• Perform duties according to the Duty Roster prepared by the Director of Security. The Security Officer may be deployed to any of the following Duty Posts:
• Security Control Room Duty;
• Lobby Duty;
• Loading Bay;
• Patrolling or Observation Duty;
• Back of House;
• VIP Parking;
• Or at any position where operations in Security field will benefit
• Ensure that all security systems function smoothly. Initiate immediate corrective action when fault is detected
• Assist Management, employees and guests in every way that is consistent with the protection and prevention objectives
• Coordinate with various departments and government agencies on routine matters and during emergency
• Monitor back of house areas with particular attention to unauthorized entry and exit points
• Be fully conversant with hotel fire & life safety/emergency procedures
• Comply with hotel and department policies and procedures at all times
• Attend all briefings, meetings and trainings as assigned by management
• Report for duty on time wearing clean and complete uniform at all times

Primary Responsibilities

Security Operation

• Train Security Officers in the operation of surveillance equipment, written reports, record keeping, patrol and first aid procedures
• Disseminate all information by the Management to team members
• Conduct patrols and regular checks on all Security Officers to assure that they are alert and discharging their duties efficiently and effectively
• Conduct all criminal investigations, put up accompanying investigation papers and reports cases which occur within the Hotel
• Conduct surveillance on hotel staff to ensure that they abide by the House Rules; Keep tag on movements of staff who are classified as suspects under investigations
• Control and direct all emergency personnel traffic in response to fire, bomb threat, police assistance, injury or illness
• Inspect all Security equipment to ensure that they are in working order and that all cameras are correctly focused
• Conduct routine day-to-day checks of the following items to ensure that they are properly maintained, issued and accounted for;
  • Pocket books;
  • Security Desk Occurrence Book;
  • Gate Passes and Security Passes;
  • Keys and Key Registers;
  • Post allocation for hotel and External Security
• Cultivate Informers with the intention of obtaining information of security interest that may be of immediate or future use to the Department for prevention and detection purposes
• Record all activities involving the Department in the Daily Security Report
• Provide security coverage for VIP guests
• Update General Manager constantly on all matters of security interest affecting the Hotel and the Department
• Always be on-call, including off-duty hours, for any emergency that may arise

Team Management

• Conduct performance review with the team
• Identify and develop team members with potential
• Constantly monitor team members’ appearance, attitude and degree of professionalism
• Conduct detailed induction programs for new employees
• Develop, conduct maintain all staff training programs for team members, focusing on their development needs, providing them with new skills to meet the changing needs of the business
• Prepare weekly staff schedules keeping in mind anticipated business, operating budgets and standards of service

Other Responsibilities

• Be fully conversant with hotel fire & life safety/emergency procedures
• Comply with hotel and department policies and procedures at all times
• Attend all briefings, meetings and trainings as assigned by management
• Report for duty on time wearing clean and complete uniform at all times
• Maintain a high standard of personal appearance and hygiene at all times
• Perform other reasonable duties assigned by the Management of the Hotel

Main Complexity/Critical issues in the Job

Maintain highest standards of security within the hotel premises. Be vigilant and react fast when situations arise.

This role works closely with teams across the group to identify and handle security incidents, ensuring that relevant security attacks are timely detected, investigated and mitigated.  In addition, it reviews the security risks that our organisation faces, executing appropriate responses to ensure our security posture remains aligned with the needs of our dynamic organisation

what you will do

• Executes activities around incident response, security monitoring, threat hunting, security analytics and reporting.
• Collaborates with vendors, consultants, and third-party service providers to ensure that baseline information security configurations are defined for products deployed across all technology platforms.
• Champions, continuously develops and shares with team knowledge on emerging trends and changes in security operations.
• Contributes to relationships across the Ivy Group delivering efficient and consistent security operations services through continuous improvement opportunities creating defence lines that address growing business needs and a rapidly evolving security and threat landscape.
• Ensures visibility on issues and gaps resulting from the security monitoring activities and wider capabilities to suggest innovative and efficient ways in addressing incident response.
• Applies analytics to provide insight to security operations team in order to enhance policies and processes related to risk management, security programme management, and security governance.
• Executes continuous and rigorous assessment of current security operations processes and technology to craft enhanced strategy, process, and technology recommendations.
• Empowers collaborations with security engineering and vulnerability teams to ensure security tooling is providing operations functions with appropriate visibility to detect and respond to security events as well as building processes to better inform on indicators of compromise.
• Manages the development of baseline reporting metrics to effectively measure the health of the security operations domain and provide executive-level reporting of events, incidents, and trends.
• Maintains security procedures for products, applications, and platforms, and act as a go-to technical resource for risky or unusual security or compliance matters.

