship Management. Oracle Customer Service Management. Oracle Financials. Oracle Human Resource Management System (HRMS) Oracle Projects Portfolio. Oracle Supply Chain Applications. Oracle Advanced Procurement. -Oracle BI o OBIEE -Cloud - CX,ERP, SCM, EPM, HCM, IoT -Siebel CRM Requisiti: - Minimo 2 anni di esperienza funzionale e/o tecnica in una delle aree sopra elencate di Oracle - Buona conoscenza della lingua inglese. Per saperne di piu' o per applicare scrivi e/o invia il tuo CV a (see below) oppure telefona al e chedi di parlare con Federica Funari.

IT Risk and Compliance Analyst Lake Forest, IL Prestigious Firm is seeking an IT Risk and Compliance Analyst. This position drives compliance of global business units with Companys Global Risk Management and Compliance activities in alignment with Companys IT Risk Management and Compliance Program. Team member will assess processes to identify gaps in business processes and controls, and assist in the design and documentation of processes to address the gaps in order to drive compliance in alignment with the risk management framework. Additional responsibilities include design, implementation and facilitation of Risk Metrics and Measures and the Security Awareness programs. Principal Duties & Responsibilities: This section contains list of 5-8 primary responsibilities that account for 10% or more of their time. The incumbent will perform other duties as assigned. Job is an individual contributor. Works with business teams across the global organization to execute the ES Compliance and Risk Management program framework, extending processes as necessary to help business partners identify information risk and manage mitigation to an acceptable level Provides inputs to global risk management processes in developing controls needed for the mitigation of risk for business processes which are not compliant with information security and risk frameworks Lead other team members within the Risk and Compliance organization in assessing risk, developing appropriate controls and advising on creation of action plans to address gaps. Collaboratively works to influence and socialize ES strategies, standards, policies, procedures, communications and governance. Provides guidance with respect to needed changes to established IT Security policies based on day-to-day interactions with Company businesses. Serves as subject matter expert in providing advice to global business units regarding compliance with applicable frameworks including ISO 27001, NIST Cybersecurity Framework (CSF), Cloud Controls Matrix (CCM) and standards including the Payment Card Industry Data Security Standard (PCI DSS) as well as other frameworks and standards as required. Takes actions as directed to ensure business awareness of Data Privacy guidance, including the General Data Protection Regulation (GDPR), and appropriate engagement of Data Privacy office, as needed. Provides advice to global business units on actions needed to align business requirements with relevant global security frameworks, standards, policies, and procedures. Proactively provides relevant inputs to the global risk framework based on the latest government and industry information regarding new threats and vulnerabilities and communicate relevant information to appropriate teams, soliciting action plans if needed. Coordinates deployment and measurement of security awareness efforts across Company global business units Works closely with global business, contract and legal teams to assess proposed terms and conditions, align with appropriate risk profile and provide feedback on changes needed. Monitors and manages ES risk register to ensure that all business risks are accurately represented and actively managed. Aligns individual goals to Risk and Compliance team goals with S.MA.R.T. objectives Recognizes opportunities to balance risk and creativity in quickly responding to business opportunities Preferred Education & Experience: BA/BS or equivalent preferred. 5-7 years of experience in related field preferred. Good verbal and written communication, facilitation, and interpersonal skills CISSP (Certified Information Systems Security Professional) certification or candidate for certification highly preferred CISA (Certified Information Security Auditor), CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control) or CIPP (Certified Information Privacy Professional) certifications helpful, but not required Experience working with ISO 27001 (or similar) security framework, PCI DSS and CSA CCM standards in operational IT environment required Experience applying other security frameworks (eg, CSF, COBIT), laws and standards (eg Sarbanes-Oxley, GDPR, HIPAA) helpful, but not required Working experience with IT Security risk frameworks such as ISO 27005, OCTAVE, FAIR, NIST RMF very helpful Operational experience in applying risk frameworks to technologies (including cloud, containers) and continuous processes (including DevOps and Agile software deployment) very helpful Working knowledge of compliance tools such as the Unified Compliance Framework (UCF) Common Controls Hub (CCH) helpful, but not required Must be able to work in a collaborative team environment with individuals at appropriate levels of the Company Effective negotiation skills Work Environment: Work conditions are typical of an office environment. Office job, ability to lift/move Minimal travel required to US business locations as needed to conduct audits, meet Team Members, suppliers, etc. no more than 5% Impact: Provides competitive advantage by efficiently executing the plans developed within ES around the security posture that uphold and extend the reputation of the Company Global brand Serves as security liaison with US business and IT teams to ensure understanding of security frameworks in the context of individual initiatives and to monitor and document management of action plans to mitigate risk Key to executing, communicating and validating integration of defined security frameworks into US business applications, infrastructure and operations in compliance with appropriate regulations, laws and corporate policies relating to information systems and processes. Working Relationships: Internal Engages with business partners, process owners, Contract Management, Legal, Internal and audit to gather information on initiatives, coordinate and provide assistance in assessments of the regulatory, compliance and risk posture External Interfaces with technology service providers, software and hardware vendors, consultants, as needed Engages with external audit as needed to gather information on and coordinate in support of compliance activities

