Total 57 Others level Legal / Public / Security job vacancies in bucks pa admin office

Melaksanakan drafting kerja perusahaan dengan pihak eksternal

Job Family:

IT Cyber Security (India)

Travel Required:

Up to 10%

Clearance Required:

None

What You Will Do:

Our Security Access Management Technical Analyst - Amazon Web Services (AWS) is a member of a service team with upwards of four (5) personnel within the Information Security Compliance group that are focused on external federation and authentication services, privileged access management, non-privileged access management, identity access auditing, and multifactor authentication services. Effectively supports and executes multiple or more complex IT Security Access Management projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse Access Management security systems, maintaining, and protecting Guidehouse and Client data within AWS to the NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, and HITRUST standards, and managing Guidehouse and client information securely through all means of electronic transfer. Reports directly to the Security Access Management Manager.

Job Function:

• Understands and supports the IT Security Access Management initiatives that support overall IT Security Compliance goals and objectives
• Demonstrates effective written and verbal communication skills; delivered in a professional, respectful, and timely manner
• Manages AWS security services such as Identity and Access Management (IAM to safeguard against unauthorized access and threats
• Produces high quality work product leveraging existing templates, tools, and methodologies that align to applicable professional standards and best practices
• Clearly and concisely conveys more complex messages to IT Security Access Management team; effectively presenting facts and recommendations
• Designs and configures monitoring and alerts for identity and access management in accordance with Guidehouse Policies, Standards, and Procedures
• Assists in conducting risk assessments and security audits to identify vulnerabilities and recommending mitigations to enhance security posture
• Proactively asks questions, validates what is heard, and shares relevant informed point of view in meetings and client discussions
• Demonstrates the ability to sense and respond to verbal and non-verbal cues and adapt messages and approach based on the audience
• Demonstrates honest and professional behavior in all interactions
• Identifies risk issues (e.g., technical, client service, engagement, team, internal and external) and escalate them to IT Security supervisors and senior leaders
• Helps with issue resolution, risk mitigation and contingency planning in alignment with IT Security Access Management leader guidance and IT Security risk mitigation plans
• Uses critical thinking, analysis, expertise, and collaboration to develop technical solutions and solve problems
• Thinks innovatively to proactively identify opportunities for system and process enhancements and make recommendations to IT Security Access Management leadership
• Works in unstructured or unclear circumstances
• Mentors and/or trains IT Security Access Management team and/or IT Security, working with supervisor/leaders to position them for success, serving as a resource to peers
• Promotes the development of new technical knowledge and skills within IT Security Access Management team
• Conducts quality assurance reviews using established or establishing KPIs and self-audit work before showing work to more senior staff and/or clients, learning from mistakes
• Takes ownership of my tasks and the tasks I delegate, resolving issues and escalating as appropriate
• Presents themselves and the company in a manner that always promotes a positive lasting impression of high quality, promptness, and professional service
• Draws from experience to propose solutions to meet needs, focusing the team accordingly
• Builds a high level of trust with stakeholders by meeting and anticipating needs and expectations
• Demonstrates an advanced understanding within AWS and ability to apply technical or specialized knowledge specific to role, industry, business line, and/or functional area within AWS
• Stays current on AWS events, trends, and issues in the news relevant to IT Security
• Ensures prescribed IT Security policies, procedures, and standards are followed while identifying opportunities for system and process enhancements
• Communicates with parties within and outside of IT Security; May have responsibility for communicating with parties external to the organization (e.g., customers, vendors, etc.)
• Works independently on mid to large or complex projects and assignments, with minimal guidance and to influence parties within and outside the job function at an operational level regarding policies, best practices, and procedures
• Responsible for developing technical AWS solutions that may require collaboration with internal expertise and deep analysis of the technical system
• Problems and issues faced are difficult and may require understanding of broader set of issues. Problems typically involve consideration of multiple issues, job areas or specialties; Problems are typically solved through drawing from prior AWS experience and analysis of issues.
• Manages projects while delegating work to lower-level employees
• Ability to participate in cross- department discussions to influence job area processes
• Exhibits practical knowledge of project management
• Advanced understanding and ability to apply standards, principles, theories, and technical concepts obtained through advanced education combined with experience

What You Will Need:

• Citizenship: India
• Shall possess following certifications:
  • AWS Certified Cloud Practitioner Foundational
  • AWS Certified Security Specialty
• Must be able to work 10am – 7pm IST
• Experience working with Executive Leadership
• Experience supporting Microsoft Windows 10 operating system
• Working knowledge of NIST SP 800-171 and NIST SP 800-53
• Experience managing multi-geographic cloud resources while implementing controls compliant with NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Experience documenting processes and procedures to comply with required NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Significant demonstrated experience working with cloud first solutions that are implemented globally
• Extensive experience with AWS environments, access management, and information security principles
• Experience configuring and managing AWS security services such as Identity and Access Management (IAM) to safeguard against unauthorized access and threats
• Experience executing processes and procedures in compliance with required NIST and IT standards
• Extensive experience with AWS Security Hub
• Experience with AWS Control Tower
• Working knowledge of broad web application environment standards, implementation strategies, and best business practices
• Significant experience with the operational employment of as Identity and Access Management (IAM) within AWS
• Ability to work on many concurrent, and changing priorities
• Action-oriented and able to manage and meet aggressive timelines and deadlines.
• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Bachelor’s in computer-related OR cyber field with 4-6 years of experience; OR Master's with 6-8 years of experience (Relevant experience may be substituted for formal education or advanced degree)
• Shall possess one OR more of the following certifications OR equivalent:
  • AWS Certified Solutions Architect Associate
  • AWS Certified Solutions Architect Professional
  • AWS Certified DevOps Engineer Professional
  • AWS SysOps Administrator Associate
  • AWS Certified Data Engineer
  • AWS Machine Learning Specialty
  • (ISC)2 Certified Information Security Professional (CISSP)
  • ISACA Certified Information Security Manager (CISM)
  • ISACA Certified Information Systems Auditor (CISA)
  • ISO 27001 Certified Auditor
  • ISO 9001 Certified Auditor
  • Project Management Professional (PMP)
  • CompTIA Security+ (Plus)
• Experience with Threat Intelligence
• Experience working with identity and access management systems
• Working knowledge of Active Directory, Exchange, SharePoint, and Teams
• Demonstrated ability to learn and document new technologies/solutions
• Experience with ServiceNow is a plus
• Experience working in an ITIL environment

