Total 720 command center analyst job vacancies in Legal / Public / Security category in Malaysia

We are seeking a highly motivated Security Officer (HQCC) to join our team. The ideal candidate will be passionate about technology, have excellent problem-solving skills, and be able to communicate technical information to non-technical users effectively.

This unique opportunity will allow the candidate to be exposed to the workings of a growing security company as well as working with an experienced team!

What will you do:

• Monitoring and Coordination: Constantly monitor multiple systems, including surveillance cameras, alarms, radio communications, and computer networks, to ensure the safety and security of personnel, assets, and facilities.
• Provide 1st level desktop, network and application support.
• Emergency Response: Respond promptly to emergencies, incidents, or alarms by assessing the situation, dispatching appropriate personnel or resources, and coordinating response efforts with relevant stakeholders such as emergency services, law enforcement, and medical personnel.
• Communication: Maintain clear and concise communication channels with field personnel, colleagues, and external agencies using various communication devices and platforms, including two-way radios, telephones, and computer-aided dispatch (CAD) systems.
• Support and maintain physical security systems such as CCTV, door access etc.
• Maintain and update technical documentation.
• Problem Solving: Quickly analyse complex situations, make critical decisions under pressure, and implement effective solutions to resolve issues and minimize disruptions to operations or services.
• Assist with Asset Tracking and Asset Management.
• Participate in ad-hoc projects and assignments as needed.

Requirements:

• Possess or currently studying for a diploma/degree in Information Technology field or equivalent.
• Basic knowledge of operating systems, software, and hardware, including Windows and Mac OS.
• Excellent problem-solving skills and attention to detail.
• Strong verbal and written communication skills.
• Ability to explain technical information to non-technical users.
• Ability to work independently and in a team environment.
• Attention to Detail: Strong attention to detail and accuracy in recording information, following protocols, and adhering to standard operating procedures are necessary to ensure the reliability and integrity of data and communication processes.
• · Overall, a Command Centre Controller plays a pivotal role in maintaining safety, security, and efficiency within an organization by monitoring, coordinating, and responding to various events and emergencies in real-time.

Purpose and Job Summary

ORIX USA is seeking a Cyber Security Analyst to join our growing cyber security team.  You will analyze, assess, plan, and enact security measures to help protect the company from security breaches and attacks on its data, computer networks and systems.  You will reduce our attack surface by employing the appropriate technologies and processes to prevent, detect and manage cyber threats.  The Cyber Security Analyst will identify, monitor, assess, and counter the threat posed by cyber actors against our information systems. You will provide strategic assessment, tactical analysis and recommendations for risk reduction operations.

Essential Duties & Responsibilities

• Ensure a world-class cyber defense program by working closely with other technical, incident management, legal, compliance, and cyber personnel to develop a deeper understanding of the intent, objectives, and activity of cyber threat actors

• Implement cyber security processes and procedures to ensure cyber security threats are mitigated

• Participate as a core member of the incident response team

• Appropriately inform and advise management on incidents and incident prevention

• Develop policies and/or advocates for changes in policy that support organizational cyberspace initiatives or required changes/enhancements

• Document processes related to cyber security

• Perform risk assessments to identify risk, recommend and implement risk reduction measures

• Provide leadership, training, and mentoring to junior team members

• Work collaboratively with cyber, technical teams, and business functions

• Lead implementation efforts for various security technology improvements and initiatives

• Static and dynamic threat analysis

• Applies knowledge of data, information, processes, organizational interactions, skills, and analytical expertise, as well as systems, networks, and information exchange capabilities to manage acquisition programs

• Lead and maintain data governance, data protection, and data lifecycle

• Executes duties governing hardware, software, and information system acquisition programs and other program management policies

• Some travel required

Education, Skills, & Experience

• Bachelor of Science in Computer Science, Engineering, Cyber-Security, or Information Security is preferred. Five (5) years of cyber work experience may be substituted in lieu of a Bachelor’s Degree.

• 5+ Years of Information Security/Cyber Security experience within enterprise-level organizations.

• Excellent organizational, communication, and interpersonal skills

• Customer service and quality focused with proven process improvement skills

• Strong understanding of cyber threat landscape, vulnerability management, and NIST CSF

• Innovative problem solving, research, and analytical skills

• Ability to multi-task and prioritize work effectively

• Strong understanding of data security, data classification, and data loss prevention

• Highly motivated self-starter

• Strong sense of ownership and driven to manage tasks to completion

• Related certifications: Security+, Network+, CEH, CISM, or CISSP a plus

                                                                                                                              

ORIX USA is an equal opportunity employer, providing equal employment opportunities (EEO), and is committed to diversifying its workforce. All employees and applicants for employment will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, sexual orientation, gender identity or expression, pregnancy, protected veteran status or other status protected by law. This policy applies to all terms and conditions of employment.