McLean, VA $120-125K Prestigious Enterprise Company is seeking a Senior Java Developer to work on the micro-service architectures. This is an exciting opportunity for a senior level full stack Java developer to work on the next generation of several key business applications as they transform from current to future state micro-service architectures. Work with business/systems analyst teams to understand requirements. Partner with architects and project leadership to recommend transformative applications of micro-services architecture Complete development with limited supervision from the development technical lead. Provide associated design, unit testing and implementation documentation. Support the Build-out, setup and configuration of new and/or existing application infrastructure. Follow established methodology and controls guidelines. Recommend changes to application design which result in performance and stability optimization. Maintaining current technical knowledge in the technologies used and proactively identify opportunities for improvement. Provide technical support to other junior developers and production support team. Support root cause analysis of complex production incidents. Review and provide feedback on requirements, test suite and test bed Perform additional job-related duties as requested. Qualifications 5+ years of experience in development using using Java/J2EE, Spring/Spring MVC, SQL, Webservices Bachelor Degree in Business, Information Technology, Engineering or equivalent work experience Practical experience with the following applications/tools: Jenkins, GIT, Tomcat, Weblogic Working knowledge of Domain Driven Design, Micro-service Architectures, Service Registry Patterns, API Gateway patterns Thrives in an environment with changing priorities Focused and versatile team player that is comfortable under pressure Excellent problem-solving and critical-thinking skills Able to navigate through a large corporate environment and ensure appropriate processes are met

Senior Informatica Administrator McLean, VA $120-130K +bonus Prestigious Firm is seeking an Informatica ETL Senior Administrator to do design, development, maintenance and production support for various Datamart applications within the corporation. This Senior Developer will work with initiative leads, business areas, technical leads, business architects, application architects, stakeholders, subject matter experts, analysts, developers, technical support groups and test teams to define and accomplish ETL responsibilities. Responsibilities Include § Design and deliver ETL and related components as specified in the design, functional and non-functional requirements, within established budget, time and quality standards. § Refine and decompose requirements to the level of detail required to initiate development. § Design, prototype, develop, test, and document existing and new ETLs, and related components; make recommendations for related functions that result in a more cost effective product delivery. § Perform unit testing of ETLs and related components and document test results. § Complete code reviews for ETLs and related components, and complete documentation of issues identified and action items. § Correct testing defects and support all testing, including but not limited to: Unit testing, Integration testing, System testing, User Acceptance testing, End-to-End testing, and Performance testing. § Analyze current ETLs and related components for performance, diagnosis and troubleshooting. § Identify application bottlenecks and opportunities to optimize performance. § Work on issues of diverse scope where analysis of situation or data requires evaluation of a variety of factors, including an understanding of current IT environment. § Provide resolution to an extensive range of complicated ETL-related problems, proactively and as issues surface. § Develop and document internal ETL standards and best practices. § Provide application integration support. § Perform code version control activities. § Create and update all necessary documentation for the Project. Qualifications § Typically has a minimum 5-7 years of current and hands-on experience with Informatica (including at least three (3) years on v 9.6 and higher) design, development and performance tuning for Multi-Dimensional Datamarts (Star Schema). § College Degree or equivalent experience § Minimum three (3) years of current and hands-on experience with reading and loading high-volume type 2 dimensions (Slowly Changing Dimensions) in Multi-Dimensional Datamarts (Star Schema). § Minimum five (5) years of current and hands-on experience with complex SQL and high-volume Relational databases and SQL Query performance tuning. § Minimum three (3) years of current and hands-on UNIX Shell Scripting experience. § Minimum one (1) year of current and hands-on experience with code management tools. § Ability to manage multiple priorities and meet critical deadlines. § Demonstrated partnership with business clients and value proposition of projects/portfolio. § Strong analytical and problem solving skills. § Excellent customer service skills. § Excellent verbal and written communication skills. Ability to communicate effectively with team members, stakeholders, and Sr. management on both the business and IT sides. § Preferred Skills Advanced Degrees. § Datastage development experience. § Autosys development experience. § Agile Development methodology experience. § Experience in the secondary mortgage industry. § Security Clearance Required: No § Visa Candidate Considered: No CANDIDATE DETAILS § 5+ to 7 years experience § Seniority Level - Mid-Senior § Management Experience Required - No § Minimum Education - Bachelor's Degree § Willingness to Travel - Never

Cybersecurity Risk Reporting Lead Irving TX or Charlotte, NC possible remote Looking for a Cybersecurity Risk Reporting Lead over cyber performance, focus on metrics and reporting risk; KPI technology controls. You will need 5-7 years data mining, data sets, SAP, Business Objects, analysis tools, KPI, KGI, KRI Reports Data Base modelling, experience designing and implementing information security reporting and metrics The Risk Reporting Lead is responsible for leading the development and reporting of key cybersecurity metrics collected and monitored by Company's Information Security (AIS) organization. Additionally, the Cybersecurity Reporting Analyst will support management in recommending and implementing additional metrics and furthering analytics capabilities using industry best practices. An ideal candidate will possess strong analytical and technical skills (cybersecurity-specific technical expertise preferred but not required), as well as business acumen. The role will work cross-functionally and the candidate should have excellent collaboration, influencing, and team building skills. The role will support the Security Assurance, Policy and Monitoring team in a cross-functional business analyst position. Focus areas will be metrics and reporting. In addition, the lead will have extensive client interactions relating to technical security controls with a wide range of technology-based functions and business groups. Relevant skills include an understanding of business/technology risk, KPIs, thought leadership in designing and executing technology controls that mitigate those risks, and ability to keep up-to date with the latest technologies and potential cyber-threats. Qualifications Minimum 5-7 years of experience in cyber performance metrics and reporting Minimum 5-7 years of project management, consulting, and/or application security analyst experience Practical experience delivering security consulting services to enterprise, typically obtained in 5-7 year, or related experience in information security Knowledge of Information Security Industry frameworks as well as SAP Business Objects/Data warehousing skills Experience in performing data mining on large data sets using SAP Business object analysis tools Knowledge and prior experience of statistical data analysis and acquiring data from various sources, analysing results using statistical techniquesand developing reporting capabilities with Scripting, Tableau or alternate platform Proficiency in Excel and relational database modelling Excellent analytical & technical skills, able to research problems, determine root causes and solutions Ability to build KPIs, KGIs, KRIs reports and balance scorecard from conceptualization through presentation Experience in risk management in highly technical environments Existing information security certifications desired, such as CISSP, CCSP, CISM, CISA Be responsible for establishing strong working relationships within Company Information Security (AIS), outside AIS, as well as other brand/affiliate organizations Demonstrate practical experience evaluating technical data or security analytics Experience designing and implementing Information Security reporting and metrics Excellent communication skills, written and verbal - this role requires interaction across the enterprise and regular interface with people at all organization levels Coordinate Business As Usual (BAU) activities, overseeing monthly and quarterly metrics program. Provide assistance to management team to Identify metric anomalies/trends/outliers and challenge these accordingly Proactively identify enhancement that will improve the security posture and identify cyber security control deficiencies within the organization