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Job Family:

IT Cyber Security

Travel Required:

Up to 10%

Clearance Required:

None

What You Will Do:

Our Security Governance Sr. Analyst is a member of a service-oriented team with upwards to six (6) personnel within the Information Security Governance team that are focused on policy development/management, Engagement Data Security Plan (EDSP) management, Travel assessments, and documentation management. Effectively supports and executes multiple or more complex IT Security Governance projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse security governance, maintaining, and protecting Guidehouse and Client data to the NIST SP 800-171 standards, managing Engagement Data Security Plan (EDSP) implementation and execution for the Company, and manage the compliance and execution of the IT Travel Security program. Reports directly to the IT Security Governance Manager.

• Achieves operational targets within IT Security Governance area with direct impact on results

• Executes daily work within existing procedures and guidelines

• May influence other technical staff through explanation of facts, policies and practices related to job area

• Communicates with contacts typically within the project area or technical department on matters that involve obtaining or providing information requiring some explanation or interpretation in order to reach agreement

• Entry to established level technical individual contributor

• Builds on knowledge of an industry or segment and works to deepen experience across a range of projects

• Follows operating guidelines and identifies recommended enhancements in processes to improve effectiveness of IT Security Governance area

• Works under close to limited supervision on small to midsize projects or assignments

• Requires general instructions for new lines of work or special projects

• Assists with the implementation and executes on technical initiatives and solutions

• Relies on limited experience and judgment to plan and accomplish assigned tasks and goals

What You Will Need:

• United States Citizenship

• Bachelor's Degree preferred

• Minimum 2-4 years of prior relevant experience desired; (Relevant experience may be substituted for formal education or advanced degree)

• Shall possess one or more of the following certifications (preferred):

  • (ISC)2 Certified Information Security Professional (CISSP)

  • ISACA Certified Information Security Manager (CISM)

  • ISACA Certified Information Systems Auditor (CISA)

  • ISO 27001 Certified Lead Auditor

  • ISO 9001 Certified Lead Auditor

  • Project Management Professional (PMP)

  • Security+

• Must be able to work East Coast US business hours

• Experience documenting processes and procedures to comply with required NIST and IT standards

• Ability to work on many concurrent and changing priorities – flexibility is a must

• Action-oriented and able to manage and meet aggressive timelines and deadlines

• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Experience working with Governance Risk and Compliance tools beyond the manual processes of excel sheets, folders, and emails

• Experience with NIST SP 800-53

• Experience with Microsoft Azure Compliance Center

• Working knowledge of Active Directory, Exchange, SharePoint, and Teams

• Demonstrated ability to learn and document new technologies/solutions

• Experience with ServiceNow is a plus

• Experience working in an ITIL environment

The annual salary range for this position is $65,400.00-$98,200.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Position may be eligible for a discretionary variable incentive bonus

• Parental Leave and Adoption Assistance

• 401(k) Retirement Plan

• Basic Life & Supplemental Life

• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts

• Short-Term & Long-Term Disability

• Student Loan PayDown

• Tuition Reimbursement, Personal Development & Learning Opportunities

• Skills Development & Certifications

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Emergency Back-Up Childcare Program

• Mobility Stipend

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Company :

Highmark Health

Job Description : 

JOB SUMMARY

This job provides Information Security and Risk Management services for the Organization. Works with peers within security, HM Health Solutions customers and application teams to ensure alignment with current and future security needs. Manages activities of various Information Security personnel. Makes decisions on personnel actions (promotions, hiring, terminations, etc.). Develops talent, addresses resource management, cultivates capabilities of staff, planning and coordination of work, and managing performance. Conducts the oversight of security technology products for network, systems, and data. Controls expenses within the operating unit and is responsible for meeting budget goals. Actively contributes to the Information Security ans Risk Management (ISRM) strategic planning process by working with the Directors to develop and implement department strategic plans and action steps that support the corporate strategic objectives. Actively involved in the coordination, implementation, problem solving, communication, and training of new technologies and processes, as they are developed and moved into the environment. Develops and presents Information Security awareness and training programs.

ESSENTIAL RESPONSIBILITIES

• Perform management responsibilities including, but not limited to: involved in hiring and termination decisions; coaching and development; rewards and recognition; performance management and staff productivity.
• Plan, organize, staff, direct and control the day-to-day operations of the department; develop and implement policies and programs as necessary; may have budgetary responsibility and authority.
• Provide oversight of all aspects of project management to ensure continuous improvement of processes: negotiate and collaborate with leadership and staff to develop security solutions and options; develop and adhere to internal standards and strategies; ensure adherence to approved methodologies; coordinate resources, time, contingency plans and risk management.
• Provide leadership to the department: lead and champion organizational change; encourage participation in activities that support relationship development; champion information security innovation; encourage and enforce proper training in regards to security issues.
• Ensure compliance to Corporate and Information Security policies, standards and  procedures.
• Communicate effectively with all levels of the organization: facilitate meetings; plan, design and provide presentations; represent HM Health Solutions with outside entities; prepare divisional procedures, policies, reports and correspondence;  spread awareness of new and existing security threats; provide oversight regarding metrics, funding, budgets and resources. 
• Other duties as assigned or requested.

