Total 27 Senior Executive IT Manager job vacancies in Legal / Public / Security category in The United States of America

Job Summary:

Assisting the HOD with work planning, organizing, coordinating, implementing and directing the activities of the Security and SHE through risk minimization programs for daily and during events to ensure a secure and safe facility, effective access control, security of SIC’s assets and a secure environment for the staff, clients, pectators and any third parties in SIC’s premise.

Job Descriptions:

• To identify critical security risk, SHE hazards and control weakness,
  process gaps for SIC business operations during daily and events.
• To conduct liaison/ networking and managing relationship with Law
  Enforcement Agencies such as Police and Local Government, such as
  DOSH.
• To provide advice and training to internal staff on Security & SHE requirement standards during daily and events.
• To develop, respond and assist the organization in any Security & SHE
  related emergency within SIC i.e Occupational Safety, Occupational
  Health, Security Incident, Fire Safety, Road Safety and Pandemic issues to
  minimize impact and consequences annually basis by acting as a Subject
  Matter Expert (SME) for SIC Emergency Response Team (ERT)/ Crisis
  Management Team / Enterprise Risk Management Team / Business
  Continuity Program.
• To ensure and security and safety team performs the task given daily and
  provides reports as timeline given by the HOD.
• Ensuring the effectiveness of Security & SHE Management best practice
  for SIC in general.
• To assist and liaise with the consultants on revamping the CCTV and
  preparing the necessary documents. Ensuring the CCTV is always operational.

Job Requirements:

• At least Diploma in BOSHM, Green Book, Protective Management,
  Criminal Justice. or related.
• Background in Police or Armed Forces is advantage.
• Good in spoken & written in English & Bahasa Melayu. 
• Computer literate. 
• Well verse in OHSAS 18001:2007 and ISO 45001:2018 documentation and
  implementation.
• Well verse with emergency response and business continuity strategy (crisis).
• Willing to work long hours, during weekend and public holiday.
•  Able to work in minimal supervision.
• Sound judgement and decision-making skills, with a hand on, problem solving
  approach, able to remain calm under pressure and take control of incidents.

Perks & Benefits

• Allowance (travel stipends, transportation, etc.)
• Casual dress code
• Medical insurance
• Personal leave
• Personal development opportunities

工作總結：

透過日常和活動期間的風險最小化計劃，協助 HOD 進行工作規劃、組織、協調、實施和指導安保和 SHE 的活動，以確保設施安全、有效的訪問控制、SIC 資產的安全和安全的環境對於SIC場所內的員工、顧客、觀眾及任何第三方。

工作介紹：

• 識別關鍵安全風險、SHE 危害和控制弱點，
  日常和活動期間 SIC 業務運營的流程差距。
• 與法律進行聯絡/建立聯繫並管理關係
  執法機構，例如警察和地方政府，例如
  職業安全與健康。
• 在日常和活動期間向內部員工提供有關安全和 SHE 要求標準的建議和培訓。
• 在任何安全性和 SHE 方面開發、回應和協助組織
  SIC 內的相關緊急狀況，即職業安全、職業
  健康、安全事件、消防安全、道路安全和流行病問題
  透過充當主體，每年最大限度地減少影響和後果
  SIC 緊急應變小組 (ERT)/危機事務專家 (SME)
  管理團隊/企業風險管理團隊/業務
  連續性計劃。
• 確保安保和安全團隊執行日常和安全任務
  按照 HOD 給出的時間表提供報告。
• 確保安全和 SHE 管理最佳實踐的有效性
  對於一般的 SIC。
• 協助並與顧問聯絡以改造閉路電視和
  準備必要的文件。確保閉路電視始終正常運作。

工作要求：

• 至少擁有 BOSHM、綠皮書、保護管理文憑、
  刑事司法。或相關。
• 警察或武裝部隊背景是優勢。
• 良好的英語和馬來語口語和寫作能力。
• 計算機知識。
• 精通 OHSAS 18001:2007 和 ISO 45001:2018 文件並
  執行。
• 精通緊急應變和業務連續性策略（危機）。
• 願意在週末和公共假期長時間工作。
• 能夠在最少的監督下工作。
• 良好的判斷與決策能力，能夠親力親為，解決問題
  方法，能夠在壓力下保持冷靜並控制事件。

津貼和福利

• 津貼（旅費、交通費等）
• 休閒著裝要求
• 醫療保險
• 事假
• 個人發展機會

o Position title: Corporate Secretarial,Assistant Manager
o Remuneration: RM 5000-7000.
o Location: Mid Valley City(5-day week),Kuala Lumpur.