NO SPONSORSHIP Information Security Cloud Governance All cloud based application security designing and executing cloud technology controls,5 years application/platform development AWS preferred cloud security governance Responsibilities Work closely with Application Development, Cloud, Governance, and Compliance teams to help formulate and implement a strategy for cloud based security that is tailored to the specific risks facing the organization, including threat modeling and applications security advisement services. Develop and maintain a balanced cloud security governance framework based on industry standards Ensure compliance with society, regulatory, and industry standards for cloud based security. Continuously evaluate the organization's existing cloud security practices, define and measure security-related activities, and demonstrating improvements to the cloud programs within the organization. Evaluate business strategies, requirements, and user needs, existing usage cloud platforms, technical capabilities, and overall cloud application maturity, and provides strategic guidance and best-practices based recommendations for implementing governance boards and proven best practices for cloud based application/platform development, deployment, and support. Support lead security consultants in promoting and consulting on the positions that help strengthen and secure the organization by either following standards or helping direct others on technology positions. Job Qualifications Minimum 5 years of experience in secure application/platform development and security Minimum 3 years of project management, consulting, and/or application security analyst experience Relevant postsecondary education and/or industry standard certifications preferred (ie, CompTIA, Microsoft, EC-Council, ISACA, ISC2, SANS Institute/GIAC, EMC, Amazon, VMware), AWS Certified Solutions Architect, CompTIA Cloud+ Certification, CISSP, Certificate of Cloud Security Knowledge (CCSK) A strong understanding of cloud security governance Practical understanding and use of cloud computing and cloud security tools Experience with establishing cloud security governance across an organization Thorough knowledge of common application vulnerabilities (eg OWASP Top 10), attack techniques and remediation tactics/strategies A demonstrable passion for application security, general understanding of SDLC processes and key security checkpoints along with software development methodologies Must be fluent in reviewing technical reports based on findings. Strong a self-starter who has the ability to operate independently and demonstrates complete ownership over assigned objectives in a semi-structured environment, but also recognizes when guidance is needed Strong understanding of IT security best practices by applying depth and breadth of expertise in multiple related disciplines Understanding and Passion for Agile/XP/Scrum/Kanban, Test Driven Development built on User Stories and Continuous Integration/Testing/Delivery Ability to effectively work with technical and non-technical resources Demonstrated success at leading cross-functional projects leveraging SDLC methodology. Basic knowledge of Security Analysis (manual and leveraging automated scanning tools). Familiarity with both static analysis and/or dynamic scanning tools. Excellent oral/written presentation skills with ability to communicate effectively with senior executive leadership; proficiency in preparation of presentations, analytical reports, and documents regarding program operational status, achievement and performance Strong organizational skills, ability to effectively manage multiple, competing projects/priorities while achieving targeted completion results Effective written, verbal communication skills - Ability to tailor communication style to audience at hand and write high quality documentation and/or presentations is a must Ability to stay up to date with the current cybersecurity threat landscape to account for changing circumstances when evaluating security risks Ability to develop/enhance partnerships with key stakeholders Ability to maintain technical proficiency via self or formal training Proficient in MS Office Suite (Word, Excel, PowerPoint, OneNote, Project, Access, Visio) and SharePoint