EDUCATION

Required

• Bachelor’s Degree in Information Security, Information Systems,  Information Assurance, Computer Science or related field

Substitutions 

• 6 years of relevant experience substitution for a Bachelor's Degree

Preferred

• Master’s Degree in Computer Science, Information Security or related field

EXPERIENCE

Required

• 7 - 10 years in Information Security and/or Information Risk Management and/or Information Technology
• 7 - 10 years in developing, communicating and presenting Information Security and Risk Management concepts to varying audiences                  
• 1 - 3 years in mentoring others in a leadership role                            
• 1 - 3 years in Staff Management  
• 1 - 3 years in developing and executing strategic plans to realize business objectives

Preferred

• 10 - 15 years in Information Security and/or Information Risk Management and/or Information Technology
• Experience managing an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework                  
• Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits                           
• Experience establishing budgets and meeting fiduciary goals
• Security industry organization participation/leadership (HITRUST, ISACA, InfraGard, ISC2, ISSA, etc.)

LICENSES AND CERTIFICATIONS

Required

• None

Preferred

• Certified Information Systems Security Professional (CISSP) OR
• Certified Information Security Manager (CISM) OR
• Certified in Risk and Information Systems Controls (CRISC) OR
• Information Technology Infrastructure Library (ITIL)

SKILLS

• Knowledge of regulatory requirements such as Health Insurance Portability and Accountability Act (HIPPA), Payment Card Industry Data Security Standards (PCI DSS), and FIPS-140
• Strong teamwork and interpersonal skills                              
• Experience in leading process improvement initiatives                      
• Ability to motivate high performance, multi-discipline teams                            
• Demonstrated competency in project execution
• Demonstrated abilities in relationship management

Languages (Other than English)

None

Travel Requirement
0% - 25%

PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS

Position Type

Office-Based

Teaches/Trains others regularly

Frequently

Travels regularly from the office to various work sites or from site-to-site

Occasionally

Works primarily out-of-the office selling products/services (Sales employees)

Does Not Apply

Physical Work Site Required

Yes

Lifting: up to 10 pounds

Does Not Apply

Lifting: 10 to 25 pounds

Does Not Apply

Lifting: 25 to 50 pounds

Does Not Apply

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.

As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times.  In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy. 

Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.

Pay Range Minimum:

$108,000.00

Pay Range Maximum:

$199,800.00

Base pay is determined by a variety of factors including a candidate’s qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations.  The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability. 

EEO is The Law

Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity (https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf)

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact number below.

For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org

California Consumer Privacy Act Employees, Contractors, and Applicants Notice

Company :

Highmark Health

Job Description : 

GENERAL OVERVIEW:  

Coordinates media relations and prepares external communications.  Plans, prepares and relays information concerning the organization to the press and the wider community to gain understanding and acceptance for the organization.  Develops and maintains lines of communication with media contacts and other external audience groups.

ESSENTIAL RESPONSIBILITIES: 

• Manage projects and provide consultation on a variety of media and communication initiatives,  including media inquiries and interviews, press conferences and other communications activities. Develop communications plans and approaches, news releases, fact sheets, background papers, message points and a variety of other communications materials. 
• Manage media inquiries, research and develop corporate positioning on key issues, provide background on the issues, develop, write and edit appropriate communications materials and messages for a variety of audiences including the media, member services, sales, government affairs and other Highmark business units under strict deadlines. 
• Work with key business units across the corporation to ensure that consistent messages are being developed and communicated about issues impacting the corporation.
• Work with key business units across the corporation to ensure that consistent messages are being developed and communicated about issues impacting the corporation.
• Develop proactive media relations opportunities to position Highmark as a leader in the health care insurance industry.
• Serve as Highmark spokesperson with the news media and other external audiences on key health care issues affecting Highmark.
• On an ongoing basis, meet with key business units to identify issues and opportunities to position Highmark in the media and with key stakeholders. 
• Other duties as assigned or requested.

QUALIFICATIONS:

Minimum

• High School Diploma or equivalent 
• 3-5 years of relevant, progressive experience in the area of specialization. Exempted experience requirements effective August 2016.

Language (Other than English):

None

Travel Requirement:

0% - 25%

PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS

Position Type

Office-based

Teaches / trains others regularly

Occasionally

Travel regularly from the office to various work sites or from site-to-site

Rarely

Works primarily out-of-the office selling products/services (sales employees)

Never

Physical work site required

Yes

Lifting: up to 10 pounds

Constantly

Lifting: 10 to 25 pounds

Occasionally

Lifting: 25 to 50 pounds

Rarely

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.

As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times.  In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy. 

Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability. 

EEO is The Law

Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity (https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf)

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact number below.

For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org

California Consumer Privacy Act Employees, Contractors, and Applicants Notice

Company :

Highmark Health

Job Description : 

THIS POSTING IS INTENDED FOR ACBA PROGAM PARTICIPANTS TO APPLY.

SUMMARY OF JOB RESPONSIBILITIES 

This job has the goal of providing the opportunity to acquire practical experience through direct exposure to the related business line(s) and to develop the next generation of diverse business professionals.  To that end, the program will provide hands-on training and experience in the business line, expose the various career opportunities in the business line and related areas, and prepare participants for positions in the business.

REQUIRED QUALIFICATIONS 

Bachelor’s degree.
Pursuance of a graduate degree full or part-time in an accredited college or university. 

ESSENTIAL JOB FUNCTIONS 
1. Communicate effectively. This position displays effective communication skills while interacting directly with colleagues, clientele, and/or other internal or external constituencies in the planning of assignments and the resolution of day-to-day operational problems. 

2. Under supervision, provide professional services as appropriate to the day-to-day operating objectives of the area.  Receives guidance, training, and mentoring from senior personnel in planning and carrying out activities and assignments.

3. Undertake and/or participate in projects and programs designed to develop professional skills and expertise appropriate to the needs of the organization. 