We are seeking a highly skilled and experienced Information Security Engineer to join our dynamic team. The ideal candidate will possess extensive hands-on experience in Cloud/Azure infrastructure with a strong focus on networking, system hardening, and security operations.

This role is essential for maintaining the security and integrity of our enterprise infrastructure, encompassing a broad range of responsibilities and technologies, including cloud environments, antivirus solutions, DLP, network intrusion detection/prevention systems, firewalls, email security gateways, and more.

The successful candidate will bring a deep understanding of cybersecurity principles, experience with incident response, and the ability to work collaboratively with various stakeholders. This is an excellent opportunity for a seasoned professional to contribute to the ongoing enhancement of our security posture in a fast-paced and evolving environment.

Key Responsibilities:

• Security Monitoring & Incident Response:
  • Develop and integrate security event monitoring and incident management services.
  • Respond to security incidents as they occur, participating actively in incident response teams.
  • Assist with playbook automation and case management to streamline security operations.
• Infrastructure Security Management:
  • Implement and maintain a baseline of system security, informed by the latest threat intelligence and industry trends.
  • Regularly review and assess cybersecurity tools, identifying gaps, and recommending improvements.
  • Maintain and manage Microsoft directory services (both on-prem and cloud-based).
  • Support and mentor Junior Analysts in managing Security Operations Center (SOC) systems.
• Cloud and Network Security:
  • Implement conditional access policies, zero trust architecture, system hardening, and least privilege access controls.
  • Oversee the configuration, management, and auditing of security tools including EDR, vulnerability management, firewalls, and secure email gateways.
• Process Development & Documentation:
  • Produce and maintain detailed documentation to ensure the standardization and repeatability of security procedures.
  • Develop additional investigative methods using a wide range of toolsets to enhance threat detection and analysis.
  • Liaise with SOC engineers to maintain up-to-date security alert dashboards, facilitating faster incident response.
• Strategic Security Guidance:
  • Provide Subject Matter Expertise (SME) on a broad range of information security standards and best practices.
  • Offer strategic and tactical security guidance, including the evaluation of technical controls and risk assessments.
  • Participate in root cause analysis of incidents, working with engineers across the enterprise to improve security resilience.

Manage the corporate legal department operations of GCC Services, establish the best practices in various areas and functions of the legal department and identify relevant automation strategy to promote collaboration and knowledge sharing across the team and to derive efficiencies and empower the legal team and the General Counsel to spend more time on the legal work.

Job Duties and Key Responsibility Areas :