Prestigious Enterprise Company is currently seeking a Sr. Application Support Analyst with strong Middleware/Linux Applications production support experience. Candidate will be providing Level 2 support for production business applications and performing job failure analysis and problem symptom analysis Responsibilities: Support incident and problem management processes Conduct Impact analysis for infrastructure and application upgrades Maintain knowledge database articles Provide application system account support, including password management, release management, and production support Perform analysis to resolve application data issues (for a subset of applications) Provide production reports on a daily, weekly, monthly or ad hoc basis as required Participate in 24x7 on-call rotation coverage for all supported applications Document lessons learned Perform other tasks as assigned Apply broad technical knowledge and skills to analyze, develop, create and implement process improvements, troubleshooting, and operational support Code Scripts to perform Data Correction Utilities (for a subset of applications) Utilize JILs (Job Information Language) for scheduling and running jobs with Autosys (for a subset of applications) Collaborate with project teams on major upgrades and the rollout of new applications Positively adapt to a rapidly growing and changing environment, while working under pressure Employ extensive professional experience and creativity to lead resolution of complex technical problems Engage with business users, application owners, team members and other stakeholders during incident resolution Act as liaison between the business and technical support teams Provide training and coaching to fellow team members Mentor other team members on best practices and past experiences Qualifications: Bachelor's degree in Engineering, Computer Science, Information Technology, related field or equivalent experience 5+ years of relevant industry experience 5+ years of application development or support coupled with infrastructure experience 5+ years of collective experience with databases (Sybase, DB2, SQL Server, Oracle) and Security (Firewall, AD, TAM, LDAP, certificate) 5+ years of hands on experience with Scripting language: UNIX Shell, Perl, etc. 5+ years of strong experience in troubleshooting Unix/Linux, Networks, Firewall, Authentication, Security, DNS 5+ years of strong support skills in Middleware technologies (WebLogic, webMethods, Apache, Tomcat, MQ, IIS, etc.) in UNIX/Linux and/or Windows environment. 2+ years of support experience on Oracle Fusion Middleware Stack (SOA/OSB/BAM etc.) Strong knowledge of Java, JEE, JSF, JPA, JSP, Web Services, HTML, XML, JDBC, SQL, OOA and OOD Concepts 5+ years of hands on experience with job automation tools like Autosys or BladeLogic and monitoring tools like SiteScope, Spectrum, etc. 2+ years of experience on Log monitoring tools like LogLogic, Splunk, etc. Strong organizational skills, ability to multitask, and ability to set priorities Strong data analysis, decision making, problem solving skills, and able to drive issues to resolution Incident Management and Problem Management experience Knowledge of ITIL concepts

Prestigious Enterprise Company is currently seeking a Cyber Security and Incident Response Engineer. Candidate will be part of a team that will help carry Information Security department's vision of reducing information risk by ensuring and enhancing the availability, reliability and accessibility of Information systems. Candidate will assist in responding to security incidents in a mission critical production environment, such as investigating and remediating possible endpoint malware infections, mitigating threats such as unauthorized use, spam and phishing. Responsibilities: Manage security events identified from enterprise SIEM tool, Threat Intelligence, end user notifications, etc. to determine security risk and respond accordingly. Coordinate response, triage and escalation of security events affecting the company's information assets and activities within the Incident Response team. Categorize, prioritize, and normalize an event to determine if it meets the threshold of a potential incident and declare an incident, if required following documented process. Analyze and research known indicators of compromise (IOCs), correlate events, identify malicious activity, and take appropriate containment steps. Formulate and execute a response to the incident and verify that it is contained, eradicated and systems are recovered. Based on the review of the process and steps taken to remediate an incident, suggest and implement improvements in the environment (such as improving technical controls) and/or improve the incident response process. Apply critical thinking in understanding the new & emerging threats working along with Cyber Threat Intelligence and Threat detection team and then build & execute required action plan. Effectively collaborate within Information Security with Security Operations, Threat Intel, Forensics, Threat Detection and Vulnerability management teams as well as external teams in various lines-of-business to enable enhancements in security posture. Present security analysis, action plan and risks to different audiences and adjust the delivery accordingly (business, technical and management) using either structured presentations or ad-hoc, and establish consensus. Establish and maintain business relationships with individual contributors as well as management. Participate in the review and documentation of requirements for analysing the specific threats to assist in development of new use cases to detect, report, log, track, and escalate security events. Communicate effectively and clearly to both technical and non-technical audience Augment Incident Response team to ensure 24/7 coverage and operations. Responsibilities occasionally will require working evenings and weekends, sometimes with little or no advanced notice. Routinely develop and update incident response playbooks to ensure response activities align with best practices, minimize gaps in response and provide comprehensive mitigation of threats and also provide guidance to Junior Analysts on Incident Response activities. Execute daily ad-hoc tasks or manage small projects as needed. Qualifications: 5-7 years of Information Security or Incident Response related experience. 2+ years of hands-on experience in at least two of the following areas: security operations, incident response, network/host intrusion detection, threat response. Bachelor's degree in Information Security, Computer Science, Information Technology, related field or equivalent work experience. Demonstrated experience in handling security events in mission critical environments; hands-on troubleshooting, analysis, and technical expertise to resolve incidents and service requests. Proven past experience in day-to-day operational processes such as security monitoring, data correlation, troubleshooting, security operations etc. Good grasp of security incident response, such as different phases of response, vulnerabilities vs threats vs actors, Indicators of Compromise (IOCs), etc. Experience analysing system and application logs to investigate security issues and/or complex operational issues. Strong knowledge of enterprise detection technologies and processes (Advanced Threat Detection Tools, IDS/IPS, Network Packet Analysis, Endpoint Protection). Demonstrated experience with utilizing SIEM (such as Splunk, LogRythm etc) in investigating security issues and/or complex operational issues on Windows and Unix . Strong knowledge of network protocols and operating systems (Windows, Unix, Linux, Databases). Preferred Skills: GIAC, GCIH, CEH, CSA+, CISSP certifications Threat Hunting experience Experience in the financial services industry Experience in Unix Scripting, Programming, SQL