4. Participate in the planning and implementation of unit projects and initiatives within area of expertise and ability. 

5. As specifically requested by management, conducts research and reporting inclusive of recommendations or alternative proposals for action. 

6. Undertake related studies or enrichment programs as appropriate to the specific objectives of the operating unit. 

7. Perform miscellaneous job-related duties as assigned. 

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement: This position adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies

As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy. Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements. 

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability. 

EEO is The Law

Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity (https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf)

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact number below.

For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org

California Consumer Privacy Act Employees, Contractors, and Applicants Notice

Company :

Highmark Health

Job Description : 

JOB SUMMARY

The job maintains a safe and secure environment for patients, visitors and staff at AHN hospitals and clinics.  The incumbent enforces AHN policies and procedures while patrolling the facilities, grounds and other areas.  Responds to all emergency situations throughout assigned AHN facilities and investigates and manages all security incidents and hazards on premises.  This will include responding to and resolving disputes, removing unwanted, unauthorized or disruptive individuals from AHN property and executing lawful arrests if necessary.  Provides excellent customer service to patients, visitors and staff during all interactions.  

ESSENTIAL RESPONSIBILITIES

• Conduct proactive motor vehicle and foot patrols of AHN property and adjacent areas.
• Respond to all emergency situations throughout AHN hospitals; utilizing de-escalation techniques when required as well as restraining combative or disturbed patients.
• Testify in court and hearings when involved in arrest situations.
• Assist with traffic control when necessary
• Complete reports and incident documentation as required.
• Other duties as assigned.

EDUCATION

Required

• High School Diploma/GED

Substitutions

• None

Preferred

• Bachelor's Degree in Criminology

EXPERIENCE

Required

• 3 - 5 years in Security

Preferred

• None

LICENSES AND CERTIFICATIONS

Required

• PA Act 235 Certification (obtained within 90 days of hire)
• Act 34 Criminal Background Clearance Certificate
• Act 33 Child Abuse Clearance Certificate
• Act 73 FBI Fingerprinting Criminal Background Clearance Certificate
• CPR/AED

Preferred

• None

SKILLS

• Problem Solving & Decision Making
• Security/Safety
• Communication Skills

Language (Other than English)

None 

Travel Required

0%  - 25%

PHYSICAL, MENTAL DEMANDS and WORKING CONDITIONS

Position Type

Office-Based

Teaches / trains others regularly

Does Not Apply

Travel regularly from the office to various work sites or from site-to-site

Does Not Apply

Works primarily out-of-the office selling products/services (sales employees)

Never

Physical work site required 

Yes

Lifting: up to 10 pounds

Constantly

Lifting: 10 to 25 pounds

Occasionally

Lifting: 25 to 50 pounds

Occasionally

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement: This job adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.

As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times.  In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy. 

Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability. 

EEO is The Law

Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity (https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf)

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact number below.

For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org

California Consumer Privacy Act Employees, Contractors, and Applicants Notice

Company :

enGen

Job Description : 

JOB SUMMARY 

This job implements and administers information security policies and procedures as well as develops and maintains information systems used to uphold those security policies.  Performs various investigations into potential and existing security threats.  Enforces security policies and ensure compliance.  Troubleshoots security issues.  Evaluates security risk assessments and presents security information to workforce and management.  Assists workforce with security based questions and problems.

ESSENTIAL RESPONSIBILITIES 

• Perform operational support of information security technology.
• Perform analysis and resolve problems regarding information security.
• Complete project tasks to enable the on time, within budget and scope delivery of information security projects. 
• Present new and existing information security information to workforce and management.
• Assist in incident response procedures.
• Assist Change Management.
• Assist in conducting application risk assessments against Health Insurance Portability and Accountability Act (HIPAA) and Payment Card Industry (PCI).
• Assure compliance to required standards, procedures, guidelines and processes.
• Other duties as assigned or requested.

EDUCATION

Required

• Bachelor’s Degree - Information Security, Information Systems,  Information Assurance, Computer Science or related field

Substitutions 

• 5 years of Information Security, Governance, Risk and/or Compliance, Information Technology or Business Analysis

Preferred

• None

EXPERIENCE

Required 

• 3 - 5 years of experience with Information Security and Systems Analysis                         
• 3 - 5 years of experience with Information Security and/or Information Risk Management and/or Information Technology
• 3 - 5 years of experience with Information Security Governance, Risk and/or Compliance functions and activities           
• 3 - 5 years of experience developing, communicating and presenting Information Security and Risk Management concepts to varying audiences                       
• 3 - 5 years of experience with technologies such as Intrusion Prevention Systems (IPS), firewalls, endpoint protection, web/email filtering, Data Loss Prevention (DLP), digital rights management, encryption, Security Event and Incident Management (SEIM), and virtualization platforms

Preferred

• 5 - 7 years of experience with information security and systems analysis                         
• Experience working within an information security function using the HITRUST Common Security Framework (HITRUST CSF), or the NIST 800-83 cyber security framework      
• Experience supporting SSAE 16 or SOC 2 Security Trust Principle audits                           
• IT/information security risk advisory experience 
• Governance Risk and Compliance (GRC) tool experience such as ARCHER                    
• In-depth understanding of network security architecture, network and networking protocol 

LICENSES AND CERTIFICATIONS

Required

• None

Preferred

• Certified Information Systems Security Professional (CISSP)
• Security+

SKILLS

• Knowledge of HITRUST CSF, NIST 800-83 cyber security framework, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3    
• Knowledge of NIST Risk Assessment methodology
• Familiarity with secure SDLC best practices
• Knowledge of Microsoft Apps and Suites, Windows server, SharePoint, etc.                 
• Strong teamwork and inter-personal skills

LANGUAGE REQUIREMENT (Other than English)  
None

TRAVEL REQUIREMENT

0 %- 25%

PHYSICAL, MENTAL DEMANDS AND WORKING CONDITIONS
 

Position Type

Office-Based

Teaches/Trains others regularly

Occasionally

Travels regularly from the office to various work sites or from site-to-site

Occasionally

Works primarily out-of-the office selling products/services (Sales employees)

Does Not Apply

Physical Work Site Required

Yes

Lifting: up to 10 pounds

Does Not Apply

Lifting: 10 to 25 pounds

Does Not Apply

Lifting: 25 to 50 pounds

Does Not Apply

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Compliance Requirement: This position adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.