At PGE, our work involves dreaming about, planning for, and realizing a smarter, cleaner, more enduring Oregon neighborhood. Its core to our DNA and we haven’t stopped since we started in 1888. We energize lives, strengthen communities and drive advancements in energy that promote social, economic and environmental progress. We’re always on the lookout for people passionate about leading and being a part of teams that are advancing innovative clean energy solutions that are also affordable and accessible to all.

Compensation Range:

$125,790.00 - $233,610.00

In addition, this position is eligible for a performance-based incentive bonus. Actual total compensation is commensurate with experience, skills, and education

PGE believes in rewarding dedicated performance. We provide a total rewards package that is designed to reward your contributions to the company, and, at the same time, support your well-being and professional development, both now and into the future. To find out more, click here.

Join us today and power your potential!

Assisting with storms or other Company emergencies is a part of all positions at Portland General Electric.

PGE is committed to diversity and inclusion in the workplace and is an equal opportunity employer. PGE will not discriminate against any employee or applicant for employment based on race, color, national origin, gender, gender identity, sexual orientation, age, religion, disability, protected veteran status, or other characteristics protected by law.

PGE does not discriminate on the basis of disability. We recognize individuals have a variety of abilities to offer and we believe there is much to value and celebrate by incorporating different abilities into the work we do. One very important way we live this out is in our application and interview process. We work hard to support individuals who may need an accommodation to fully participate in these processes. If you feel you may need an accommodation, or would like to request one, please notify the Talent Acquisition Specialist (Recruiter) associated with the job posting. You may also make this request by contacting talentacquisition@pgn.com or by calling 503-464-7250. The Recruiter will provide information and next steps for the accommodation process.  Our Diversity, Equity & Inclusion (DEI) team is also available for support.  You can contact them at dei@pgn.com.

To be considered for this position, please complete the following employment application by the posting close date.  Posting closes at midnight (Pacific Time) on the closing date below. If no date is listed, job is open until filled.

My client, an Asian bank is looking to hire an AVP, Senior SOC Analyst to be part of their IT team. In this dynamic role, you'll lead the charge in actively hunting and analyzing potential threats, leveraging your expertise to support SOC investigations and prevent attacks before they occur.

As a Senior SOC Analyst (Tier-2) and dedicated threat hunter, you'll be actively searching for vulnerabilities and identifying stealthy attackers. Your duties will include conducting thorough vulnerability assessments and managing the results. Moreover, you'll be responsible for addressing significant incidents escalated by Security Analysts (Tier-1), evaluating their impact, determining the affected systems' scope, and gathering data for further analysis.

It's a full time and a permanent position, office is located at Changi Business Park (East)

Role

Key Responsibilities:

• Lead the Hunt: Spearhead proactive threat detection & analysis, sifting through data (alerts, logs, etc.) and conducting reverse engineering when needed.
• Deep Dive & Solve: Dive deep into security incidents, uncovering trends and root causes. Create and maintain processes to ensure future preparedness.
• Stay Ahead of the Curve: Conduct in-depth research on threats, vulnerabilities, and attack vectors. Collaborate with diverse teams to refine prevention and detection methods.
• The Go-To Guru: Become the trusted expert for SOC-related topics and guide incident response.
• Process Pro: Develop and document SOC procedures based on industry best practices and internal requirements.
• Continuous Improvement Champion: Lead or support projects to enhance SOC effectiveness, keeping us ahead of ever-evolving threats.
• Collaborate & Conquer: Work seamlessly with incident response, threat intelligence, and the overall security strategy teams.

What You Bring:

• Bachelor's in IT (or equivalent) and 5+ years of experience, including 3 leading a SOC team.
• Deep understanding of networking, major internet protocols, and security concepts.
• 3+ years of experience in cyber incident response and/or enterprise SOC operations.
• 2+ years using standard security tools (SIEM, EDR, etc.).
• 2+ years of operational experience with Splunk or similar platforms.
• Expert investigative skills for uncovering incident impact and root cause.
• Strong foundation in security threats and countermeasures.
• Analytical, problem-solving, and multitasking skills for a fast-paced environment.
• Hands-on experience with SIEM, intrusion detection, and application layer protocols.
• Security experience, especially in incident detection and threat intelligence.
• Bonus points for expertise in various operating systems, web technologies, and professional security certifications.
• Experience in multiple IT/Information Security domains like IAM, IT infrastructure, etc.
• Meticulous, team-oriented, flexible, proactive, and positive attitude.
• Strong sense of responsibility, initiative, and communication skills.