Prestigious Fortune 500 Company is currently seeking a Sr. Java Developer with strong Core Java experience, and can work well in an agile development environment. This developer will primarily work on multi-threaded Server Side applications, as well as the conversion of lacy application to current technologies. Responsibilities: Collaborate with the developers, business analysts and development managers in order to determine the software's technical direction, systems architecture, system design and implementation plan. Responsible for systems analysis, Design, Coding, Unit Testing. Requirement gathering & understanding, Analyze and convert functional requirements into concrete technical tasks and able to provide reasonable effort estimates. Providing expertise in technical analysis and solving technical issues during project delivery. Code reviews, exposure to continuous integration, test case reviews and ensure code developed meets the requirements. Periodically review existing production defects and identify/address issues impacting production stability/scalability. Acts as mentor to junior developers. Qualifications: 8+ years' experience in software development Strong hands on experience in Core Java, OOPS, Multithreading and Java Concurrency Strong hands on experience in RDBMS - DB2 and Oracle Experience in Unix/Linux commands, Shell Scripting and Autosys Experience developing high volume transaction systems - both Real Time and batch Strong Experience in Continuous Integration and Continuous Delivery systems, eg Maven, Jenkins, Nexus Preferred Skills: Any experience with ETL (Ab Initio) preferred .

Prestigious Global Firm is currently seeking a GRC Security Policy Analyst. Candidate will join a Governance, Risk Compliance team, and act as a subject matter expert for Information Security. Candidate will perform risk management functions within the Security Governance department. Responsibilities: Serve as a subject matter expert for Information Security, consulting to technical management (serving on project teams, discussing application and systems architectures, etc), non-technical management (educating the user community on information security) and attorneys (eg litigation-related technical education) as necessary. Manage and support GRC technology and Security Governance solutions. Create and maintain system, procedural and support documentation. Manage and support the 3rd Party Security Vendor Risk Management program and life cycle. Document and perform Risk Assessments for third-parties (eg, vendors and service providers). Respond to security assessments, questionnaires and audits from clients and third-party business partners. Create and maintain security policies, standards, processes and guidelines for approval by Firm management. Evaluate exception requests and make approval recommendations to management. Security Awareness: assist in coordination of the program, including development of awareness content, scheduling of awareness activities and measuring progress of the program. Vulnerability Management: collect information on emerging threats including software vulnerabilities. Coordinate triage of and response to vulnerability information. Disseminate this information regularly to firm staff and management as appropriate. Participate in long-term strategy and planning for Information Security Qualifications: Preferred candidate will have one or more of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Auditor (CISA), Certified Information Security Manager (CISM), or other relevant training and certifications GRC tool management: Administration, Engineering or both Ability to perform as primary Security SME. Ability to facilitate project and vendor risk assessments with relative independence and provide guidance on secure design and operation. Ability to complete and assist in completing client security questionnaires and security assessments concerning the Firm's security program and controls. Ability to communicate an effective security awareness message throughout the organization. Demonstrate ability to create and maintain security policy, standard, guideline and procedure documents. Demonstrate ability to effectively communicate deeply technical topics at an appropriate level of detail to varied audiences - including IT Subject Matter Experts, senior management and non-technical users Strong knowledge on Security frameworks and technologies such as ISO 27001, NIST, SOC, SIG Experience (Administration or Engineering) in GRC platforms Broad awareness of and exposure to diverse security tools and their capabilities, including commercial and open-source options. Strong knowledge of risk management principles and practices. Strong knowledge of security administration and role-based security controls. Strong knowledge and use of GRC platforms. Knowledge of host and network-based anti-malware technologies. Knowledge of authentication technologies and interactions between diverse authentication platforms, both on-site and remote. Knowledge of client and server Firewalling technologies, including configuration and administration. Knowledge of Intrusion Detection and Prevention solutions, including configuration and administration. Knowledge of security event management (SIEM), event correlation and analysis technologies. Knowledge of data encryption technologies. Strong knowledge of Intrusion Detection and Intrusion Prevention technical capabilities. Knowledge of web filtering and email SPAM prevention techniques. Knowledge of vulnerability assessment and forensic investigations tools. Knowledge of mobile device security and Mobile Device Management solutions Knowledge of Privileged Access Management technologies Technologies: Windows Authentication and Active Directory integration Anti-Malware and AEP technologies Encryption Security Incident and Event Management Web Filtering IDS/IPS Firewalls Vulnerability management tools Mobile Device Management Privileged Access Management

Java Trading Analyst Model Developer $130-150K +Bonus McLean, VA We are developing exciting business applications using live streaming data in DevOps centric environment and are looking for a change agent and driven professional. We want to add a strong Java developer to our talented team of individuals to contribute to the success of our multi-year roadmap. Qualifications Typically has at least 5 years of experience in solution, design and development of web-based applications including WebService Bachelor's degree in computer science, software development, or similar discipline or equivalent work experience Expert level understanding of OOP and OOD concepts. 8+ years of experience. Expert level programming skills in Java, 8+ years of experience. Java 1.8 is mandatory Should have working experience in DevOps centric Behavior-driven development environment. Should have in-depth knowledge using Cucumber or FitNesse, Jbehave . Expert level understanding of Spring Framework Should possess strong database design and development skill. Should be proficient in data structures and in writing complex SQL. Preferred Skills Experience in UI development using JavaScript will be a big plus. Experience with Angular JS or any other relevant JS Framework will be a big plus. Experience with developing and delivering application using Docker related technology is a plus Solid understanding of Java concurrency and multi-threading Understanding of Mortgage Business or Secondary Mortgage business. Experience with performance tuning for scalability and stability. Experience with Linux/Unix Shell Scripts. Advanced degree in Computer Science or related field In depth knowledge in secondary mortgage business particularly in Mortgage Pipeline, securities, pooling and trading. Demonstrate ownership, innovation, and focus on delivering results is a must Exhibit good individual and team spirit. Customer focus is must. Passionate towards work and should have positive attitude