As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company’s Handbook of Privacy Policies and Practices and Information Security Policy. Furthermore, it is every employee’s responsibility to comply with the company’s Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements. 

Pay Range Minimum:

$67,500.00

Pay Range Maximum:

$124,800.00

Base pay is determined by a variety of factors including a candidate’s qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations.  The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets.

Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability. 

EEO is The Law

Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity (https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf)

We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact number below.

For accommodation requests, please contact HR Services Online at HRServices@highmarkhealth.org

California Consumer Privacy Act Employees, Contractors, and Applicants Notice

Who are we?

Senior Staff Engineer, Product Software Security

Product Software, Platform Services

Equinix is a global leader in interconnection and data center services, empowering businesses to connect their digital infrastructure securely and reliably. With a presence in more than 50 markets worldwide, Equinix provides cutting-edge solutions that enable companies to accelerate their digital transformation and thrive in today's interconnected world.

As we continue to prioritize the security of our customers' data and infrastructure, we are seeking a talented and driven Software Security Engineer to join our passionate team of experts at Equinix and help us maintain the highest level of security for our platform services that serve all Equinix’s products and customers.

Job Summary

As a Software Security Engineer at Equinix, you will play a pivotal role in enhancing the security posture of our software systems and services. Your expertise will be instrumental in safeguarding critical data and ensuring the uninterrupted operation of our platform services. You will collaborate closely with product and information security teams, as well as platform services’ engineering teams, architects, and other DevSecOps professionals across the organization.

Together, you will implement robust security measures, address potential vulnerabilities identified by InfoSec stakeholders, and promote security best practices throughout the software development lifecycle. This is a technical, hands-on engineering role designed for security specialists familiar with Java/Spring Boot and microservices architecture. Experience with distributed, highly automated environments and a developer’s understanding of security, coupled with a willingness to learn new concepts, are essential for success in this role.

Responsibilities

• Collaborate with internal InfoSec stakeholders to address security requirements and enhance security awareness across the organization

• Collaborate with platform services’ engineering teams to implement security practices into the software development process, ensuring secure coding standards, design principles, and threat mitigation strategies are followed

• Monitor and analyze security events and incidents, providing timely resolution and implementing preventive measures to protect against future threats

• Adhere to the defined SLOs to address the security vulnerabilities

• Conduct security training and awareness programs for developers and other team members to promote a security-conscious culture within the organization

• Contribute to the development and maintenance of security policies, procedures, and guidelines that align with industry best practices and regulatory requirements

• Conduct comprehensive security assessments, including code reviews, penetration testing, SAST/DAST scanning, and threat modeling, to identify and address potential security risks in the services that the platform team owns

• Manage configurations of security tools for platform services in alignment with other products and InfoSec

• Adopt and improve cloud and infrastructure security controls

• Assess the security of authentication, authorization, and encryption mechanisms to safeguard sensitive data and ensure secure access control.

• Actively research and keep abreast of the latest security threats, vulnerabilities, and industry best practices, and apply this knowledge to continuously improve our security strategies

Qualifications

• Minimum 7 years of professional engineering experience in Software Security , or a related field

• Minimum 5+ years of full-stack expertise in application design & development with Java technologies, with knowledge of Spring, JPA/Hibernate, Message Queues & Workflow Engines in a microservices architecture

• Strong hands-on ability to fixing vulnerable libraries/packages in Java, Spring Boot, ReactJS, NodeJS, Go, Kotlin, Message Queue frameworks or workflow engines

• Strong understanding of software security principles, secure coding practices, and common security vulnerabilities (OWASP Top 10, CWE, etc.)

• Proven work experience as a Software Security Engineer or similar role with a focus on securing large-scale, distributed software systems including secure configuration of AWS, docker, K8s, service mesh, and NACL configuration management

• Hands-on experience with security tools and frameworks for code analysis, vulnerability scanning, and penetration testing in software & network systems

• Hands-on experience with cloud security best practices and technologies using AWS

• Solid knowledge of network protocols, web application security, and data protection mechanisms

• Understanding of compliance frameworks like ISO, GDPR and SOC

• Demonstrated ability to collaborate effectively with cross-functional teams and communicate complex security issues to both technical and non-technical stakeholders

• Strong analytical and problem-solving skills with a keen eye for detail

• Passion for staying up-to-date with the latest security trends and technologies to proactively address emerging threats

• Apply now and be a key player in shaping the future of the security of Equinix’s platform services

Equinix is committed to ensuring that our employment process is open to all individuals, including those with a disability. If you are a qualified candidate and need assistance or an accommodation, please let us know by completing this form.

Equinix is an Equal Employment Opportunity and, in the U.S., an Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to unlawful consideration of race, color, religion, creed, national or ethnic origin, ancestry, place of birth, citizenship, sex, pregnancy / childbirth or related medical conditions, sexual orientation, gender identity or expression, marital or domestic partnership status, age, veteran or military status, physical or mental disability, medical condition, genetic information, political / organizational affiliation, status as a victim or family member of a victim of crime or abuse, or any other status protected by applicable law.

03/30/2024

Address:

100 King Street West

Technology

MUST HAVE: Experience with SAST/DAST tools and relevant experience performing Application Security Testing; working as security consultant with application teams.