We regret to inform that only shortlisted candidates would be notified.
Chiam Lee Ping Dayna
Consultant
Reg. No: R1764404
Stellar- Link Partners Pte Ltd (EA License: 21S0698)

Role: Penetration Tester / Pen Tester 

Location: Bangalore

Expeirence Range: 6-8 Years 

Roles & Responsibilities:

As a Pen Tester/ Information Security Consultant at Resillion, your key responsibilities include:

1. Performing manual penetration tests on IT Systems, including applications and infrastructure, by defining test procedures, executing tests, creating test reports, and following up on reported weaknesses.
2. Assessing the security status of individual applications and the infrastructure landscape.
3. Developing automatic test environments and automatic tests as needed.
4. Providing support to other Information Security functions such as Vulnerability Management (e.g., assessing vulnerabilities) and Incident Management (in a consulting capacity).
5. Delivering various engagements for customers in and the UK, contributing as a technical point of contact in meetings, advising on project scoping, and conducting peer reviews of consultants' output.
6. Representing Resillion at trade shows and events, including giving presentations based on experience.

 

Security Operation Team supports Security Systems and processes to secure our clients IT Application systems and infrastructure .The team is responsible for Security system administration,security processes .

• You should have experience managing following security tools such as Email Security Solutions, Firewalls, Privileged Access Management (PAM), Anti-virus, HIPS/HIDS and Endpoint Detection and Response (EDR), and Multi-factor Authentication, will be helpful in your role and learn the rest on the job.
• Experience with deployment of cybersecurity solutions, including Firewalls, Email Security, Internet content filtering and endpoint protection solutions.
• Articulate systems and methodologies as well as reply to security-related events and support in remediation efforts
• Liaise with other support teams, or product teams as required to resolve requests/issues in a timely manner
• Conduct IT security incident investigation on the IT environment.
• Develop and support emergency procedures and oversee incident responses as well as the investigation of security breaches and assist with disciplinary and legal matters associated with such breaches as required.
• Support the development and implementation of security standards, guidelines and processes to ensure the ongoing maintenance of logical security

To apply please click the Apply button or send us your updated profile to recruit@percept-solutions.com

EA Licence No.:18S9405 / EA Reg. No.:R1330864

Percept Solutions is undergoing a growth phase and are on the lookout for talent. Applicants are encouraged to follow Percept Solutions on LinkedIn @ https://www.linkedin.com/company/percept-solutions/ to stay up to date on our upcoming roles and events.

Job Responsibilities:

1. Promote the construction and optimization of the security and security operation center system, including but not limited to log collection, analysis, alarms, SOAR, and BAS;

2. Responsible for tracking and analyzing security issues and promoting the completion of closed-loop processing of security incidents;

3. Enrich and optimize existing alarm scenarios and rules to improve alarm quality;

4. Participate in daily emergency response to security incidents and security system maintenance;

5. Participate in building security testing capabilities for office networks, production networks, and cloud environments;

6. Participate in the company’s office security offensive and defensive confrontation to improve office security capabilities;

job requirements:

1. More than 10 years of security-related work experience, and those who have engaged in Web3-related work are preferred;

2. Be familiar with vulnerability management, writing and maintaining security baseline detection rules, understand the principles of common vulnerabilities, and have the ability to write POC and EXP codes for vulnerabilities;

3. Familiar with at least one language such as Python and Java, and have API system integration development capabilities;

4. Familiar with big data development tools such as SQL, ELK, Kafka, etc., have log analysis and processing capabilities, and can be combined with security risk data;

5. Be familiar with the threat detection operation ideas in office networks, production networks and other environments, and can set up systematic detection solutions according to scenarios;

6. Familiar with the configuration management and rule writing of common security products such as Sysmon, Osquery, and Wazuh; familiar with the main tactics and techniques of the ATT&CK attack matrix and able to convert them into detection rules;

7. Have experience in intrusion detection and emergency response, and be able to quickly locate, block, and defend security incidents;

8. Have the ability to discover vulnerabilities and be able to complete the entire penetration testing process independently.

Bonus Point:

1. Responsible for the complete R&D cycle of security defense products

2. Have in-depth understanding of offense and defense, and experience in actual combat with APT

3. Ability to analyze the behavior of malware samples in Windows/macOS/Linux environments

4.Able to communicate in different Language with teams based in Europe or China

Job Description

The ideal barista is motivated, outgoing and committed to providing outstanding customer service every day.

A day in the life…

• Prepare and serve beverages and food items consistently by adhering to all recipe standards, while also delivering exceptional customer service
• Be knowledgeable and enthusiastic about coffee, tea and drink preparation and products
• Assist with setup, cleanup, stock work and handling of food items

You own this if you have…

• The ability to communicate clearly and professionally with customers and coworkers
• Thrived in a fast-paced environment and embraced working a flexible schedule
• A food handler’s card where required by local and state regulations
• 1+ year experience in food service/hospitality is preferred

We’ve got you covered…

Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:

• Medical/Vision, Dental, Retirement and Paid Time Away
• Life Insurance and Disability
• Merchandise Discount and EAP Resources

A few more important points...

The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job.

Nordstrom will consider qualified applicants with criminal histories in a manner consistent with all legal requirements.

Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com. 

© 2022 Nordstrom, Inc  

Current Nordstrom employees: To apply, log into Workday, click the Careers button and then click Find Jobs.

