Job Description
Key Responsibilities
* Security Onboarding & Product Integration:
o Collaborate closely with Product Team to integrate and onboard product to security controls.
o Work with CSO to agree compliance and onboarding requirements to CSO controls. Interpret security policies and standards to define appropriate control compliance for new and existing products.
o Facilitate the implementation of security controls, including but not limited to: certificate management, (automation) access management and Authorisation, data encryption, and secure configuration.
o Work with engineering teams to implement and test security controls.
o Develop and maintain documentation for security onboarding processes and control implementation.
* Security Control Evidencing & Audit Readiness:
o Proactively identify and collect evidence demonstrating compliance with security controls and mapping to client Standards and policies
o Prepare and maintain detailed documentation, reports, and artifacts for internal and external audits.
o Act as a primary point of contact during security control reviews, effectively explaining and demonstrating control effectiveness.
o Identify and track any gaps in control implementation or evidence, working with relevant teams to remediate them.
* Database Security Engineering (Oracle Focus):
o Possess expertise in Oracle database security principles, best practices, and configurations.
o Design, implement, and review security controls for Oracle platform.
o Perform security assessments and vulnerability reviews specifically for Oracle environments.
o Troubleshoot and resolve security-related issues within Oracle database environments.
* Management & Delivery:
o Manage security control onboarding streams concurrently, from initiation to closure.
o Develop and execute plans for onboarding controls, including scope definition, resource allocation, timelines, and risk management.
o Track progress, identify dependencies, and proactively address impediments.
o Communicate onboarding status, risks, and issues to stakeholders at all levels.
o Ensure timely and high-quality delivery of all security onboarding deliverables.
Required Skills & Experience
* Education: Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field. Relevant industry certifications (e.g., CISSP, Oracle Certified Professional - Security) are highly desirable.
* Security Expertise:
o Proven experience in security engineering, security architecture, or security compliance roles.
o Strong understanding of security principles, frameworks (e.g., NIST, ISO 27001), and compliance requirements (e.g., SOC 2, GDPR, HIPAA).
o Experience with various security controls, including access management (IAM), data encryption, network security, vulnerability management, and SIEM.
* Database Engineering (primarily Oracle):
o Experience with Oracle databases, including installation, configuration, administration, and security hardening.
o Understanding of Oracle security features (e.g., TDE, auditing).
o Experience with database patching, upgrades, and performance tuning from a security perspective.
o Familiarity with other database technologies (e.g., PostgreSQL, SQL Server, NoSQL) is a plus.
* Delivery Management:
o Demonstrated experience in managing and implementing controls
o Proficiency with project management methodologies (e.g., Agile, Waterfall) and tools (e.g., JIRA, Asana, Microsoft Project).
o Strong organizational skills, ability to prioritize tasks, and manage multiple parallel initiatives.
* Compliance:
o Experience in preparing for security control reviews and evidencing.
o Ability to gather, organize, and present evidence of design and control effectiveness.
o Understanding of compliance requirements and expectations.
* Communication & Collaboration:
o Excellent written and verbal communication skills, with the ability to articulate complex security concepts to technical and non-technical audiences.
o Proven ability to build strong relationships and collaborate effectively with diverse teams (Product, Engineering, Operations, Audit).
o Strong analytical and problem-solving skills.
o Self-motivated, proactive, and able to work independently and as part of a team.
#J-18808-Ljbffr