McLean, VA This role will lead the Salesforce CoE Solutions Design team and team of Sr. Business Analysts in the Ideation track of complex and abstract new desired capabilities/strategic enhancements or process optimization to solve complex business challenges prioritized as part of our road-map. This role will lead and facilitate discovery sessions with Business Stakeholders to define and document business requirements as well as to map SFDC capabilities/solutions to meet business needs. This role will partner with Sr. Release Manager, System Admins and IT to solution, wireframe, prototype ideas and deliver complete, sound and prescriptive business requirements for Iterations using Agile methodology. Reports to the Salesforce Director of CoE. The ideal candidate has had consulting experience and is an expert in Salesforce.com. Leads discovery workshops with key stakeholders to understand business goals/challenges and needs, existing processes and current use of the platform and define and document clear business requirements. Evangelize the CoE vision/mission, roadmap, key goals initiatives as well as Salesforce's platform benefits/features (educate leadership, CAST and end users). Ambassador of the CoE, change agent and champion of Salesforce to promote best practices that can transform and empower company's businesses using Salesforce. Project manage work streams to meet desired scope, timelines and quality and escalates issues for resolution and to mitigate risk. Facilitate meetings, schedule follow ups and responsible for minutes. Engages key stakeholders/SMEs/IT as needed and follow ups to ensure projects move and meet timeframe and quality deliverables. Partner with IT to design solutions that will deliver maximum value, with CX usability in mind, while minimizing complex code and customization. Delivers detailed design proof-of-concepts, wireframes, prototypes, in PPT or in a Salesforce sandbox, as needed. Creates business requirement documentation and writes user stories and acceptance criteria for complex Agile deployments. Drives communications with all key stakeholders including delivering project updates and gathering project sign offs from CoE Lead and key stakeholders and maintains alignment. Provides recommendations with clear value for roadmap consideration/planning. Partner with Customer Success team to transition knowledge into training materials and go-live support. Stay current on Salesforce releases, new features, product roadmaps and applications available from 3rd parties on the Salesforce AppExchange. Bachelor's degree Salesforce Admin Certification or Consultants certifications (ie Sales, Service, Communities, AppBuilder) required. Demonstrate leadership skills and experience driving change. Demonstrate direct in depth experience in all aspects of developing and implementing CRM or Salesforce platform applications. Strong interpersonal, oral and written communication skills. Effective facilitator Tech saavy and ability to easily convey complex technology concepts. Prior consulting experience, highly desired.

DevOps Engineer Technical Lead McLean, VA $100-150K +Bonus *We are looking for multiple levels of DevOps professionals, please apply if you are a DevOps Engineer* Company has an exciting opportunity for a Development, Senior. (VSTS/TFS DevOps Developer, .NET, Java, PowerShell, JS) to contribute to the maintenance, support and development of Multifamily DevSecOps capabilities. We are seeking a motivated individual who will play an integral role in our transformation into an Agile & DevSecOps focused execution channel. In addition, individual can solution the business need, design and develop enterprise software applications on .NET, Java/JEE, Powershell, JavaScript (TypeScript) platforms. The individual should have a strong ability to adapt and apply IT expertise to a varying array of issues relating to buildout and maintenance of the platforms and integrations. The individual is expected to work under limited direction and independently determine and develop approaches to solution. The individual would work independently on production issue to resolution and work on solution delivery for projects or a module of a project. The individual would work as part of a high performing agile team, so demonstrating that you live and embracing the Agile culture is a must. Responsibilities include: . Design and build DevSecOps Capabilities using TFS/VSTS - Integrations, adaptors, pipeline components, Infrastructure as code, . Direct interactions with consumption teams to drive adoption and continuous evolution of base offering . Troubleshooting software application issues. Issues to be resolved require a broad range of troubleshooting skills related to: software functionality, Application Server setup, database management, data analysis, and third party products. . Predict effects of configuration changes, identify applications bottlenecks and opportunities to optimize performance. . Agile evangelist, work as a part of a high performing agile team and help others to . Comply with the department application standards and general industry based Java/JEE based application development principles, theories, concepts, documentation and techniques. . Contribute and participate in design and code reviews. . Implement complete Java based application using development life cycle. . Collaborating extensively with peers, Business Analysts, Operations Staff and Department Managers to resolve issues while actively contributing to a growing knowledge base that improves the effectiveness of our team and the information available to system end users. . Administration of IT Enterprise Incident Management tickets including: Prioritizing numerous issues of varying severity, and working with our technology engineer like network and database engineers to ensure optimal application performance and response times. . Works closely with project and development teams transitioning production releases Qualifications * Bachelor's degree in Computer Science or equivalent working experience . Typically has a minimum of 4-6 years related experience . CSM/CSD/CSPO Certifications preferred (with associated experience leveraging these certifications) . At least 3 years of experience in solution, design and development of web-based applications using .NET, Java/J2EE, JavaScript, WebServices, . Extensive experience with continuous integration tools (eg Github, TFS, Jenkins), Cloud (eg Amazon Web Services, Azure), Monitoring/alerting tools. . Experience building TFS scripts/extensions (using Powershell, Typesript, etc) . Advanced knowledge of system OSs (Windows, Unix, Linux) . Experience developing using Angular, Node, other JS Frameworks. . Hands-on experience building release pipelines (CICD) within TFS/VSTS for multiple development languages . Experience leveraging advanced database concepts leveraging SQL, DB2 databases. . Experience in web based application Servers, IIS, WebLogic and Apache Tomcat . Innovative approach to execution and providing solutions, likes to take on challenges and working with newer disruptive technologies while understanding how to take calculated risks . Experience in using infrastructure as code as well as leveraging Cloud technologies for application integration and deployment. . Experience implementing and using TDD and ATDD approaches to development . Experience building robust, modern Unit tests for .NET & Java . Experience in building advanced automated, and TFS/VSTS integrated acceptance tests using modern techniques and tools (eg Selenium) . Experience building containerized code (Docker) leveraging microservice design and architecture . Lives the Agile Mindset and is an advocate for promoting the culture surrounding it. . Strong security focus, leveraging modern secure coding practices along with integrations with DAST/SAST scanning tools within the CICD pipeline. . Understand business needs, identify solutions, and present and guide the project team and sponsors in identifying best solution . Extensive experience in collaborating within an Agile team setting, working as a group to drive Epic/Feature/Story creation as well as solution design and architecture. . Contribute to the enhancement of department application development/delivery standards, tools and processes . Provide L3 production support that includes evaluate issues, investigate cause(s) and come up with solutions to address defects Preferred Skills Preferred Skills * IOs & Android Development Experience . Splunk integration, leveraging Splunk as a DevSecOps feedback loop . Strong, working knowledge of design patterns/OOAD . Experience building TFS/VSTS extensions . Experience leveraging Cloud Core services for app integration . Experience transforming execution teams to Agile . Experience defining GIT Branching strategies as well as leveraging Feature tagging . Strong analytical and creative problem solving skills . Professional who is motivated and is an effective team player . Strong written and oral communication skills with the ability to convey technology solutions to business partners . Proactive in nature with customer satisfaction as primary goal. . Quick learner of new technologies and tools.