• Incorporating business locally and overseas whenever assigned by the General Counsel, work with the relevant government and official authorities to get official registration documents, renting offices required documents, manage companies business portals (in relation to the legal department tasks), follow up with the relevant and concerned parties to obtain a federal tax identification number [social security number] Federal tax filing and coordinate with GCC Services finance to open business bank account.
• Litigation support, assist the General Counsel in handling lawsuits [court and arbitration], as to assisting in providing the General Counsel and/or when requested by the General Counsel, to the external lawyers the documents pertaining to cases, following up with external lawyers to get recent update and court hearing reports, follow up with internal department heads and assigned employees on potential cases, legal matters. Develop legal software to track, update and generate legal cases reports and open, organize and to keep up-to-date current and/or potential legal cases files.
• Integrate and deploy new technologies within the legal department for any task that requires automation using data, design thinking, legal analytics and reporting infographic in liaising with the IT team to systematize foundational legal process.
• Develop, automate and oversee GCC Services and its entities and subsidiaries database platform; the details of ownership, directorship and stay up-to-date on their fiduciary, regulatory and statutory responsibilities.
• Actively maintain GCC Services and its entities incorporation documents and licensing and develop systematic tracking and notification of expirations, terminations and manage their renewals.
• Information management and reporting requirements that the General Counsel is expected to monitor and report on to senior management, finance and auditors on monthly / need basis.
• Prepare, draft and process (standard) agreements and contracts, letters, resolutions, minutes, procedures, policies, notices, templates review assigned by the General Counsel.
• Develop strong relationships across the group of companies and cross-functional colleagues including PRO, both inside and outside the legal department and provide licenses and documents to the concerned departments for facilitating business processes.
• Build sustainable networks and credibility outside of the company with a wide range of state officials, legislators, agencies, consultancies, and law firms.
• Communicate / meet with government and official authorities to solve accidental adversaries due to lack of coordinated action or miscommunication between two or more parties.
• Responsible for all Legal attestation, authentication for various documents including but not limited to resolutions, extracts, licenses, POA, and signatures verifications with government and official authorities such as chamber of commerce, ministry of foreign affairs, embassies, consulates, etc.
• Attend professional conferences and conventions relating to legal issues and regulatory compliance and any topics and challenges associated with legal and regulatory standards.
• Conduct legal approach analysis of facts situations for any complaints received by the legal department after being passed through proper channel and report it to the General Counsel, or for any problem that might cause a risk of operational delays at any departmental level and report clear recommendations to the General Counsel.
• Conduct legal approach analysis of facts situations for any complaints received by the legal department after being passed through proper channel and report it to the General Counsel, or for any problem that might cause a risk of operational delays at any departmental level and report clear recommendations to the General Counsel.
• Trade Mark, logo and copyright registration with the relevant official authorities.
• Develop database to enable consistent and efficient legal operational expenses, reporting to finance on legal attestation, legal translation, legal courier, portals expenses and any other legal expenses.
• Implement and manage the legal services automated process, including legal review of tenders and other documents, new contract draft, legal advice, legal claims [payment, non-conformity, labor, etc...] and develop built-in software program with IT to expedite regulatory compliance, data retrieval, and contract management.
• Oversee all important information and automate directories for Law firms, consultants, auditors, external lawyers, GCC Services Entities, legal translators, etc.

• University graduate with a bachelor’s degree
• 7 years of experience in a corporate legal department or law firm as Company Secretary or Paralegal
• Work experience with Government and official authorities
• Excellent English speaking, reading and writing capabilities
• Strategic, analytical, and design thinking while managing the details, and provide recommendations
• Outstanding leadership and management experience and skills

Essential Skills:

Network Security Architect with Checkpoint firewall, Any Any firewall rule change , DNS , routing , Proxy, zscaler, Network Security L2

Responsibilities (how we will measure success)

To provide second line support for all aspects of the Group’s Information Security strategy and arrangements encompassing cultural, physical and technology elements throughout the business, with the primary focus being on Info Sec programme governance and oversight.

Working as part of the Group Risk and Compliance department, the second line Info Sec team interact regularly with the first line IT Security team, providing oversight, challenge and validation of operational controls and procedures. The role holder will work closely with business and technology teams to help articulate and communicate the Info Sec governance programme, identify risks and threats, and evaluate and help implement controls and improvements.

Tasks (what does the role do on a day-to-day basis)

• Support the management of Information Security governance for the organization, ensuring adherence to Group policies and standards.
• Work closely with the Group Risk and Compliance team to ensure key Information Security risks and issues are identified, addressed and resolved in a timely manner.
• Serve as the lead representative for the second line Information Security team in the region, working closely with local stakeholders to ensure Group security strategy is appropriately implemented, and regional requirements are understood and supported.
• Assist in management of the Group’s Information Security Management System including maintenance of the ISO 27001 certification.
• Engage with the first line IT Security Operations team and assist the Group CISO in providing oversight and challenge to that function.
• Participate in the security training and awareness programme including the compliance process, assessment of the threat landscape to inform the development of training content and publication of materials through corporate channels.
• Participate in periodic security testing activities (e.g. penetration testing, DR exercises) and prioritise and manage response activities.
• Assist with the audit and client management aspects of the Information Security team, including client due diligence questionnaires; help design more effective procedures in this space.
• Help improve and support relevant security metrics; analyse data, identify trends and drive improvements to the control environment.
• Assist in general Information Security related issues as required, including potential interaction with the Security Operations team, Technology teams and business stakeholders.