About the company
Our client is a professional corporate secretarial consulting entity providing full spectrum of secretarial services to several listed companies and group of highly successful businesses in Malaysia. Due to expansion and restructuring in recent time, they need to build a strong company secretarial team to ensure company compliance and champion corporate governance matters.  With the business undergoing rapid expansion, they are currently seeking professional ICSA graduate to assume the role of Corporate Secretarial,Assistant Manager based at their corporate head office at Mid Valley City, KL.
The job
The successful candidate for this role will be working in a small growing team and the position will assist the Company Secretary with the entire company secretarial functions across various subsidiaries and jurisdictions. The role will involve close contact with Directors, senior management, in particular Tax, Legal, Group financial Reporting within the organization.
This is a broad ranging and hands-on role which involves working in a busy team environment.
The responsibilities will involve:
o Delivery of company secretarial duties for the company's various subsidiaries.
o Preparation of broad and committee packs.
o Producing clear and concise minutes of meetings.
o Assist to ensure that the Companies Act and relevant regulatory requirements are adhered to and complied.
o Assisting in keeping statutory records of the Company's subsidiaries up-to-date.

The candidate
Aspiring candidate who are interested in this Senior Executive (Assistant Manager)level role will have a consirable PLC experience with recent experience of managing large share schemes, reports and accounts in a PLC environment listing and organising large scale AGMs.
Candidate must be a qualified Chartered Secretary/ICSA associate  level with minimum 3 years of post qualified experience in handling corporate secretarial duties.
Possess strong knowledge of basic company secretarial compliance matters, maintenance of company registers and share certificates,issuing and transfer of shares and listing requirements.
Experience of convening and attending Board meetings plus preparation of minutes.
Experience of drafting board and shareholder resolutions.
Excellent written and spoken English is necessary and essential.

APPLICATION
Interested candidates are hereby invited to apply by forwarding a copy of your resume for our review. You may apply online through JOBSTORE by clicking the apply button to submit your application. Alternatively, candidates may forward resume directly to us at CHRISJAC via our E-mail at jobs@chrisjac.com.my

 

Perks & Benefits

• Casual dress code
• Personal leave

o 職位名稱：公司秘書、經理助理
o 報酬：RM 5000-7000。
o 地點：吉隆坡谷中城（每週工作 5 天）。

關於公司
我們的客戶是一家專業的公司秘書諮詢實體，為馬來西亞的多家上市公司和一群非常成功的企業提供全方位的秘書服務。由於最近的擴張和重組，他們需要建立一支強大的公司秘書團隊，以確保公司合規並支持公司治理事務。隨著業務的快速擴張，他們目前正在尋找專業的 ICSA 畢業生，擔任位於吉隆坡谷中城的公司總部的公司秘書和經理助理。
工作
該職位的成功候選人將在一個不斷壯大的小型團隊中工作，該職位將協助公司秘書履行各個子公司和司法管轄區的整個公司秘書職能。該職位將涉及與董事、高階管理層，特別是組織內的稅務、法律、集團財務報告部門的密切聯繫。
這是一個範圍廣泛且需要實踐的角色，涉及在繁忙的團隊環境中工作。
職責將涉及：
o 履行公司各子公司的公司秘書職責。
o 準備廣泛的和委員會的資料包。
o 製作清晰簡潔的會議記錄。
o 協助確保公司法和相關監管要求得到遵守和遵守。
o 協助維持公司子公司的法定記錄為最新狀態。

候選人
對這一高級管理人員（助理經理）級別職位感興趣的有抱負的候選人將擁有豐富的PLC 經驗，以及最近在PLC 環境中管理大型股份計劃、報告和帳戶、上市和組織大型年度股東大會的經驗。
候選人必須是合格的特許秘書/ICSA 準會員級別，並具有至少 3 年處理公司秘書職責的合格經驗。
對基本公司秘書合規事宜、公司登記冊和股票的維護、股票發行和轉讓以及上市要求擁有豐富的知識。
具有召集和出席董事會會議以及準備會議記錄的經驗。
起草董事會和股東決議的經驗。
優秀的英語書面和口語是必要且必不可少的。