About the role:

The Application Security Testing Engineer reports to the Senior Manager and assists with the security testing activities for BMO based applications. The role will be responsible for the execution and coordination of Static and Dynamic Application Security Testing (SAST/DAST), provides information security consulting services (SAST/DAST Scanning) for BMO overall and businesses/groups. Liaises with stakeholders to understand problems and opportunities and enables BMO to meet its goals by understanding business vision, objectives and KPIs. Participates in the execution of information security strategy.

What will you do:

• Subject Matter Expertise - Provides technical leadership to business areas as a Security Testing subject matter expert. Assists with efforts on the execution of security testing operations to include pre-engagement (scoping), engagement (testing) and post-engagement activities (reporting).
• Secure Testing - Assists in delivery of security testing projects according to a structured process, to include writing test reports. This may include oversight and/or execution of the configuration and deployment of security testing software and application of results to security analysis.
• Information Security Risk Management - Works with leadership to mature security testing team capabilities including reporting and remediation guidance in alignment with local and global regulatory requirements. Identifies security gaps and deficiencies by conducting risk assessments; able to recommend corrective action of identified vulnerabilities and weaknesses. Assists with the execution of planning, testing, tracking, and advises on necessary risk acceptance for identified security risks. 
• Secure Application Development - Assists with the execution of highly technical/analytical security assessments of custom web applications, mid-tier application services, backend mainframe applications and databases, including manual, custom and industry known attack methods using a risk-based intelligence-led methodology. Identifies potential misuse scenarios. Advises on secure development practices.

What you need to succeed:

• Typically between 5 - 7 years of relevant experience and a post-secondary degree in Computer Science or Information Systems or a related field of study or an equivalent combination of education and experience.
• Experience in testing web applications, APIs, mobile applications to identify vulnerabilities and weaknesses.
• Hands-on experience with dynamic application security (DAST) tools such as Burp Suite, OWASP ZAP, etc. Hands-on experience with static source code analysis (SAST) tools.
• Knowledge of coding languages (e.g. C#, JAVA, JavaScript, TypeScript, Python etc.) and can code with little oversight
• Knowledge of different rapid development processes, e.g. Waterfall, Agile, etc.
• Knowledge of coding vulnerabilities, frameworks, patching processes, Information Security risk and industry best practices, defense concepts, risk-based assessment approach
• Knowledge of OWASP Top 10, and the OWASP Testing Guide or other secure coding frameworks, NIST Cyber Security Framework (CSF)
• Understands the principles of secure coding techniques and secure code reviews, code scanning software and vulnerability code scanning processes, network protocols and connectivity.
• Industry certification is an asset - CISSP, CISSLP, CCSK, GIAC etc.
• Experience working in an Agile development environment, and ability to work effectively with cross-functional teams.

$81,600.00 - $151,200.00

Salaried

The above represents BMO Financial Group’s pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.

BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

We’re here to help

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en.

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.

Salary: £128,966 to £149,999 per annum
Location: Location agnostic, with regular access to a CMA office
Contract: Permanent
Hours: Full time / Part time / Flexible

This is a unique and exciting opportunity to join the senior leadership of the Legal Service of one of the world’s top competition authorities.

The CMA has a wide and growing range of powers, which it uses to undertake a wide variety of cutting edge, high profile and complex work, spanning merger and market inquiries, competition and consumer law enforcement, subsidy advice and internal market advice. If you are motivated by a dynamic and challenging environment where you will be a highly influential senior leader shaping the CMA’s essential work in the public interest, playing a pivotal role in the leadership and management of CMA’s highly talented Legal Service comprising over 150 lawyers, then this could be the ideal role for you.

As a CMA Senior Legal Director, you will work closely with the CMA’s General Counsel and Deputy General Counsel, and hold a pivotal position in fulfilling the CMA's mission. Your leadership and vision will guide legal teams, shape CMA strategy, and ensure the provision of top-tier legal advice and thorough analysis across all aspects of the CMA's casework. The legal teams, under the guidance of Senior Legal Directors, operate in close collaboration with project teams and decision-makers from the inception of an investigation to the final decisions and any ensuing litigation, fostering an integrated approach throughout the process.

We are recruiting two Senior Legal Directors to join this team as senior competition lawyers with established track records of delivering complex and strategic legal advice, a strong understanding of the policy challenges and opportunities facing the CMA and significant experience of leading and motivating professional teams. On appointment, you can expect to have a leading role, spearheading the provision of senior-level and strategic legal advice and overseeing balanced legal risk management across one or more CMA directorates, such as Mergers and Markets, Competition Enforcement, Consumer Enforcement, the Office of the Internal Market, Subsidy Advice, and/or the Digital Markets Unit.

It may also be possible to assume senior leadership duties for overseeing the CMA's Policy & International Directorate. This division offers cohesive policy and international assistance across the CMA's competition and consumer sectors, entailing engagement with vital UK and international stakeholders and counterparts.

To find out more about these opportunities and about working for the CMA, please click on the APPLY button.

Closing date for completed applications: 15 April 2024.

The CMA is an accredited Disability Confident Employer and a Stonewall Diversity Champion. As an equal opportunities employer, we welcome suitably qualified applicants from all backgrounds and recruit on merit on the basis of fair and open competition, as outlined in the Civil Service Commission's Recruitment Principles.

Job Family:

IT Cyber Security (India)

Travel Required:

Up to 10%

Clearance Required:

None

What You Will Do:

Our Security Information Protection Technical Analyst - Amazon Web Services (AWS) is a member of a service team with upwards of four (4) personnel within the Information Security Operations group that are focused on data loss prevention (DLP), data aggregation/sharing monitoring, sensitive information management, cryptographic services, and secure file transfer services. Effectively supports and executes multiple or more complex IT Security Information Protection projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse Information Protection security systems, maintaining, and protecting Guidehouse and Client data within AWS to the NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, and HITRUST standards, and managing Guidehouse and client information securely through all means of electronic transfer. Reports directly to the Security Information Protection Manager.