Excellent opportunity for a seasoned Data Privacy Analyst to join a Global Retail Group based in Central Netherlands as part of an expanding International Privacy team. The firm has a mix of leading retail chains spanning over 20 markets, where this role will act as a Privacy SME across multinational jurisdictions. You will be responsible for a range of corporate compliance areas such as the development, improvement, planning and execution of the privacy compliance strategy, controls assessment and documentation. In this role, you will take accountability for designing and delivering processes and procedures that aim to successfully embed privacy within the business. This role will report to the Group Data Protection Officer and will work closely with the Group Information Security Manager and a range of other key stakeholders. Responsibilities: *Support the Data Protection Officer with providing day to day privacy guidance to the business. *Support or review privacy impact analysis and data protection impact assessments for systems, applications or projects processing personal data. *Support the Data Protection Officer to establish, maintain and monitor corporate policies. *Support the review and drafting of relevant policies. *Assist the Legal Team to conduct due diligence around the data privacy and security posture of vendors/processors. *Administration of software used to manage DPIAs and Records of Processing Activities. *Support the Data Protection Officer with the companywide training programme. *Support the Privacy Office to establish and maintain a self-assessment framework to assess and monitor Group compliance with applicable data protection controls. *Be a point of contact for the team of Privacy Champions across multiple jurisdictions. *Partner with business stakeholders to draft and document business processes, guidelines, standards and controls across the business (eg data subject rights, data deletion, data protection principles, etc). *Support the embedding of key processes to manage privacy risks across the business units. Experience: *3 years'+ in a data protection role. *Accreditation in CIMP/CIPP-E desirable (or similar qualification). *Experience with supporting the implementation of a privacy programme. *Experience with implementing Governance, Risk and Compliance solutions. *Excellent communication skills, both written and verbal. *Exceptional interpersonal skills and the ability to work across the organisation at all levels, and geographical locations. *A positive attitude with an eagerness to learn and develop professional knowledge. Key benefits: *A job within a successful international organisation that is constantly evolving and where we work with top brands *A good salary appropriate for your professional and intellectual ability and experience and 30 vacation days (plus bank holidays) on a Full time basis with staff discount on brands *Ample opportunities for development and advancement: our organisation's growth and success mean we can always offer talented employees the opportunity for growth and advancement in the future. *An informal, no-nonsense work ethic: results matter, but the same goes for mutual respect and a pleasant work environment. To discuss this opportunity in more detail please do not hesitate to apply to this advertisement or get in touch with Nathan Wilson direct at Lawrence Harvey to arrange a confidential conversation - Privacy recruitment specialist. Lawrence Harvey is acting as an employment agency in regards to this position.

CRM Business Analyst- 6 months- Amsterdam, NL- January Global Enterprise Partners is looking for experienced CRM Business Analyst for a client located in Amsterdam, Netherlands. Requirements for the CRM Business Analyst: 5+ years' experience working as Business Analyst on CRM projects Analysis of marketing plans, execution of account plans Experience mapping out the AS-IS process, identifying gaps for process improvement, To-BE process Creation of the roadmap with clear milestones towards TO-BE situation Ability to work independently, with limited supervision as well as team setting Able to work on-site in the Netherlands without restriction Fluency in English, additional European languages are an added benefit Details of the CRM Business Analyst contract include: Start Date: January Location: Amsterdam, Netherlands Duration: 6 months Rate: negotiable

Resource 1 is in need of a Business Analyst with experience working within an Enterprise Data Warehouse/Business Intelligence environment. Individual will join a 9-person team, composed of 5 ETL Developers, 2 Business Analysts and 2 QA/Testers. Individual should have experience documenting requirements, user stories and training materials related to EDW/BI initiatives. Selected Business Analyst will not do the data modeling, but general understanding and knowledge of logical or dimensional modeling would be useful on some projects. Individual should have solid SQL experience, writing SQL queries and joins (inner & outer) against large tables with millions of rows. Individual should have experience working in an Agile or Hybrid Agile environmentand have written User Stories. Selected Business Analyst should have knowledge of common data integration, business intelligence, reporting and database technologies . Individual must have good communication skills and have a background in gathering requirements and writing user stories for BI/EDW - related projects. Prior experience working in the healthcare industry is a plus, but not a requirement for this position. Required Skills: Business Analysis, Requirements Gathering, SQL (Queries/Joins), BI (Business Intelligence), EDW (Enterprise Data Warehouses), Agile (User Stories), ETL, Documentation & Reporting.