應用
特此邀請有興趣的候選人透過轉發您的履歷副本進行申請，以供我們審核。您可以透過JOBSTORE線上申請，點擊「申請」按鈕提交您的申請。或者，候選人可以透過我們的電子郵件jobs@chrisjac.com.my直接將簡歷轉發給我們CHRISJAC

津貼和福利

• 休閒著裝要求
• 事假

Hi Everyone, PT Asuransi Jiwa Inhealth Indonesia Official (Mandiri Inhealth) is currently looking for suitable candidates to fill the position of Senior IT Security for our Head Office at Mega Kuningan, South Jakarta. Here are some of the details :

• Bachelor’s degree in Information Technology or System Information or a related field.
• Minimum of 5-10 years as a IT Security or IT Cyber Security
• Familiar with common security controls and security flaws for modern Mobile Application, Web Applications, APIs and Cloud Infrastructure
• Understands the OWASP testing methodology
• Manage reporting related Information System Security status
• Manage operational SIEM & Information System Security day to day
• Familiar with common security controls and security standard such as NIST
• Offensive Security certifications is an advantage such as CEH Pratical or OSCP /OSCE certifiied

Responsibilities:

• Lead the IT Security team to manage and all IT security-related matters that support business objectives and strategies
• Develop and carry out IT security policies and plans
• Conduct security review of existing systems on their ability to provide adequate defence against the latest security threats.
• Conduct vulnerability assessments and penetration tests for all critical IT systems
• Drive and conduct IT Security awareness and training like security talks, phishing simulation and incident response exercises
• Manage and investigate all cyber security alerts and notifications from cyber surveillance and threat intelligence to identify root cause and impact for effective containment, mitigation and future improvements
• Manage and investigate all IT Security incidents to identify root cause and impact for effective containment, mitigation and future improvements
• Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls
• Jointly perform, monitor, track and review with IT Governance team and other IT teams on all information systems and infrastructure and security
• Maintain and enhance the Information Security risk assessment methodology
• Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
• Act as Subject Matter Expert (SME) in security technologies, and provide knowledge sharing and technical assistance to other team members
• Define security configuration standards for platforms and technologies
• Detailed reporting on IT security initiatives, scans, incidents to management and statutory reporting
• Any other ad hoc duties as assigned.

Requirements:

• Bachelor's degree in Computer Science, of Information Technology or equivalent, with minimum 5-7 years' experience in Information and Cyber Security
• Good knowledge and experience with cloud security of Amazon Web Services (AWS), Microsoft Azure and SaaS solutions, security standards and frameworks like NIST, ISO27001, MTCS, CSA Security-by-Design (SBD) and Personal Data Protection Act (PDPA) is preferred.
• Other relevant certifications such as CISSP/CISA/CISM, CREST, CEH, CHFI would be advantageous
• Demonstrated leadership and adaptability, with willingness to readily and voluntarily take ownership of highly challenging tasks and problems, even beyond initial scope of responsibility.
• Ability to handle multiple tasks concurrently and meet deadlines, while maintaining focus despite conflicting demands.

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

Key Responsibilities:

Vulnerability Scanning:

• Conduct regular vulnerability scans of designated network segments and systems using industry-standard tools (e.g., Tenable, Nessus).
• Configure scans according to established schedules and scope.
• Document and maintain scan configurations, historical results, and schedules.

Analysis and Reporting:

• Perform basic analysis of scan results, identifying critical vulnerabilities and potential risks.
• Perform basic assessment of vulnerabilities, to input CVE advisories to vulnerability reports.
• Prepare clear and concise reports with vulnerability summaries, risk levels, and suggested remediation actions.
• Distribute scan reports to relevant stakeholders in a timely manner.

Stakeholder Communication and Follow-up:

• Collaborate with system owners and IT teams to provide context for findings and facilitate remediation efforts;
• Conduct weekly follow-ups with stakeholders to track remediation progress and identify any obstacles;
• Track and manage remediation follow-ups according to protocol and established processes;
• Escalate unresolved vulnerabilities or remediation delays to management, as needed.

Status Reporting:

• Create regular status reports on remediation progress for management review.