Job Function:

• Understands and supports the IT Security Information Protection initiatives that support overall IT Security Operations goals and objectives
• Demonstrates effective written and verbal communication skills; delivered in a professional, respectful, and timely manner
• Manages AWS security services such as Identity and Access Management (IAM), Amazon Cognito, AWS Key Management Service (KMS), and AWS Shield to safeguard against unauthorized access and threats
• Manages AWS specialized data classifications and data protection mechanisms
• Produces high quality work product leveraging existing templates, tools, and methodologies that align to applicable professional standards and best practices
• Clearly and concisely conveys more complex messages to IT Security Information Protection team; effectively presenting facts and recommendations
• Designs and configures monitoring and alerts using AWS Security Hub in accordance with Guidehouse Policies, Standards, and Procedures
• Assists with the development of incident response strategies and efforts to address security incidents and breaches, minimizing impact on business operations
• Assists in conducting risk assessments and security audits to identify vulnerabilities and recommending mitigations to enhance security posture
• Proactively asks questions, validates what is heard, and shares relevant informed point of view in meetings and client discussions
• Demonstrates the ability to sense and respond to verbal and non-verbal cues and adapt messages and approach based on the audience
• Demonstrates honest and professional behavior in all interactions
• Identifies risk issues (e.g., technical, client service, engagement, team, internal and external) and escalate them to IT Security supervisors and senior leaders
• Helps with issue resolution, risk mitigation and contingency planning in alignment with IT Security Information Protection leader guidance and IT Security risk mitigation plans
• Uses critical thinking, analysis, expertise, and collaboration to develop technical solutions and solve problems
• Thinks innovatively to proactively identify opportunities for system and process enhancements and make recommendations to IT Security Information Protection leadership
• Works in unstructured or unclear circumstances
• Mentors and/or trains IT Security Information Protection team and/or IT Security, working with supervisor/leaders to position them for success, serving as a resource to peers
• Promotes the development of new technical knowledge and skills within IT Security Incident Management team
• Conducts quality assurance reviews using established or establishing KPIs and self-audit work before showing work to more senior staff and/or clients, learning from mistakes
• Takes ownership of my tasks and the tasks I delegate, resolving issues and escalating as appropriate
• Presents themselves and the company in a manner that always promotes a positive lasting impression of high quality, promptness, and professional service
• Draws from experience to propose solutions to meet needs, focusing the team accordingly
• Builds a high level of trust with stakeholders by meeting and anticipating needs and expectations
• Demonstrates an advanced understanding within AWS and ability to apply technical or specialized knowledge specific to role, industry, business line, and/or functional area within AWS
• Stays current on AWS events, trends, and issues in the news relevant to IT Security
• Ensures prescribed IT Security policies, procedures, and standards are followed while identifying opportunities for system and process enhancements
• Communicates with parties within and outside of IT Security; May have responsibility for communicating with parties external to the organization (e.g., customers, vendors, etc.)
• Works independently on mid to large or complex projects and assignments, with minimal guidance and to influence parties within and outside the job function at an operational level regarding policies, best practices, and procedures
• Responsible for developing technical AWS solutions that may require collaboration with internal expertise and deep analysis of the technical system
• Problems and issues faced are difficult and may require understanding of broader set of issues. Problems typically involve consideration of multiple issues, job areas or specialties; Problems are typically solved through drawing from prior AWS experience and analysis of issues.
• Manages projects while delegating work to lower-level employees
• Ability to participate in cross- department discussions to influence job area processes
• Exhibits practical knowledge of project management
• Advanced understanding and ability to apply standards, principles, theories, and technical concepts obtained through advanced education combined with experience

What You Will Need:

• Citizenship: India
• Shall possess following certifications:
  • AWS Certified Cloud Practitioner Foundational
  • AWS Certified Security Specialty
• Must be able to work 10am – 7pm IST
• Experience working with Executive Leadership
• Experience supporting Microsoft Windows 10 operating system

• Working knowledge of NIST SP 800-171 and NIST SP 800-53
• Experience managing multi-geographic cloud resources while implementing controls compliant with NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Experience documenting processes and procedures to comply with required NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Significant demonstrated experience working with cloud first solutions that are implemented globally
• Extensive experience with AWS environments, network security, and information security principles
• Experience configuring and managing AWS security services such as Identity and Access Management (IAM), Amazon Cognito, AWS Key Management Service (KMS), and AWS Shield to safeguard against unauthorized access and threats

• Working knowledge of the MITRE ATT&CK framework
• Experience working with Security Operation Centers, physically or virtually
• Experience executing processes and procedures in compliance with required NIST and IT standards
• Extensive experience with AWS Security Hub
• Experience with AWS Control Tower
• Experience using a SIEM, such as Splunk or Sentinel to do analysis of security anomalies and events
• Experience creating writing queries with Search Processing Language (SPL) or Kusto Query Language (KQL)
• Working knowledge of broad web application environment standards, implementation strategies, and best business practices
• Significant experience with the operational employment of data loss protection (DLP) and sensitive information management within AWS

• Experience in one or more of the following cryptographic capabilities:
  • S/MIME generation
  • Code signing certificates
  • HSM cryptographic key generation
  • Key encryption keys
  • Key material supersession procedures
  • NIST SP 800-88 cryptographic erasure procedures
  • Cryptographic Key Management