Pay Range Details

The pay range(s) below are provided in compliance with state specific laws. Pay ranges may be different in other locations.

California: $20.25-$21.05 hourly

Role and Responsibilities

1. Analysing documents (e.g., design, requirements, architecture, diagrams, flowcharts) to obtain an understanding of the requirements.

2. Identifying the required test scenarios, test case preparation, test data preparation and document traceability matrix to ensure sufficient test coverage.

3. Execute test cases and test plans to support the quality assurance activities throughout the software lifecycle.

4. Defect reporting and verifying fixes.

5. Participate in continuous improvement in quality of test process.

6. Participate in peer reviews of test plans and cases to ensure consistency and adequate coverage.

7. Coordinate large scale testing projects and improve testing efficieny for programme roll out

Requirements / Qualifications

- At least 5-6 years experience in testing IT systems

- must have project management skill.

- In-depth knowledge and experience in Test Plan, Test Strategy, Test Estimation and Test Methodologies

- Experiences in Load Testing and Performance Testing are required.

- Strong written and verbal communication skills.

- able to manage stakeholders, chair meeting and carry out presentation.

- fast learner, able to multi-task, prioritize tasks and quickly adjust in a rapidly changing environment.

- Experience in Healthcare domain and Test Automation is an advantage

Job Description and Requirements

Information Security Assurance Administrators strengthen the organization's information security posture through the construction, socialization and performance measurement of policies and procedures based on best practices, adopted frameworks, and risk assessment activities. 

Essential Functions and Responsibilities:

• Contribute to the strategic and tactical initiatives involving activities associated with managing IT Risk.
• Assist with auditing systems, processes and users to ensure compliance with the organization's information security policies and procedures.
• Assist in the creation and analysis of information security reports on the performance of controls across the enterprise.
• Assist with documenting an organization’s information security requirements in a business context and participate in high-level discussions to identify and respond to business risks.
• Assist with security reviews with stakeholders throughout the organization, identifying gaps and developing risk mitigation plans.
• Provides ongoing support of an effective disaster recovery/incident response program. Works with management to ensure that disaster recovery/incident response plans drive proper strategy and procedures.
• Assist with the development and execution of testing processes utilized to validate the disaster recovery/incident response plans. Schedule and lead all tabletop exercises.  Develop and understand all testing necessary for a successful execution.
• Works with the IT staff to ensure that disaster/incident response solutions are adequate, in place, maintained, and tested as part of the regular operational life cycle.
• Assist with the development and deployment of training documentation and communication of incident procedures to the organization.
• Assist with vendor risk assessments.
• With guidance, produce deliverables, specifically process flows, procedure documentation, writing specialized assessment reports, related to process, tools, and metrics and communication activities.
• All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice).

Requirements:

• High School Diploma or GED. Bachelor’s degree in information technology preferred
• Minimum of 3 years’ experience in IT Operations, Security, Risk, and/or Audit
• Technical Project Management and/or Business Analysis experience desired
• Understanding of technical concepts including system, application and network functions and design
• Understanding of financial institution governance and regulations including SSAE16/18, FFIEC, GLBA and NCUA
• Must have high level of communications skills to communicate with all levels of management
• Experience supporting technical projects with technical and non-technical participants
• Experience directly supporting an organization's information security program through development and implementation of policies, standards and procedures

Skills and/or Certifications/Licensing

• Strong oral/written communication, organization, time management and interpersonal skills
• Highly proficient with Microsoft Office software
• Highly self-motivated, able to multi-task and manage deadlines well
• Security certificates, CISA other IT governance related certifications preferred
• Knowledge of regulations and best practices for information security including guidance published by NIST, FFIEC, and CIS

All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.

Let's Write Africa's Story Together!

Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.

Job Description

The Information Security Analyst (ISA) will provide information security risk support and cybersecurity expertise to the business segments. The support will take the form of operational risk analysis and assessments through the demand management and request tracking tools, consultancy, policy and standards best practice guidance, and process improvements. The ISA will be required to work with project teams, service providers, and business units internal and external to the IT function. The candidate is expected work with leadership and guidance from the Information Security Officer’s and/or the Lead Information Security Analyst, to support and influence technology and business personnel regarding the value and methods of safeguarding information, applications, systems, infrastructure, and work practices are optimized so that the information risks are properly managed.
The Information Security Analyst provides support to the Information Security Officer in managing the organisation-wide Technology, Governance, Risk and Compliance function (IT GRC) within the Office of the Chief Information Security Office.