Requirements :

• Diploma with at at least 2 years' relevant experience in an IT or information security role;
• Demonstrated experience managing vulnerability scanning tools (Tenable, Nessus, Qualys, etc.);
• A good understanding of common network vulnerabilities and remediation techniques;
• Basic knowledge of security standards and best practices (e.g., OWASP, NIST);
• Capability to understand and interpret CVE technical documentation;
• Ability to analyse scan results, interpret technical data, and identify risks;
• Detail-oriented and organised with the ability to track progress across multiple stakeholders.

Additional Notes

• Contract Duration : 12 months.
• Work Arrangement : On site

Develop policy and standards for API security.

Business Function

Group Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibilities

• Administration and management (technical operations) of firewall infrastructure
• Evaluate and upgrade firewall hardware and/or firmware
• Coordinate with vendor, deploy, configure and manage Firewall devices according to system engineering design
• Coordinate with information security governance team to align IT infrastructure with established standards
• Ensures system compliance with all established information security policies
• Perform period health check and tuning of firewall devices
• Performs technical assessment of any non-well defined or complex firewall change requests prior to implementation
• Performs regular review of firewall rulebases and recommend necessary optimization actions
• Assists Level 1 Support Engineers during problem determination and resolution whenever necessary.
• Planning and recommending overall improvements in firewall management
• Device Access management
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Performance and historical trend analysis
• Implements changes to firewall infrastructure hardware in order to correct errors or enhance functionality
• Develops processes for improving operational efficiencies, as well as identifies/implements automation tools for existing manual processes.
• Prepares technical reports, memoranda, and instructional manuals as documentation of network design and operational requirements.
• Management of network daily activities; incident and problem management
• Responsible to work with respective team members on the review of network architecture and design
• Responsible to work with the respective server and application team's members
• Responsible to work with the respective network vendor's teams for the trouble-shooting, identification and resolution of network problems
• Responsible for network devices, as well as appliances, vulnerability review and assessment.
• Responsible for network devices, as well as appliances, change implementation review and assessment
• Responsible to conduct pre / post implementation plan review
• Responsible to conduct and train Level 1 engineers, i.e. to empower and equipped the L1 engineers with the knowledge to run and maintain Data center network
• Coordinate with information security governance team to align IT infrastructure with established standards
• Change requests prior to implementation
• Advanced troubleshooting production problems with RCA and fault diagnosis
• Design and monitor operations metrics on a monthly basis to keep track of key operation metrics
• Ready to work in shifts including public holidays
• Ready to be on call for 24x7 support during shifts

Requirement

• Experience: Minimum 8 years firewall operations and/or management role
• Certification : CCSA, CCSE, JNCIA-FWV, JNCIA-SEC, JNCIS-SEC (Preferred but not mandatory CISSP, CISM, ITIL Foundation)
• Checkpoint Firewalls, Juniper Netscreen / SRX Firewalls, VPN Technologies, DNS, NTP, 2 Factor Authentication technologies.
• Ability to work independently or as a team player.
• Experience in highly complex data center network design and support
• Experience with Cisco and Arista products specially DCI technology
• Experience with Cisco and Arista Software Define network (ACI, DNAC, etc)
• Strong hands on experiences on Fabric Patch, OTV, VPC+, Vxlan, Mlag, MP-BGP
• Knowledge and experience in employing and using various networking trace tools, i.e. Sniffer, Wireshark, riverbed net profiler, NetBrain, Gigamon and etc.
• Pro-active, dynamic and with good analytical/conceptual thinking.
• Certifications such as CCIE or above level in networking is an advantage
• Python or Linux shell scripting skill is a plus

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.

An opportunity has arisen for the key role of Senior Cyber Security Technician within the Royal Wolverhampton NHS Trust.

This role is key to the operational effectiveness of cyber security measures across the organisation and will play a significant part in contributing to its compliance with national cyber security standards in line with mandated national policy and our internal Governance, Risk and Compliance Framework.

Working as part of the IT Cyber Security Team you will be responsible for penetration testing, security vulnerability assessment, patch management, managing malware detection, anti-exploit, anti-ransomware, advanced threat protection, web filtering, encryption, security information event management (SIEM) and mobile control security solutions.

You will work directly with specialties across IT and the wider organisation to ensure cyber security best practice and principles are embedded into core IT functions ensuring robust monitoring and adherence to cyber security policies and standards. Excellent communications skills are required together with an in-depth knowledge of cyber risks.

You will assist in the production of action plans and documentation across a range of cyber activities. You will assist in the provision of evidence to support the National Data Protection and Security Toolkit and assist in the assurance process for cyber security aspects of Data Protection Impact Assessments.

