Total 52 security job vacancies in Information Technology category in City of London, London, EC2V 6DN

Are you passionate about offensive security, enjoy breaking down walls with an array of tools and techniques, and continuously learning about the offensive security world? We are seeking a dynamic Cyber & Offensive Security Risk Lead to join our Data, Technology & Cyber Risk function.

Job Description:

The Cyber & Offensive Security Risk Lead will assist the Chief Information Security Officer to establish and maintain robust governance and oversight over the effectiveness of cyber risk management to ensure that the Bank’s technology and information assets are adequately protected.

Primary Responsibilities:

• Assist with the development, review, update and/or roll-out of cyber risk-related framework, policy, and initiatives to facilitate effective risk management and governance over cyber risk management.
• Review and assess the extent of compliance with internal policies, procedures, standards and regulatory requirements.
• Provide advisory, guidance and challenge to Business Units and Functional Units in their management of cyber risks to achieve their business objectives and within the Bank’s risk appetite.
• Conduct independent assessments on the adequacy and effectiveness of control measures implemented by the 1st Line of Defense (FLOD), and recommend mitigation actions to address vulnerabilities, if any.
• Lead Red Team (offensive cyber) activities to proactively simulate real-world cyber-attacks on the Bank’s security controls to identify and exploit security weaknesses and vulnerabilities.
• Provide recommendations and remediation strategies to address security vulnerabilities identified during offensive cyber activities.
• Establish relevant Key Risk Indicators (KRIs) and metrics to monitor and measure cyber risk exposures.
• Prepare and present cyber risk reports to Senior Management and relevant committees, highlighting key findings, trends and/or recommendations.
• Respond to enquiries and audits (i.e. internal, external and regulatory) pertaining to cyber risks.
• Where required, collaborate with the Bank’s cyber incident response team to provide advice and/or support during security incidents and cyber-attacks.
• Conduct cyber risk awareness training across the Bank, fostering cyber risk awareness and a security-conscious culture.
• Stay abreast of emerging cyber threats, vulnerabilities, attack techniques, and regulatory developments to proactively address potential cyber risks, and assist the Management (and/or Board) understand potential concerns or risks that might impact the Bank.

Qualifications:

• Bachelor’s degree in computer science, Information Security or a related field.
• Minimum of 15 years’ experience in any of these disciplines: offensive security, information security, risk management or compliance in related areas.
• Professional certification such as CISSP, CCSP, CGRC, CISM, CISA, CRISC, CompTIA PenTest+, Offensive Security (e.g. OSCP, OSCE, OSWE & OSWP), SANS (e.g. GXPN, GWAPT, GPEN & GMOB), Zero-Point Security and/or CREST would be advantageous.
• Sound knowledge in regulatory requirements around technology risk and cyber resilience.
• Knowledge of network protocols, operating systems, application security and cloud security.
• Possess strong verbal and written communication skills, and capable of engaging senior stakeholders.
• Clear analytical thought process and good understanding of emerging technological developments and risk management frameworks.

Perks & Benefits

• Allowance (transportation, parking etc.)
• Nearby public transport
• Smart casual dress code
• Medical insurance
• Annual leave, Birthday Leave etc

責任

✍ 負責與網路安全要求和新興相關ICT技術相關的端到端整體解決方案和服務活動，以實現最佳水準的網路安全機密性、完整性和可用性標準。
✍ 負責網路安全指南、基準、標準和流程的持續維護、監控和更新。這包括預測成長以確保可擴展性，評估基準、觀察或其他行業最佳實踐帶來的增強價值，並在需要時納入變更。
✍ 負責建立和維護業務工作流程和技術的現況和未來安全流程和工作指導。
✍ 開發並推薦知識開發以及文件化實務和工程知識抵押品的創建。
✍ 技術專家提供全面的解決方案和工程，以建構技術解決方案的技術要求。
✍ 提供IT 解決方案工程和設計建議的IT 安全諮詢和審查服務，以確保解決方案符合IT 安全要求，從而保護客戶的IT 基礎設施和系統。
✍ 提供適用於各種開發技術的技術專業知識和諮詢。
✍ 負責為客戶的整個網路和系統基礎設施分析、評估和推薦最佳的資訊安全技術和解決方案。
✍ 負責從安全角度和角度進行符合客戶安全控制和基線的解決方案評估、POC、UAT。
✍ 就資訊安全問題提供建議和諮詢，並為各個內部團隊和部門提供建議。
✍ 對新出現的內部和外部威脅、技術趨勢和減輕 IT 安全風險的方向進行研究和環境掃描，並透過跨 IT 部門和職能部門的協作進行評估，以改善 IT 安全基礎設施和服務。
✍ 規劃、研究、分析、評估和推薦資訊安全技術解決方案、方向和採用。
✍ 研究和開發新的資訊安全技術以改善和創造商業機會。
✍ 與外部 IT 安全專家和其他 IT 組織建立和維護策略關係/網路和協作，以衡量和改善客戶向利害關係人提供的網路安全基礎設施服務。

要求

✍ 電腦科學、資訊系統、工程學、軟體工程或任何相關學科的學士學位。
✍ 在技術相關領域擁有約 8-10 年的經驗，並具有相關 IT 安全領域和工程的具體專業知識。
✍ 具有撰寫和支援策略性商業策略的經驗，並具有以業務為中心的心態。
✍ 清楚地了解如何根據特定的架構原則將安全架構和設計轉化為詳細的技術組件。
✍ 此角色需要掌握安全工程生命週期並了解企業安全架構環境。
✍ 網路安全治理、指南和風險以及網路安全解決方案領域的基礎知識。
✍ IT 網路的基礎知識以及對 OT 和物聯網架構和工程的更好理解。
✍ 具有強化練習和技術合規性保證練習的經驗。