Location: Hybrid - Cape Town | Johannesburg | Durban

• To support and shape the Information/Cybersecurity initiatives and support business segments in the implementation and execution of the Information/Cybersecurity framework, policies, and reporting of all segment specific Information/Cybersecurity elements.
• Analyse business impact and exposure based on emerging security threats.
• Work closely with information security officers, architects, functional area specialists, and other security staff to ensure adequate security solutions are in place throughout all IT systems and platforms to mitigate identified risks sufficiently, and to meet business objectives and regulatory requirements.
• Support and document security assessments relating to IT security and risk management compliance, driven by the Lead Information Security Analyst.
• Support the integration of the business-related security risk requirements into the broader governance structures, by initiating relevant discussions, and ensuring the evidencing of key risk-related decisions.
• Log, track and manage risks and report risk trends, opportunities and remediation status monthly.
• Create, log requests and report tasks necessary to continuous improvement and evolution of security services.
• Manage stakeholder requests ensuring strong relationships are built and maintained. Instil confidence across the business that information security risks are identified and mitigated.
• Assist with the creation of processes and process improvement to ensure smooth execution of risk processes with minimal burden on stakeholders..

Role Requirements

• Relevant tertiary (3yr) qualifications in a IT risk discipline required
• A certification from ISACA (CISA), ISC2 (SSCP) is advantageous
• 2 - 4 years relevant industry experience IT risk management or security role.
• Experience within the Insurance and /or financial services sector advantageous
• Knowledge of IT risk management principles and practices
• Understanding of IT Governance, and technology and life cycle development processes (SDLC, technology operations, business continuity, etc).
• Broad knowledge of range of standards, frameworks and methodologies— for example, International Standards Organization (ISO) 27001/2, NIST Cyber Security Framework, IT Infrastructure Library (ITIL), COBIT
• Excellent Written and oral communication skills
• Strong facilitation, negotiation and conflict resolution skills
• Strong Analytical and problem solving skills

Skills

Education

Closing Date

26 March 2024

The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.

Old Mutual Limited is pro-vaccination and encourages its workforce to be fully vaccinated against Covid-19.

All prospective employees are required to disclose their vaccination status as part of the recruitment process.

Please refer to the Old Mutual’s Covid-19 vaccination policy for further detail. Kindly note that Old Mutual reserves the right to reinstate the requirement to vaccinate at any point if it is of the view that it is imperative to do so.

The Old Mutual Story!

Are you looking to support innovative web-based applications and other solutions that improve the way in which Federal agencies analyze public feedback on current and emerging policy and regulatory issues?  ICF is seeking a detail-oriented data processing analyst to fill a full-time position to contribute to our area of business that focuses on the review, processing, and analysis of public comments on highly scrutinized and often controversial public policy topics. This position is available immediately and can be filled either as a fully remote position or as a position primarily located in Reston, VA (i.e., in the DC Metro area) with flexibility for telework considered.    

Job responsibilities:

This position will join our multidisciplinary team of regulatory specialists, policy analysts, and attorneys who support a wide variety of major federal rulemaking efforts by processing and analyzing comment submissions and preparing written technical support documentation. You will assist on engagements for federal government clients who develop and implement regulatory programs affecting energy, the environment, homeland security, public health, nutrition and food/drug safety, employment and training, trade, transportation, and other national priorities.

What you will do…

• Using ICF’s web-based public comment management application and associated utilities to process public comment documents and their associated metadata
• Performing imports/exports from a comment processing system and generating reports
• Performing bulk data management activities programmatically using APIs
• Performing comment data consistency reviews and data entry/cleanup tasks
• Reading and analyzing public comments and assigning comments to topical categories
• Identifying and processing mass mail campaigns
• Providing verbal and written progress updates to project staff
• Preparing written technical documentation
• Assisting in testing and conducting trainings/demonstrations of ICF’s web-based comment management system and associated utilities

What you will need (minimum qualifications):

• Bachelor's degree with minimum GPA of 3.0
• U.S. Citizenship is required per federal contracts
• Ability to obtain and maintain a moderate-level government security clearance

What we would like you to have (preferred qualifications):

• Thorough understanding of and significant experience using Microsoft Excel
• Experience supporting high-volume document processing tasks and/or data processing projects/applications
• Bachelor’s degree in computer science or related field
• Eagerness and ability to learn new skills and technologies quickly
• Strong analytical, problem-solving, organizational, time management, and decision-making skills
• Ability to prioritize and work on multiple projects under strict deadlines in a fast-paced environment
• Excellent written and oral communications skills
• Detail-oriented and team-oriented collaborative approach
• Proficiency in Microsoft Office (Word, Excel, Outlook, PowerPoint) and Adobe

Why you’ll love working here:

• Comprehensive health benefits and corporate wellness program
• Competitive vacation and retirement plans
• Flexible work arrangements.
• A diverse workforce that values equity and inclusion
• Employee community networks to support a diverse, inclusive workplace
• Ongoing learning and development opportunities to meet your professional goals.

Working at ICF

ICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.

We can only solve the world's toughest challenges by building an inclusive workplace that allows everyone to thrive. We are an equal opportunity employer, committed to hiring regardless of any protected characteristic, such as race, ethnicity, national origin, color, sex, gender identity/expression, sexual orientation, religion, age, disability status, or military/veteran status. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO & AA policy.

Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation please email icfcareercenter@icf.com and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.

Read more about workplace discrimination rights, the Pay Transparency Statement, or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act.

 

Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position. The pay range for this position is:

$44,680.00 - $75,956.00

Virginia Remote Office (VA99)

What if the work you did every day could impact the lives of people you know? Or all of humanity?

At Illumina, we are expanding access to genomic technology to realize health equity for billions of people around the world. Our efforts enable life-changing discoveries that are transforming human health through the early detection and diagnosis of diseases and new treatment options for patients.

Working at Illumina means being part of something bigger than yourself. Every person, in every role, has the opportunity to make a difference. Surrounded by extraordinary people, inspiring leaders, and world changing projects, you will do more and become more than you ever thought possible.

The Vulnerability Management Analyst will lead in driving the strategy, evaluation, process, execution, and operations of the vulnerability management program at Illumina.  S/he will be responsible for vulnerability detection, analysis, prioritization, reporting, remediation, and validation against common vulnerabilities.  This role is accountable for collecting, processing, monitoring, and disseminating potential threat intelligence and security vulnerabilities.  This role will also partner with each functional area to overlay vulnerability and threat data with system knowledge to identify where compensating controls (or deep system knowledge) can be applied to lower (or raise) the effective risk ratings.

Responsible for successfully executing enterprise-wide Information Security Operational controls and processes related to vulnerability management that protect the company’s data and functions across all business areas.  Adhering to data protection standards, procedures, regulatory oversight, and technical solutions for the Information Security department.  

Lead vulnerability management investigations, establish and improve monitoring processes, analysis of vulnerability events, validation via manual testing of patch effectiveness, cyber-security-based awareness and education, and vulnerability management requests. Point of escalation for zero-day vulnerabilities triage and response for junior staff. 

Performs all duties in accordance with the company’s policies and procedures, all state, federal, and country laws and regulations, wherein the company operates.

In accordance with regulatory and audit requirements, this position will perform analysis of systems and programs, including the cyber-security related programs and initiatives.  Delivery of activity reporting, including metrics, environment impact, effectiveness progress, and performance, and risk indicators.

Duties

• Configure and manage vulnerability management tools, creating scan schedules, reporting and metrics generation and documentation
• Monitors, tracks, responds, investigates, and reports in compliance to vulnerability policies and works with the responsible parties to drive timely results and remediation of vulnerabilities
• Generates and monitors effective and actionable vulnerability management reporting across the enterprise 
• Research and assess current vulnerability threats
• Practices applicable procedures and standards that meet existing and newly developed policy and regulatory requirements (i.e., PCI-DSS, SOX, GDPR, CCPA)
• Keeps abreast of the latest security and privacy legislation, regulations, advisories, alerts, and vulnerabilities pertaining to the organization
• Review, triage, and respond to service requests and alerts related to vulnerability management
• Response to vulnerability findings as primary or a point 
• Assist in the administration and removal of unsanctioned software
• Liaison between internal teams to improve overall enterprise risk
• Act on improving processes and procedures

Skills

• Strong oral and written communication skills appropriate for consultation with all levels of management
• Strong problem-solving and analytical skills
• Proficient, or able to gain proficiency with, vulnerability management applications and tools
• Previous risk-based vulnerability management experience
• Knowledge of vulnerability management lifecycle (familiar with CVEs, CVSS, and MITRE) 
• Experience in collaboration amongst multiple lines of business and geographic theaters
• Strong experience and architecture comprehension of vulnerability management environments preferred
• The ability to thrive in a fast-paced, dynamic environment
• Understanding of threat intelligence best practices
• Overall Networking understanding and principles
• Successfully implemented and delivered projects involving a variety of cybersecurity functions
• Team oriented and skilled in working in a collaborative environment
• The ability to influence and drive change within teams and the organization
• A self-starter with a hands-on style, high level of energy, stamina, and drive 
• A strong team player who is proactive and driven to achieve results 
• Commendable organizational and time management skills
• Previous experience working as part of an enterprise Information Security team
• Monitors, tracks, responds, investigates, and reports in compliance to vulnerability policies, and works with the responsible parties to drive timely results and remediation
• Research and track current security vulnerabilities and related projects
• Keeps abreast of the latest security and privacy legislation, regulations, advisories, alerts, and vulnerabilities pertaining to the organization
• Understanding of threat actors with the ability to articulate how they operate and demonstrate how they subvert common security controls
• Ability to validate vulnerability findings through manual testing