To design, manage, monitor and maintain ICT security systems to prevent compromise of data and hardware owned or maintained by or on behalf of the Trust. This includes, but is not limited to, systems with restricted access or security reasons, such as antivirus, malicious code prevention, web filtering, encryption, patch management software, security vulnerability scanners, network and firewall configurations.

To design, implement and enforce ICT Security policies in conjunction with the Head of Cyber Security and Trust Governance Team. To ensure provision of relevant ICT Security documents and procedures for use as evidence toward the Trust’s commitment to meeting full compliance with Information Governance data security requirements.

To resolve user reported ICT security related incidents and service requests.

To manage and lead on IT Security breaches including containment, resolution and where necessary provision of information for investigations.

To deputise for the Head of Cyber Security.

To perform regular auditing of ICT systems and analysis of results.

The Royal Wolverhampton NHS Trust is one of the largest NHS trusts in the West Midlands providing primary, acute and community services and we are incredibly proud of the diversity of both our staff and the communities we serve. We are building a workforce that can help us to fulfil our values, improve the quality of care for patients, and solve the health care problems of tomorrow. We’re passionate about the value that diversity of thinking and lived experience brings in enabling us to become a learning organisation and leader in delivering compassionate care for our patients.

We are delighted that we have been rated as “Good” by CQC. We have achieved numerous awards; The Nursing Times Best Diversity and Inclusion Practice and Best UK Employer of the Year for Nursing Staff in 2020.

The Trust is a supportive working environment committed to creating flexible working arrangements that suit your needs and as such will consider all requests from applicants who wish to work flexibly.

Please see attached Job Description/Person Specification for a full detail of role and main responsibilities


This advert closes on Monday 8 Apr 2024

Maintain, further develop and assist in implementation of Information Security Management Systems in use within the ICS in line with the requirements of Data Security and Protection Toolkit, National Guidelines and Security Best practice Support the development of good practice and workable security operating procedures in relation to cyber security across the system and provide specialist knowledge and analyse to improve the safety and stability of systems.Propose changes and improvements to IT security policies and procedures, implementing changes under the direction of Cyber Security Lead Provide proactive monitoring, review, analysis and interpretation of security incidents and alerts using security technologies such as Sophos Central management console, Microsoft Defender for Endpoint and other security platforms, to ensure that alerts are resolved quickly by the appropriate team Act as a senior member of the team responsible for the monitoring, detection and response to cyber security events, ensuring the appropriate technical response and timely remediation of threat alerts Act as an escalation and co-ordination point for cyber related incidents. investigate suspected and actual breaches of IT security and undertake reporting/remedial action as required Be part of an on call rota to cover security related events outside of working hours alongside the wider CITS 24\7 service. Maintain detailed logs of any security events, incidents and remedial recommendations and actions taken Perform ongoing IT Security risk assessments and audits to ensure that IT Systems are adequately protected Coordinate work with the wider IT operational and project teams, information asset owners and system managers to ensure all solutions utilise IT Security best practices Work with vendors, outside consultants and other 3rd parties to improve IT security within the organisation Help facilitate regular penetration testing exercises of the Trusts perimeter network, to gather intelligence from these exercises and use these to generate lessons learned and drive Continuous Improvement Collaborate with cyber security team colleagues to prepare operational security reports and KPIs, including security event and security incident alerts from network, infrastructure, end point, database, application and data security controls. Responsible for ensuring that at all times, the highest standards of customer service are delivered. Provide advice and act, where necessary, in response to Audit findings and recommendations in respect of information security Review and advise on IT Security patches, software updates and vulnerabilities according to best practices Identify threats to the confidentiality, integrity, availability, accountability and relevant compliance for information systems and provide authoritative advice and guidance on the application and operation of all types of security controls. Work closely with organisation information governance teams to maintain legislative and regulatory requirements in regards to data protection and records management Maintain currency with security and security enhancing technologies and brief colleagues as needed to enable measures, to be implemented where and when necessary or desirable Ensure that access control, disaster recovery, business continuity, incident response and risk management needs are appropriately addressed Review cyber security threat notifications received from the NHS Digital Carecert service, using detailed log information, a variety of software utilities and software management tools to identify potential threats and eliminate false positives Demonstrate a detailed knowledge and experience of the installation, configuration and maintenance of PCs and mobile devices and an understanding of network protocols, including TCP/IP, and their use in relation to network operating systems and perimeter security Apply a comprehensive knowledge of best practice in relation to cyber-security, malware prevention and critical security updates and a knowledge of Microsoft Windows server technologies and Active Directory infrastructure and be able to communicate requirements to a wide variety of users Ensure personal prioritisation and management of allocated tasks and workload