Job Description

About Digital Technology & The SSO  

We’re not yesterday’s IT department, we're Digital Technology. The world around us keeps changing and so do we. We’re redefining what it means to be IT with a mindset centered on transformation, experience, AI-driven automation, innovation, and growth.   

We’re all about delivering delightful, secure customer and employee experiences that accelerate ServiceNow’s journey to become the defining enterprise software company of the 21st century. And we love co-creating, using, and highlighting our own products to do it.   

Ultimately, we strive to make the world work better for our employees and customers when you work in ServiceNow Digital Technology, you work for them.   

The ServiceNow Security Organization delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact  

Job Description 

As a Senior Security Administrator, you will be an essential part of our security team working on administration, configuration, maintenance of ServiceNow platform.  

What you get to do in this role:

• Be a ServiceNow Administrator!
• Automate the heavily used manual tasks.
• Learnings first: Get to learn and work on the latest ServiceNow Application & Platform features.
• Explore the latest ServiceNow features and evaluate them for adoption.
• Proactive Operations and Environment Maintenance
• Develop and configure ad-hoc ServiceNow enhancements/configurations
• Own issues and bring them to resolution as quickly as possible while providing proactive updates
• Finding solutions from previous cases using the Knowledge Base
• Create clear and concise technical and process documentation
• Be proactive in taking ownership of tasks and managing them through completion and knowing when to ask for help
• Flexibility to learn new technologies and quickly adapt
• Other duties as assigned

As one of the world’s leading asset managers, Invesco is dedicated to helping investors worldwide achieve their financial objectives. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world.

If you're looking for challenging work, smart colleagues, and a global employer with a social conscience, come explore your potential at Invesco. Make a difference every day!

Job Description

Job Purpose (Job Summary):  The Advanced Principal Security Architect role is accountable for driving security initiatives for the organization. Under limited supervisions, you will work with a wide variety of business stakeholders and IT professionals (including different Security functions, Enterprise Architecture, Technology Infrastructure, and Cloud Engineering teams) to ensure organizational security needs/controls are aligned to support business goals and objectives. This role will be based in Hyderabad, India.

Key Responsibilities / Duties:

• Define security functional requirements and non-functional requirements to meet the business objectives of a solution
• Work with stakeholders in setting the technical direction, selection, and evaluating candidate security solutions
• Work with stakeholders to design and document the conceptual and detailed designs of security solutions
• Lead the development of security standards, reference architectures, patterns, and guidelines
• Assess effectiveness of security controls i.e. data protection, IAM, detective controls, infrastructure/network security, incident response.  Work on identifying and driving implementation of appropriate controls, processes, and remediation of non-compliance
• Research and advocate new technologies, architectures, and security products that will support security maturity roadmap
• Act as a subject matter expert for advisory, review and approval of security designs, configurations, baselines, and technical standards
• Other duties as assigned.

Work Experience / Knowledge:

• 10+ years’ IT experience with 6+ years focused on security and solution architecture
• 3+ years’ experience with cloud delivery platforms IaaS/PaaS/SaaS and providers such as Amazon Web Services (AWS) and Microsoft
• Experience leading enterprise-wide security initiatives, including architecture and implementation of various security solutions & processes
• Ability to engage with senior leaders to define requirements and communicate effectively the results and risks
• Expert in 1 or more technology domains – infrastructure, application, network, IAM, data, endpoint
• Experience working with enterprise architecture practice and methodology, with security focus.
• Experience authoring security standards, reference architectures, patterns, and guidelines
• Knowledge of or experience with industry security controls frameworks such as NIST, CSA CCM, CIS Critical Security Controls, …
• Willingness to travel both domestically and internationally.  Frequency and duration to be determined by manager

Skills / Other Personal Attributes Required:

• Excellent people skills with the ability to communicate and act with influence.
• Team player and organizer.
• High-energy, confident professional with an ability to remain calm and take control in a crisis.
• Ability to work independently with minimal direction; self-starter/self-motivated
• Open minded, flexible, and willing to listen for other people’s opinions. Adapts to changing demands and conditions
• Willing to keep up to date and build upon skill and knowledge base.