Experience/Education

• 5+ years’ experience in multiple Cybersecurity domains (i.e., Vulnerability Management, Identify & Access Control, Network Security, Firewalls, Enterprise Directory Systems, Encryption, Data Loss Prevention {DLP}, Comprehensive Endpoint Protection, Infrastructure & Information Security Operations)
• 3+ years of vulnerability management experience
• Experience working with a wide range of stakeholders to perform vulnerability assessments on systems or applications
• Experience creating useful metrics that will help various stakeholders (asset owners and executives)
• Experience triaging vendor patch releases as well as security bulletins and make recommendations on required remediations
• Experience with patch management processes across network, OS, database, workstations, IoT, virtual, cloud
• Experience with Microsoft, Linux, Mac operating systems
• Experience using MITRE/CVSS calculations to define vulnerable and impacted components to clarify the severity
• Experience collecting, processing, and disseminating threat intelligence
• Successfully implemented and delivered projects involving a variety of cybersecurity functions
• Bachelor’s degree in Computer Science, Information Systems, or equivalent work experience

Nice to Have

• Previous experience in engineering, architecture, application development, information security operations
• Understanding of Cloud and Container Vulnerability Management (AWS, GCP, Azure)
• Webapp vulnerability management experience
• Understanding of DevSecOps best practices
• Knowledge of PCI, HIPAA, NIST 800-53, CIS Benchmark, STIG
• Security Certifications (i.e., AWS Security, Azure Security Engineer, Security+, CISSP, CEH, SANS, etc.)
• Incident Management, Monitor and Response experience in a Cybersecurity operation-based environment 
• Forensic and eDiscovery skills
• Penetration Test/Validation Experience
• OT/Manufacturing Vulnerability Management Experience

Illumina believes that everyone has the ability to make an impact, and we are proud to be an equal opportunity employer committed to providing employment opportunity regardless of sex, race, creed, color, gender, religion, marital status, domestic partner status, age, national origin or ancestry, physical or mental disability, medical condition, sexual orientation, pregnancy, military or veteran status, citizenship status, and genetic information.

Job description
We are seeking a highly skilled and experienced Senior Cyber Security Analyst to join our team. As a Senior Cyber Security Analyst, you will play a pivotal role in safeguarding our organization's systems, networks, and data from cyber threats. Your expertise in cybersecurity frameworks, risk assessment, incident response, and security operations will be crucial in protecting our assets and ensuring compliance with industry regulations. This is an exciting opportunity to lead and contribute to our cybersecurity initiatives while mentoring junior team members.

Responsibilities:
• Lead the development and implementation of comprehensive cybersecurity strategies and initiatives.
• Conduct regular security risk assessments, identify vulnerabilities, and recommend appropriate controls and countermeasures.
• Monitor and analyze security events, alerts, and logs to detect and respond to potential threats and breaches.
• Lead incident response efforts, including investigation, containment, eradication, and recovery, ensuring timely and effective resolution.
• Collaborate with cross-functional teams to design and implement secure infrastructure, systems, and applications.
• Conduct security assessments and penetration testing to identify and address vulnerabilities.
• Provide guidance and support in the development and implementation of security policies, standards, and procedures.
• Stay up-to-date with the latest cybersecurity threats, trends, and technologies, and recommend proactive measures to enhance our security posture.
• Mentor and provide guidance to junior members of the cybersecurity team, promoting professional growth and development.
• Ensure compliance with relevant industry regulations and frameworks (e.g., ISO 27001, NIST, GDPR).

Requirements:
• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• Must have at least 2 years of proven work experience as a Cyber Security Analyst, with a focus on security operations, incident response, and risk assessment.
• In-depth knowledge of cybersecurity principles, frameworks, and best practices.
• Experience with security monitoring tools, SIEM solutions, and threat intelligence platforms.
• Familiarity with penetration testing methodologies, vulnerability assessment tools, and secure coding practices.
• Strong understanding of network security, firewall configuration, intrusion detection systems, and endpoint protection.
• Proficiency in scripting languages (e.g., Python, PowerShell) for automation and security tool integration.
• Familiarity with cloud security principles and technologies (e.g., AWS, Azure).
• Excellent analytical and problem-solving skills, with the ability to analyze complex security issues and recommend effective solutions.
• Strong written and verbal communication skills, with the ability to convey complex security concepts to technical and non-technical stakeholders.
• Relevant certifications such as CISSP, CISM, CEH, or GIAC certifications are highly desirable.
• Proven leadership skills, with the ability to lead and mentor junior team members.

Additional Information:
We offer competitive compensation packages, a collaborative work environment, and opportunities for professional growth and development. If you are a highly skilled and motivated Senior Cyber Security Analyst looking to make a significant impact in a forward-thinking organization in Australia, we would love to hear from you. Apply today with your resume, cover letter, and any relevant certifications.

Permanent Residents (PR), Australian / Citizens are eligible to apply Job Type: Full-time Salary: $80,000 to $120,000 per year (inclusive of super)

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Program & Project Management

Job Details

About Salesforce

We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place.