• Ability to work on many concurrent, and changing priorities
• Action-oriented and able to manage and meet aggressive timelines and deadlines.
• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Bachelor’s in computer-related OR cyber field with 4-6 years of experience; OR Master's with 6-8 years of experience (Relevant experience may be substituted for formal education or advanced degree)
• This position is open to candidates in India only, preference is within the Chennai or Trivandrum areas
• Shall possess one OR more of the following certifications OR equivalent:
  • AWS Certified Solutions Architect Associate
  • AWS Certified Solutions Architect Professional
  • AWS Certified DevOps Engineer Professional
  • AWS SysOps Administrator Associate
  • AWS Certified Data Engineer
  • AWS Machine Learning Specialty
  • (ISC)2 Certified Information Security Professional (CISSP)
  • ISACA Certified Information Security Manager (CISM)
  • SANs GIAC certification (e.g., GPEN or GW APT)
  • Offensive-Security Certified Professional (OSCP)
  • EC-Council Certified Ethical Hacker (CEH)
  • Microsoft Security (Operations Analyst/Engineer/Administrator) Associate
  • Microsoft Information Protection Administrator Associate
  • CompTIA Security+ (Plus)
• Experience working with firewalls/web application firewalls, secure file transfer systems, implementing changes, and monitoring status
• Experience with Threat Intelligence
• Experience conducting Incident Response and Security Investigations
• Experience working with secure file transfer systems, such as: Kiteworks, IBM Aspera, Globalscape EFT, WinSCP, or other Secure File Transfer tools
• Experience working with file share monitoring systems, such as: Varonis, SolarWinds, Atera, Netwrix, ManageEngine, or other file share monitoring tools
• Working knowledge of Active Directory, Exchange, SharePoint, and Teams
• Demonstrated ability to learn and document new technologies/solutions
• Experience with ServiceNow is a plus
• Experience working in an ITIL environment
• Experience with Kiteworks
• Experience with Varonis

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services.  Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results.  We are driven by our passion for success and we are proud to deliver best-in-class payment technology and software solutions.  Join our dynamic team and make your mark on the payments technology landscape of tomorrow. 

Summary of This Role

Develops, configures, documents, and maintains information security solutions.  Installs and configures web proxies, SIEMs, web application firewalls, intrusion detection systems, endpoint monitoring software, and vulnerability scanning systems.  Monitors and responds to alerts.  Ensures that threats and vulnerabilities to the organization’s business systems and applications (both in-house and cloud-based) are minimized.  Evaluates web application security controls and performs validation testing as needed.  Evaluates information security configurations when intrusions have occurred and monitors the effectiveness of implemented changes.  Monitors overall compliance with security standards and conducts periodic security reviews.

What Part Will You Play?

• Assists others delivering secure solutions and/or secure remediation solutions for moderately complex projects to the enterprise with good technical applications included.
• Supports others installing tools to specifically secure each level within security frame work for moderate projects.
• Researches and develops skills regarding new security technologies and trends while also helping to validate corporate conformance to industry standards utilizing set analysis criteria.
• Provides support for investigating intrusion incidents, conduct forensic investigations for moderate projects and helps others who provide incident responses.

What Are We Looking For in This Role?

Minimum Qualifications

• Bachelor's Degree
• Relevant Experience or Degree in: in Information Security or Computer Science preferred. Other majors will be considered.
• Typically Minimum 2 Years Relevant Exp
• Experience within Information Security or Information Technology. Experience managing projects. Additional 4 years related experience may be considered in lieu of a degree.
• Must be a US Citizen eligible to complete a Public Trust Background Check

Preferred Qualifications

• Cloud security experience
• DevSecOps
• Scripting knowledge such as Python and PowerShell
• One or more of the following-CISSP, CEH, CISA, CISM, eWPTX, OSWE, CRISC, CGEIT

What Are Our Desired Skills and Capabilities?

• Skills / Knowledge - Developing professional expertise, applies company policies and procedures to resolve a variety of issues.
• Job Complexity - Works on problems of moderate scope where analysis of situations or data requires a review of a variety of factors. Exercises judgment within defined procedures and practices to determine appropriate action. Builds productive internal/external working relationships.
• Supervision - Normally receives general instructions on routine work, detailed instructions on new projects or assignments.
• Network Engineering - Develops an understanding of TCP/IP network connectivity, subnet segmentation, security zones, secure ports/protocols, network authentication/authorization, security tools and their applicability (WAF, IPS, Sandbox, etc.).
• Vulnerability testing, risk analyses and security assessments - Knowledge of vulnerability testing, risk analyses and security assessments
• Technical industry acumen - Knowledge of Industry regulatory audit requirements and solutions and Authentication, authorization, and encryption solutions

This position is eligible to be considered for remote hiring

#LI-Remote

Global Payments Inc. is an equal opportunity employer.

Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. Those applicants requiring reasonable accommodation to the application and/or interview process should notify a representative of the Human Resources Department.

Centerstone is among the nation’s leading nonprofit behavioral health systems with thousands of employees dedicated to delivering care that changes people’s lives. A dynamic, well-established organization, we offer rewarding opportunities to serve all ages in a variety of settings. Come talk to us about joining the Centerstone team!

Job Description:

Time Type:

Part time

Delivering care that changes people's lives starts with our employees. Below are just some of the great benefits Centerstone employees enjoy:

• Medical, dental, and vision health coverage
• Flexible Spending and Health Savings Accounts
• 403b retirement plan with company match
• Paid time off and ten paid holidays
• AD&D Insurance, Life Insurance, and Long Term Disability (company paid)
• Diversity, Equity, and Inclusion employee resource groups
• Continuing education opportunities
• Employee Assistance Program

Centerstone is an equal opportunity employer. Employment at Centerstone is based solely on a person's merit and qualifications directly related to professional competence. Centerstone does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law.

At Centerstone, we use our values as a guide for what we do. Respect, Expertise, Integrity and Empowerment are at the heart of every interaction at Centerstone, and particularly rooted in our beliefs toward diversity and inclusion.

Our approach to diversity is simple—it’s about embracing everyone. Together, we continue to develop an inclusive culture that encourages, supports and celebrates the diverse voices and experiences of our employees. It powers our innovation and connects us closer to each other, to our clients and the communities we serve. We strive to create a workplace that reflects the growing world around us, and where everyone feels empowered, safe and welcomed.

Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers.

We are an Equal Opportunity Employer. We take pride in the diversity of our team and seek diversity in our applicants.