Job Responsibilities:

• Manage and implement Security projects
• Maintain Global IT Security Standards and Policy.
• Conduct Internal IT Security Audit to group companies in Asia
• Conduct Annual External Audit (Vulnerability Assessment/Penetration Test)
• Conduct Security Awareness Training.
• Incident Response, investigation and recovery.
• Support daily Security operations
• Manage and Adminster Firewall operations in Asia
• Maintaining EndPoint Protection and updates.
• Maintaining Patch Management system
• Any other ad hoc duties as assigned.

Requirements

• Preferably possess a Diploma in Information Technology or Computer Engineering related.
• 1-2 years of experience in Cybersecurity domain
• Knowledge on Security products and technology
• Knowledge in conducting Internal IT Security Audit
• Knowledge in handling security incident and response
• Knowledge in managing various type of firewall
• Knowledge in managing various type of endpoints protection
• Knowledge in managing patch management tools

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

• Location: Cambridge (Hybrid working - On average once a month)

• Job type: Permanent

At Mundipharma, we are proud of the work we do to bring innovative treatments to patients. We challenge ourselves constantly to deliver more for patients, healthcare professionals, our partners, and our employees. 

The Senior IT Security Governance and Risk Specialist is responsible for governance and oversight of IT security in line with Mundipharma’s IT Cyber Security strategy.

Role and responsibilities

• Core member of Architecture Review Board and project Phase Gate, responsible for assessing IT solutions against security architecture principles and advising project teams on cyber requirements.

• Core member of the Cyber Steerco which updates the CIO on current cyber initiatives, incidents, risks etc.

• Support preparation of periodic reports to the Board on cyber security.

• Core member of the IT Security Council, keeping business representatives informed on current cyber initiatives, incidents, risks etc

• Create and update IT Governance owned security policies and procedures.

• Own the Mundipharma cyber risk tracker, overseeing mitigation activities to completion. Ensure newly identified risks are added to the tracker.

• Ensure alignment of Mundipharma’s security practice with ISO 27001, NIST and CIS frameworks where feasible.

• Own Mundipharma cyber user awareness training, working with the Senior Quality & Compliance Coordinator to manage this in the Learning Management System.

• Manage interactions with external partners providing security assessment, and coordinate follow-up activities.

• Provide subject matter expertise and guidance on cyber security risks, threats, opportunities, and capabilities.

• Conduct security assessments of vendors and services provided to Mundipharma.

• Advise colleagues implementing projects and enhancements on security requirements.

• Coordinate responses to security related questions from internal and external audits.

• Maintain and monitor compliance with the security audit calendar and exceptions approval process.

• Work with the Enterprise IT Shared Services team (EITSS) to ensure that tools such as the Office365 Compliance centre and Azure Security centre are used effectively to ensure compliance to internal security policies, to identify risk and support data discovery requirements.

What you’ll bring

• Experience working in cyber security with stakeholders at various levels of the organisation

• Risk management expertise 

• Basic understanding of operational cyber security

• An effective team player, needs to be comfortable with ambiguity and working within a matrix

• A self-starting finisher completer, able to think strategically but follow through effectively

• Able to lead and influence projects and services

Desirable

• Relevant cyber security, auditing and/or risk management certification

• Degree level qualification (not necessarily in cyber) or demonstrated ability to operate at this level (preferred)

What we offer in return

• flexible benefits package

• opportunities for learning & development 

• collaborative, inclusive work environment

Diversity and inclusion

Building an inclusive environment where people can thrive, grow and achieve their full potential is a priority. We believe this isn’t just the right thing, but also the smart thing to do, as we focus on making a positive difference for our customers and their patients.

About Mundipharma 

Mundipharma is a global healthcare company with a presence across Africa, Asia Pacific, Canada, Europe, Latin America, and the Middle East. Mundipharma is dedicated to bringing innovative treatments to patients in the areas of Pain Management, Infectious Disease and Consumer Healthcare as well as other severe debilitating disease areas. Our guiding principles, centered around Integrity and Patients-Centricity, are at the heart of everything we do. 