Formal Education:

• Bachelor's degree in computer science/information systems or related field.

License / Registration / Certification:

• Certified Information Systems Security Professional (CISSP) or equivalent
• Preferred - certified in an enterprise architecture methodology and framework like TOGAF or SABSA
• Cloud Security Professional (CCSP), Certified Cloud Security Knowledge (CCSK), or preferred vendor certifications from AWS, Microsoft Azure or Google Cloud Platform

Full Time / Part Time

Worker Type

Job Exempt (Yes / No)

Workplace Model

At Invesco, our workplace model supports our culture and meets the needs of our clients while providing flexibility our employees value. As a full-time employee, compliance with the workplace policy means working with your direct manager to create a schedule where you will work in your designated office at least three days a week, with two days working outside an Invesco office. 

Why Invesco

In Invesco, we act with integrity and do meaningful work to create impact for our stakeholders. We believe our culture is stronger when we all feel we belong, and we respect each other’s identities, lives, health, and well-being. We come together to create better solutions for our clients, our business and each other by building on different voices and perspectives. We nurture and encourage each other to ensure our meaningful growth, both personally and professionally. 

We believe in diverse, inclusive, and supportive workplace where everyone feels equally valued, and this starts at the top with our senior leaders having diversity and inclusion goals. Our global focus on diversity and inclusion has grown exponentially and we encourage connection and community through our many employee-led Business Resource Groups (BRGs).  

What’s in it for you? 

As an organization we support personal needs, diverse backgrounds and provide internal networks, as well as opportunities to get involved in the community and in the world. 

Our benefit policy includes but not limited to: 

• Competitive Compensation 
• Flexible, Hybrid Work 
• 30 days’ Annual Leave + Public Holidays 
• Life Insurance 
• Retirement Planning 
• Group Personal Accident Insurance 
• Medical Insurance for Employee and Family 
• Annual Health Check-up 
• 26 weeks Maternity Leave 
• Paternal Leave 
• Adoption Leave 
• Near site Childcare Facility 
• Employee Assistance Program 
• Study Support 
• Employee Stock Purchase Plan 
• ESG Commitments and Goals 
• Business Resource Groups 
• Career Development Programs 
• Mentoring Programs 
• Invesco Cares 
• Dress for your Day 

In Invesco, we offer development opportunities that help you thrive as a lifelong learner in a constantly evolving business environment and ensure your constant growth. Our AI enabled learning platform delivers curated content based on your role and interest. We ensure our manager and leaders also have many opportunities to advance their skills and competencies that becomes pivotal in their continuous pursuit of performance excellence. 

To know more about us 

About Invesco: https://www.invesco.com/corporate/en/home.html 

About our Culture: https://www.invesco.com/corporate/en/about-us/our-culture.html 

About our D&I policy: https://www.invesco.com/corporate/en/our-commitments/diversity-and-inclusion.html 

About our CR program: https://www.invesco.com/corporate/en/our-commitments/corporate-responsibility.html 

Apply for the role @ Invesco Careers: https://careers.invesco.com/india/ 

Description:

We are seeking of Trainee Security Analyst who will monitor, respond, analyze and remediate Cybersecurity alerts. Our Security Analysts provide our clients with cyber security monitoring and response as part of our managed security services program. Our platform leverages a variety of cloud-native next-generation security tools to detect and prevent cyber threats to the networks and platforms of our customers.