Information Security Cloud Governance $100-120K *Can be located in Irving, TX; Charlotte, NC or Northbrook, IL* The Cloud Information Security Governance resource will be part of the Company Information Security - Assurance, Policy, Monitoring & Reporting (AIS-APMR) team and lead Cloud Information Security Governance activities. This includes working closely with the product, software, and infrastructure development teams to implement best practices within the cloud based environments. As well as working closely with developers and system architects to diagnose, document, solution, and remediate any deviations from governance standards. Addition responsibility includes but not limited to contributing to the evaluation, recommendations and implementations of cloud security controls in an automated continuous integration/deployment environment. In addition, the engineer will have extensive client interactions relating to technical security controls with a wide range of technology-based functions and business groups. Relevant skills include an understanding of business/technology risk, thought leadership in designing and executing cloud/technology controls that mitigate those risks, and ability to keep up-to date with the latest technologies and potential cyber-threats. A broad range of professional skills along with strong interpersonal skills will be required for problem-solving, collaboration with virtual cross-functional work groups, along with tracking and reporting of critical gaps to closure & final resolution. This resource is expected serve as a trusted advisor that can clearly articulate Company security policies, standards, and guidelines to both technical and business audiences alike. Job Description Key Responsibilities include Work closely with Application Development, Cloud, Governance, and Compliance teams to help formulate and implement a strategy for cloud based security that is tailored to the specific risks facing the organization, including threat modeling and applications security advisement services. Develop and maintain a balanced cloud security governance framework based on industry standards Ensure compliance with society, regulatory, and industry standards for cloud based security. Continuously evaluate the organization's existing cloud security practices, define and measure security-related activities, and demonstrating improvements to the cloud programs within the organization. Evaluate business strategies, requirements, and user needs, existing usage cloud platforms, technical capabilities, and overall cloud application maturity, and provides strategic guidance and best-practices based recommendations for implementing governance boards and proven best practices for cloud based application/platform development, deployment, and support. Support lead security consultants in promoting and consulting on the positions that help strengthen and secure the organization by either following standards or helping direct others on technology positions. Help facilitate review of changes in company processes, standards and technology to ensure the effectiveness of security controls to meet compliance requirements Help consult with stakeholders on requirements for new and existing business/technology solutions to assure compliance to compliance frameworks and internal standards and governing policies and procedures Responsible for building effective working relationships, making sound decisions, successfully making changes, initiating action and achieving results as a trusted advisor Job Qualifications Qualifications o Minimum 5 years of experience in secure application/platform development and security o Minimum 3 years of project management, consulting, and/or application security analyst experience o Relevant postsecondary education and/or industry standard certifications preferred (ie, CompTIA, Microsoft, EC-Council, ISACA, ISC2, SANS Institute/GIAC, EMC, Amazon, VMware), AWS Certified Solutions Architect, CompTIA Cloud+ Certification, CISSP, Certificate of Cloud Security Knowledge (CCSK) o A strong understanding of cloud security governance o Practical understanding and use of cloud computing and cloud security tools o Experience with establishing cloud security governance across an organization o Thorough knowledge of common application vulnerabilities (eg OWASP Top 10), attack techniques and remediation tactics/strategies o A demonstrable passion for application security, general understanding of SDLC processes and key security checkpoints along with software development methodologies o Must be fluent in reviewing technical reports based on findings. o Strong a self-starter who has the ability to operate independently and demonstrates complete ownership over assigned objectives in a "semi-structured" environment, but also recognizes when guidance is needed o Strong understanding of IT security best practices by applying depth and breadth of expertise in multiple related disciplines o Understanding and Passion for Agile/XP/Scrum/Kanban, Test Driven Development built on User Stories and Continuous Integration/Testing/Delivery o Ability to effectively work with technical and non-technical resources o Demonstrated success at leading cross-functional projects leveraging SDLC methodology. Basic knowledge of Security Analysis (manual and leveraging automated scanning tools). Familiarity with both static analysis and/or dynamic scanning tools. o Excellent oral/written presentation skills with ability to communicate effectively with senior executive leadership; proficiency in preparation of presentations, analytical reports, and documents regarding program operational status, achievement and performance o Strong organizational skills, ability to effectively manage multiple, competing projects/priorities while achieving targeted completion results o Effective written, verbal communication skills - Ability to tailor communication style to audience at hand and write "high quality" documentation and/or presentations is a must o Ability to stay up to date with the current cybersecurity threat landscape to account for changing circumstances when evaluating security risks o Ability to develop/enhance partnerships with key stakeholders o Ability to maintain technical proficiency via self or formal training o Proficient in MS Office Suite (Word, Excel, PowerPoint, OneNote, Project, Access, Visio) and SharePoint