Join our talent pool

If you’re not sure this role is right for you but you’re keen to hear about future opportunities at Mundipharma, join our talent community and be the first to hear about new roles.

 

Additional Job Description:

Primary Location:

GB Cambridge

Job Posting Date:

2024-03-07

Job Type:

Permanent

Responsible for supporting and improving the IT Security Posture of related hardware, software, and configuration to ensure it meets the company security policy and minimum security baseline.

Responsibilities: 

• Secure the information system by identifying and solving potential security issues and recognizes potential abnormalities and reports violations.

• Maintain a proactive approach to protecting the system by defining access privileges, control structures, and resources.

• Maintain the infrastructure health by performing daily monitoring, patch updates, and configuration review. Implements security improvements by assessing the current situation, evaluating trends, and anticipating requirements.

• Liaise with vendors to ensure projects, services and tasks are implemented as per specification and timely manner.

• Prepare technical documentation, system manuals, workflow processes, procedures, and guidelines and update them according to SOP.

• Ensure the completion of new equipment setup or configuration changes according to the maintenance schedule or recommended changes.

• Determines security violations and inefficiencies by conducting periodic audits. Upgrades system by implementing and maintaining security controls.

• Assist in every related area of IT Infrastructure whenever required to ensure the continuous smooth running of the MIS department.

• To provide after-hours support according to work requirements and job schedule.

• To perform any other tasks or assignments as directed by the management from time to time.

Looking for cloud security specialist to join us. Should specialize in Cloud security domain such as network security, Infrastructure security, endpoint security, data security, as well as application security, and shall be well-versed with the various security tools in respect to such domains.

Senior IT Security Specialist will be tasked with:

• Implementing and evaluating cloud architecture and deployments, and services across the client.

• Advising on IT security solutions and their implementation, integration and operation into business systems and processes.

• Overseeing the overall security implementation/ Integration of the new platform

• Designing, Implementing, vulnerability scanning, threat detection, deployment and troubleshooting of complex network security issues involving Fortigate Firewalls, WAF, Azure Sentinel, Azure/AWS WAF, Azure/AWS DDoS protection, and IBM guardium etc.

• End to end architecting, designing and engineering plan and managing the Cloud based platform including log source integration on Azure Cloud

• Configuring data digestion types and connectors

• Analysis of design and configuration of the events and logs being digested

• Develop, automate, and orchestrate tasks (playbooks) with logic apps based on certain events

• Implementing use cases and log management

• Create incident categorization and threat management plan

• Configure Sentinel Incidents, Workbooks, Hunt queries, Notebooks.

• Deployment and configuration of cloud based Nessus/ Qualys scanner appliance

What you'll need to excel in the role:

• Must hold good hands-on expertise across various security technologies involving any of the Azure sentinel, Fortigate firewall, Vulnerability assessment, Azure/AWS WAF, IBM Guardium and AWS Cloud native and enterprise security services etc.

• Should have good experience in Security Architecture designing and implementing as well as demonstrating solutions delivery, principles and emerging technologies.

• Deep understanding of how to implement best practices for designing and securing Azure platform

• Expertise in vulnerability management

• Experience in Cloud based WAF solution such as; AWS WAF or Azure application firewall

• Good knowledge on DHCP / DNS and other networking protocols Monitor, troubleshoot, and escalate production problems affecting network infrastructure

• Good to have Infrastructure background/expertise (Unix/Linux/Windows servers, Database, Web/TCP IP networking, Storage & Backup systems etc.)

• Exceptional communication skills with diverse audiences - Strong critical thinking and analytical skills

• Strong stakeholders (i.e. Vendors, Suppliers etc.) management experience

• Strong leadership, project and team-building skills, including the ability to lead teams and drive projects and initiatives in multiple departments

• Demonstrated ability to identify risks associated with business processes, operations, information security programs and technology projects • Working experience on Govtech’s Government Commercial Cloud (GCC) platform will be an added advantage

Preferred skills/certifications:

• Certification in the given discipline will add advantage (i.e., CEH, CHFI, CISSP etc.)

• Microsoft Azure OR Amazon Web Services OR Google Cloud Platform Certified

• Azure sentinel certification/ Fortinate certified/ Nessus or Qualys Certified/ IBM Guardium certified etc