Responsibilities:

• Maintain security tools used through the security processes.
• Ensure data collection is occurring with all tools for on-premises equipment, networking, and cloud infrastructure.
• Monitoring the SIEM for activities related to security issues.
• Ability to prioritize effectively and handle shifting priorities professionally.
• Exemplary written and verbal communication skills.
• Monitor, analyse, classify/prioritize, investigate, respond, document, and report on information security issues and emerging trends.
• Respond professionally to emails, tickets and phone calls regarding security issues.
• Adhere to client SLA for security monitoring and response.
• Successfully interface with clients (internal and external).
• Document and explain technical details in a concise, clear manner.
• Manage personal schedule to ensure completion of ticket deadlines.
• Provide weekly time accounting and monthly expense reports.
• Be on call as a member of the Cyber Incident response team.
• Be on call as a member of the SOC monitoring team.

Skills Required:

• Knowledge operating or maintaining data collection tools and troubleshooting the ingestion of data sources such as Syslog, event log agents, APIs, and event hubs.
• Knowledge of query languages such as SQL and KQL.
• Windows / Linux System Administration Experience is strongly preferred.
• Networking / Firewall experience.
• Identity and Access management experience.
• Troubleshooting capabilities.
• Knowledge in analyzing and creating remediation strategies for vulnerability management programs.
• Knowledge developing security analysis documentation and recommended remediation actions.
• Implement and maintain security solutions, tools, and IT Policies and standards.
• Understanding of networking protocols, including (e.g., TCP/IP, SNMP, DNS).
• Knowledge of authentication and authorization mechanisms, identity access management, cloud identity management, and user provisioning best practices.
• Technical engineering capabilities include Windows Servers and other common server platforms such as VMware, Active Directory, File, IIS, SQL, SCCM, WSUS, and others.
• Knowledge using Microsoft 365 services and Azure security controls and technology.
• Knowledge in using various security tools, but not limited to, SIEMS, Qualys, Metasploit, Nipper, Kali, etc.
• Good to have familiarity with industry standards such as PCI DSS, HIPAA\HiTech\HiTrust, CIS Critical Controls, NIST, OWASP.

Qualification:

• Diploma/BE/BTech/BS Computer Science/Engineering/IT or significant demonstrable experience in network security.
• Certifications such as Security+, Cybersecurity Analyst+, MCSA, MCSE, and Azure Administrator are desirable but not required.

Experience:

• Minimum 0-1 years of experience within an Information Security department or organization.

About Breachlock

BreachLock is an Innovative Cybersecurity Company deploying new-age technology to make Cyberspace a safe place for everyone.

Recognized by Gartner as a key Cybersecurity Innovator 3 years in a row, BreachLock is a growth Scaleup with Offices in the US, Europe, the UK, and India.

At BreachLock we take pride in a High-Performance Culture and are looking for talent with a growth mindset.

We are an equal opportunity workplace and our multinational team consists of people with more than 10 nationalities and 20 ethnicities.

We are currently hiring for our Engineering team based out of our Hyderabad Offshore Development Center (ODC).

Why join BreachLock

Being part of our Engineering team offers the opportunity to work in the latest tech stack & develop cutting edge AI & ML solutions.

You are surrounded by passionate software engineers and architects on a mission of building next gen tech solutions securingcyberspace and thereby also making a difference to the society at large.

What's more, you work in our cool & modern facility in our Hyderabad ODC at "Workafella High-Tech City " filled with a great startup vibe & a strong tech community.

Organization Details:

• https://www.breachlock.com/
• https://www.linkedin.com/company/breachlock/

Leadership Team:

• https://www.breachlock.com/about/leadership/

Media Coverage:

1. Meet the BreachLockers: Links
2. Rueters BreachLock - Making Cyberspace a safer place: LinK
3. Cybercrime magazine - CEO and Founder, Seemant Sehgal, explains his vision for BreachLock: Link
4. Seemant Sehgal, BreachLock CEO & Founder interview aired on RT4 and RTLZ: Link

Benefits:

• Opportunity to join a promising Scale-up with accelerated career growth
• Opportunity to join and grow in rapidly expanding Cybersecurity industry
• Competitive Compensation
• Relocation Benefits
• Healthcare Insurance Benefits
• Company Car Lease Benefits

1. Proven experience in penetration testing, ethical hacking, and vulnerability assessment.

2. In-depth knowledge of common security frameworks, standards, and best practices (NIST, OWASP, etc.).

3. Strong understanding of network protocols, systems architecture, and web application security.

4. Thorough knowledge of common software vulnerabilities and Standards such as OWASP Top 10, SANS Top 25, etc.

5. Proficiency in using penetration testing tools and frameworks (Metasploit, Burp Suite, Nmap, Wireshark, etc.).

6.  Experience with scripting and programming languages (Python, Bash, PowerShell, JAVA etc.).

7.  Excellent written and verbal communication skills, including the ability to convey technical concepts to non-technical stakeholders.