The Director of Legal Operations Contract Lifecycle Management (CLM) Center of Excellence (CoE) will be responsible for the implementation, ongoing maintenance, and maximum value realization of our investments in that key legal transformational space. Alongside her/his/their team of business system analysts (BSAs), this leader will assume responsibility for the operational maintenance of our legal agreements on our legacy CLM solution while - in parallel - co-lead with Business Technology (IT) the full implementation of our NextGen CLM platform. Following that initial transition, this leader and their team will be responsible for the total value realization of that next-generation CLM platform, including the full enablement of its Generative AI features!

This leader will lead a team of 3 to 6 individuals and report directly to the SVP of LCA Strategy and Operations. This team will work in deep partnership with partners across Legal, Legal Operations, Business Technology (IT), and third-party product teams, to define, implement, and lead a best-in-class transformational CLM platform!

Position Responsibilities:

• Establish and lead our new Legal Contract Lifecycle Management Center of Excellence (CLM CoE)

• Lead the business implementation of our NextGen CLM platform in deep partnership with the impacted Legal teams, other Legal Operations teams, and associated Business Technology groups.

• As the business implementation leadership role, this professional will be responsible for the (i) effective project management of all business (LCA) owned activities and work items, (ii) delivery of comprehensive business requirements to our technology partners, (iii) actively co-designing the implementation of that outstanding NextGen CLM solution anchored deep industry insights and solution innovation, and (iv) lead all associated business readiness and implementation activities.

• During that transition period, handle all agreement templates in the legacy CLM platform, ensuring business continuity and cohesion during that critical phase.

• Following the initial implementation of all LCA-owned agreement types [direct customer agreements (4), partner agreements (4), supplier agreements (15+)] on the NextGen CLM platform, this leader and their team will be responsible for the operational support and continuing evolution of that business solution, aiming to increase the platform's value realization - including the full deployment of all related Generative AI capabilities.

• Provide program management leadership to include: (i) create and maintain effective project charters depicting business objectives, program scope, team member responsibilities, and more, (ii) focused and regular management project schedule, scope, budget, and status updates, and (iii) pro-active management of project dependencies, issues, and risks.

• Provide highly structured and cadenced updates to key team members and executives to ensure the successful implementation and effective operations of the NextGen CLM platform — on-scope, on-schedule, on-budget, and with quality. Proactively manage risks and issues in partnership with all pertinent partners to mitigate avoidable impacts to the program and erosion of value realization.

• Lead the overall health and governance of key operational domains, including security, data access, data quality, data governance, and vendor management, among others.

• Lead a team of 3 to 6 internal and external business system analysts, guiding them through the delivery and operations of a best-in-class CLM platform. Develop their careers while encouraging a values-based work environment.

• Build a work environment that promotes Ohana, collaboration, partnership, recognition, mutual respect, performance feedback/management, and employee happiness.

Experience/Skills Required:

• 10+ years of validated professional process and technology implementation experience, including successful leadership of multiple complex contract lifecycle management initiatives.

• 3+ years of direct people management experience, including a successful track record in talent development and performance of teams of 4 or more individuals.

• 2+ years of verified experience in project management, including the enactment of an appropriate project management methodology.

• 2+ years of confirmed experience in business analysis and business solution design, including the delivery of outstanding process and requirement documentation, as well as the design of innovative business solutions in the legal and compliance space.

• 2+ years of demonstrated knowledge in business technology management, including the implementation of leading business technology operational practices and efficient resource management.

• Excellent written and oral communication skills. Able to convey complex ideas in a strategic and concise fashion.

• Strong legal and/or contract management experience

• Strong organizational and analytical skills.

• Exceptional communication skills; ability to engage and influence people across teams

• Ability to work in a fast-paced environment and resourceful in achieving success in the face of ambiguity while prioritizing and handling multiple responsibilities

• Ability to multitask in a fast-paced environment with multiple concurrent initiatives and handle complex partner groups with minimal supervision

• Validated business leadership skills, including the ability to communicate effectively with and influence senior company executives (VPs, SVPs, and EVPs)

• A productive, data-driven, learning mentality

• Embodies trust. Must have high ethical standards and the ability to exercise good judgment

• Advances a diversity of team, thought, and opinion

Experience/Skills Desired:

• Hands-on Ironclad CLM implementation experience, including related certifications.

• Hands on experience with a Salesforce CRM platform suite and associated applications.

• Hands-on Apttus CLM experience

• 3+ years of management consulting experience at a world-class strategy consulting firm or specialized CLM practices.

Accommodations

If you require assistance due to a disability applying for open positions please submit a request via this Accommodations Request Form.

Posting Statement

At Salesforce we believe that the business of business is to improve the state of our world. Each of us has a responsibility to drive Equality in our communities and workplaces. We are committed to creating a workforce that reflects society through inclusive programs and initiatives such as equal pay, employee resource groups, inclusive benefits, and more. Learn more about Equality at www.equality.com and explore our company benefits at www.salesforcebenefits.com.

Salesforce is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. Salesforce does not accept unsolicited headhunter and agency resumes. Salesforce will not pay any third-party agency or company that does not have a signed agreement with Salesforce.

Salesforce welcomes all.