工作亮點

✅ 僅限馬來西亞本地人。
✅ 每週工作 5 天，採用混合工作安排。
✅ 極佳的成長和職涯發展機會。
✅ 有競爭力的薪資待遇。
✅ 偉大的跨國公司（能源部門）工作文化。

• Serves as the data center and cloud SME for information and cybersecurity compliance, develops SOPs, and operational policies to ensure performance parameters, and policy guidance are implemented.
• Collaborates with managers and staff to support security compliance with the Federal Information Security Management Act (FISMA) and provides oversight of the organization's implementation of the NIST Risk Management Framework (RMF).
• Advises management and staff of changes in cyber security systems policies and procedures, and works closely with Hosted Infrastructure (HI) project teams to implement security management enhancements.
• Serves as liaison between project teams and Department stakeholders that include the IT Change Control Board (CCB) to provide authoritative guidance regarding the configuration management process.
• Represents Division in deliberations with IT CCB voting members, and provides expert advice to senior management concerning vital cybersecurity problems and issues.

What will I do in this position if hired?

In this Telecommunications Specialist (Electronic Security) position, you will serve as an expert in the understanding of how the electronic security equipment and systems contribute to the agency's mission needs.

Typical assignments include:

• Act in the capacity as a technical expert, consultant, and advisor who is responsible for performing assigned efforts and managing contractor efforts related to the FEMA OSCO's security systems.
• Planning, performing, directing, interfacing, coordinating and/or controlling the efforts of contractors, consultants and other government agencies engaged in the identification, concept development, analysis, evaluation and integration of FEMA/organization solutions involving future systems.

What else do I need to know?

At FEMA, our mission is to help people before, during and after disasters, and every employee at FEMA has a role in emergency management. Every FEMA employee has regular and recurring emergency management responsibilities, though not every position requires routine deployment to disaster sites. All positions are subject to recall around the clock for emergency management operations, which may require irregular work hours, work at locations other than the official duty station, and may include duties other than those specified in the employee's official position description. Travel requirements in support of emergency operations may be extensive in nature (weeks to months), with little advance notice, and may require employees to relocate to emergency sites with physically austere and operationally challenging conditions.

This announcement is for a position as a CORE (Cadre of On-Call Response/Recovery Employee). CORE employees are full-time employees hired to directly support the response and recovery efforts related to disasters. Employees are hired under the Robert T. Stafford Act and are excluded from the provisions of title 5, United States Code, governing jobs in the competitive service. They can be hired under a streamlined process instead of a competitive process. After three years of continuous service, Stafford Act employees may be granted competitive eligibility to apply for permanent full-time positions at FEMA.

This position will be hired into a temporary 4-Year, excepted service appointment. Appointments may be renewed based on workload, funding, and supervisory approval.

FEMA is committed to ensuring that its workforce reflects the diversity of the nation. At FEMA, our workforce includes the many identities, races, ethnicities, backgrounds, abilities, ages, cultures, and beliefs of the people we serve. To learn about FEMA's ongoing diversity and inclusion efforts, reasonable accommodation process, and the FEMA Core Values, please visit www.fema.gov.

• Serves as the data center and cloud SME for information and cybersecurity compliance, develops SOPs, and operational policies to ensure performance parameters, and policy guidance are implemented.
• Collaborates with managers and staff to support security compliance with the Federal Information Security Management Act (FISMA) and provides oversight of the organization's implementation of the NIST Risk Management Framework (RMF).
• Advises management and staff of changes in cyber security systems policies and procedures, and works closely with Hosted Infrastructure (HI) project teams to implement security management enhancements.
• Serves as liaison between project teams and Department stakeholders that include the IT Change Control Board (CCB) to provide authoritative guidance regarding the configuration management process.
• Represents Division in deliberations with IT CCB voting members, and provides expert advice to senior management concerning vital cybersecurity problems and issues.

The post holder will required to:

1. Lead the service area and communicate effectively with senior leaders to influence future policy and strategic direction

2. Show pride and passion for public service and be able to create and engage others in delivering a shared vision.

3. Form effective partnerships both internally and externally, sharing information, resources and support.

4. Utilise excellent verbal and written communication skills, be able to use evidence and knowledge to support accurate, expert decisions and advice, and understand how this role fits in with and supports organisational objectives.

5. Work flexibly at different hours as required

In addition:

• You are passionate about the council's ambition to deliver We Make Camden and wider corporate agendas, such as The Way We Work
• You can demonstrate commitment to culture change and understand Camden's ambition to move to greater neighbourhood working
• You are curious and challenging, with the ability to think about how we can do things differently to improve resident experience
• You create a culture of accountability across all teams, ensuring delivery of agreed outcomes
• You understand the importance of performance, data, and measuring impact; and develop collaborative, solution-focussed and high performing teams
• You recognise the importance of working in partnership with other services internally and externally to provide a joined up approach which promotes the need to for ever greater collaboration to deliver outcomes on behalf of Camden citizens and communities.
• You are committed and will champion the council's ambition to make Camden a more equal, diverse and inclusive borough
• You are authentic and inspirational, and engage others through your personal leadership and ability to make the Council's vision meaningful to all

We at Indepay | Setara Networks are here to revolutionize the Indonesian payment ecosystem by introducing one click checkout services in order to make transactions zero-fee, instant, and rewarding for the consumer. 

On one side we’re working with financial institutes to enable real-time account to account transfers through our platform, and on the other-side we’re giving consumers a reliable and secure payment experience which is better than anything else they’ve experienced in the Indonesian ecosystem.