8.  Ability to work independently and collaboratively in a team environment.

9.  Strong analytical and problem-solving skills.

10. Commitment to continuous learning and professional development.

Responsibilities:

1. Thorough knowledge of penetration testing on a variety of systems, such as web applications, Networks, Mobile apps, IoT devices, and API’s including the services layer segments with REST/SOAP/GraphQL APIs, ESB, Middleware, or other channels to identify and exploit vulnerabilities.

2. Strong understanding of cloud security for environments such as AWS, Azure, GCP and others.

3. Capable of researching and staying updated on current security vulnerabilities in order to create proof-of-concept (PoC) or scripts for automated detection. Proficient in proactively addressing emerging threats through continuous monitoring and research.

4. Develop and maintain tools, scripts, and methodologies to enhance the efficiency and effectiveness of penetration testing activities.

5. Develop Python-based applications, tools, and scripts according to specifications.

6. Collaborate with the team to define project requirements and deliver high-quality solutions.

7. Write clean, efficient, and maintainable code following best practices.

8. Debug and troubleshoot issues to ensure the performance and reliability of applications.

9. Work with databases and data processing frameworks to store and manipulate data effectively.

10. Stay updated on Python libraries, frameworks, and best practices to continuously improve development processes.

• Opportunity to join and grow in a passionate, rapidly expanding industry
• Competitive compensation
• You will be working alongside international experts
• Strong career prospects in an early-stage startup

What you get to do in this role:   

• Support the Sales and Solution consultants’ teams taking cloud to customers in the region.
• Respond to prospect and customer questions related to security.
• Present and evangelize on cloud adoption & assurance.
• Contribute to the overall messaging and positioning of the Security Office
• Ensure the ServiceNow Customer Outcomes (implementation) team is supported.
• Coordinate and manage end-to-end customer cloud security experience.
• Active participation in Security Industry forums, communities, and standards organisations
• Participation in discussions & presentations with Partners and Customers
• Investigate and understand cloud threats
• Lead security conversations
• Escalation points for Security Incidents & investigations
• Propose & develop structural/design changes to advance the security posture of ServiceNow
• Work with Legal on security/privacy-related matters, including contracts.
• Work with a wide range of customers, government, small and large enterprises & financial services.
• Partner with ServiceNow's Sales/Solution consulting/Partner ecosystem as a security consultant and expert on cloud security.

Our story

At Alight, we believe a company’s success starts with its people. At our core, we Champion People, help our colleagues Grow with Purpose and true to our name we encourage colleagues to “Be Alight.”

Our Values:

Champion People – be empathetic and help create a place where everyone belongs.

Grow with purpose – Be inspired by our higher calling of improving lives.

Be Alight – act with integrity, be real and empower others.

It’s why we’re so driven to connect passion with purpose. Our team’s expertise in human insights and cloud technology gives companies and employees around the world the ability to power confident decisions, for life.

With a comprehensive total rewards package, continuing education and training, and tremendous potential with a growing global organization, Alight is the perfect place to put your passion to work.

Join our team if you Champion People, want to Grow with Purpose through acting with integrity and if you embody the meaning of Be Alight.

Learn more at careers.alight.com. 

ROLE : SAP Security specialist

RESPONSIBILITIES :

SAP Security specialist is responsible for designing and creating SAP Security authorizations and roles for different projects. Understand all business application systems especially HR related solutions, review the critical access, SODs and implement new rules in compliance audit tool. Provide expertise and guidance on SAP Roles, configuration and perform process review. Provide support for core modules in SAP; ECC6 , BI/BW, SAP HCM, SAP SRM and SAP Portal. Assists functional support teams diagnose authorization difficulties. Document security details for role design and modification procedures. Participate in discussions to establish key standards and guidelines for implementing security policies and procedures as per SAP best practices. Interact with all teams to gather the information on key roles and responsibilities. Prepare SAP Security blueprint, role matrix and provide guidance to the role development activities.

REQUIREMENTS:
·          Extensive knowledge and experience on at least two compliance tools like GRC, CSI etc.
·          Experience in Internal/External audit compliance.
·          Should have knowledge and experience in SuccessFactors ECP and EC.
·          Should be able to understand and create role matrix and SOD matrix.
·          Should have strong communication skills and client interaction skills.
·          Experience in gathering the information from the business users and provide them the role concept and design structure.
·          Experience in working with CUA systems.
·          Should be able to mentor the other team members on the critical issues and processes.

Flexible Working

So that you can be your best at work and home, we consider flexible working arrangements wherever possible.  Alight has been a leader in the flexible workspace and “Top 100 Company for Remote Jobs” 5 years in a row.

Benefits

We offer programs and plans for a healthy mind, body, wallet and life because it’s important our benefits care for the whole person. Options include a variety of health coverage options, wellbeing and support programs, retirement, vacation and sick leave, maternity, paternity & adoption leave, continuing education and training as well as a number of voluntary benefit options. 

Our commitment to Diversity and Inclusion

Alight is committed to diversity, equity, and inclusion. We celebrate differences and believe in fostering an environment where everyone feels valued, respected, and supported. We know that diverse teams are stronger, more innovative, and more successful.

At Alight, we welcome and embrace all individuals, regardless of their background, and are dedicated to creating a culture that enables every employee to thrive. Join us in building a brighter, more inclusive future.

SAP Security specialist is responsible for designing and creating SAP Security authorizations and roles for different projects. Understand all business application systems especially HR related solutions, review the critical access, SODs and implement new rules in compliance audit tool. Provide expertise and guidance on SAP Roles, configuration and perform process review. Provide support for core modules in SAP; ECC6 , BI/BW, SAP HCM, SAP SRM and SAP Portal. Assists functional support teams diagnose authorization difficulties. Document security details for role design and modification procedures. Participate in discussions to establish key standards and guidelines for implementing security policies and procedures as per SAP best practices. Interact with all teams to gather the information on key roles and responsibilities. Prepare SAP Security blueprint, role matrix and provide guidance to the role development activities.

We offer you a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.
 

DISCLAIMER:

Nothing in this job description restricts management's right to assign or reassign duties and responsibilities of this job to other entities; including but not limited to subsidiaries, partners, or purchasers of Alight business units.

Experience: 6 Years and above

This position is responsible for assisting in the day-to-day operations of Harsco’s security program, including risk analysis, vulnerability management and prevention, training, as well as awareness campaigns. 

Working with various IT teams, the Security Analyst will ensure solutions are designed, developed, deployed, and managed effectively ensuring robust security and risk controls are used.  The CSA leads the firm's vulnerability management program, manages the annual cybersecurity assessments and penetration tests, and researches and reports on emerging threats, to help the firm take pre-emptive risk mitigation steps.

Key Responsibilities

• Participate in optimizing Harsco’s cyber security program by applying policies, standards, and processes
• Proactively monitor, analyze, and provide guidance on security vulnerabilities and incidents to support remediation activities
• Participate in developing and maintaining documentation on cyber security operations, incident playbook and runbooks, process workflow, incident handling and response capabilities
• Participate in developing and maintaining documentation for vulnerability assessments, threat modeling and the risk remediation processes
• Collaborate and partner with IT and business stakeholders, as well as remediation teams, to respond to security incidents and manage remediation
• Research and stay abreast of and provide guidance on vulnerabilities and emerging threats
• Respond to questions and issues relating to Cybersecurity policies
• Participate in Assessing new security technologies to determine potential value for the enterprise. Perform research, testing, evaluation, and deployment of security technology and procedures.
• Be an active member of the Incident Response Team
• Manage assigned systems owned by Information Security Team
• Perform other duties as assigned