Total 3 pr consultant job vacancies in Legal / Public / Security category in The United States of America

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 50,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria, in charge of Infrastructure, Cloud and Cybersecurity services in APAC.

Responsibilities:

• Develop and review security design(s) for the project in scope: Security and risk management controls, ICT/Cloud resouces and services, related policies and standards, cybersecurity best practices, and business requirements/needs.
• Technical architecture diagrams depicting the deployment of security controls in existing network
• Conduct initial risk assessments to evaluate security risks and vulnerabilities
• Recommend mitigation/correction actions, security controls and process to implement
• Submit a Security Design Document detailing the security controls to secure the system
• Identify logical architectural elements such as the logical flow of control,
  and the relationship between the elements (e.g., the trust boundary between
  various services and components deployed at cloud services);
• Identify physical or virtual architectural elements to build the architecture (e.g., security mechanism such as Firewall, access control, authentication);
• Select security services such as hardware-related, Software-related, cloudrelated (e.g., Native cloud service, security mechanisms available for authentication, token management, authorization, encryption methods
  (hash, symmetric, asymmetric), encryption algorithms and security event logging);
• Create an architecture design which allows all elements to be integrated to fufil needs and requirements
• Report to relevant stakeholders on the SBD activity
• Provide insights about regular findings

Competencies:

• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (Vulnerability Assessment, Penetration testing), application security, security technologies (system hardening, IDS/IPS, firewall), security incident response and security assessment.
• Proficiency in written and spoken English is a must
• Autonomous, with the ability to drive and lead
• Excellent writing and communication skills to negotiate and provide solutions
• Proven stakeholder and inter-personal management skills

Qualifications:

• Bachelor’s degree or master degree in Information Security System, Computer Science, or relevant IT experience
• Preferably with minimum 8 years' experience in cyber security role, with relevant experience in Security by Design, Audits, Security Assessment and/or Compliance
• Possess one of more professional credentials: CISSP, CRISC, CISM, CISA, SSCP, CEH, ISO 27001 or equivalent

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 50,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria, in charge of Infrastructure, Cloud and Cybersecurity services in APAC.

Context:

You will be part of a new Security By Design (SBD) APAC team to support all ongoing and new projects with a SBD approach. This is based on “Project Identification, Assessment and Prioritization’ and a Method has been created to support the deliverable.

The main responsibilities of the SBD APAC team:

• Point of Contact for ongoing and new projects
• Review and assess architecture and documentation for the projects in scope in regards with the SBD
• Recommend mitigation/correction actions
• Report to APAC Security stakeholders on the SBD activity
• Write deliverable on existing projects/applications, in line with the Portfolio Cyber Architect
• Provide insights about regular findings

Responsibilities:

• Assessment of the Security by Design Methodology against any new projects
• Deliver a risk assessment of each new project in accordance with Cyber criticality
• Submit it for Security Business Partner’s review and validation
• List and plan security activities and deliverables
• Select the Project Security Baseline
• Propose, in coordination with the Central Security by design team, a remediation plan for identified risks and vulnerabilities
• Develop Key Metrics that will show the maturity of each system for security based on the risk assessment and work packages.
• Align with the Security By Design Teams to maximize on global standards and capabilities
• To ensure a repeatable process is in ‘run-mode’
• Weekly/Monthly Meetings with different stakeholders from local/regional to global teams
• Monthly KPI Dashboard of Risk Status for Each new Project
• Deliver Risk Plans to IM Risk Manager on a Monthly Basis
• Align to Security by Design Teams in Europe on a Monthly basis

Competencies:

• Good working knowledge of security risk management, security governance framework and compliance (IT Security Audit / log review), technical vulnerability management (Vulnerability Assessment, Penetration testing), application security, security technologies (system hardening, IDS/IPS, firewall), security incident response and security assessment.
• Proficiency in written and spoken English is a must
• Autonomous, with the ability to drive and lead
• Excellent writing and communication skills to negotiate and provide solutions
• Proven stakeholder and inter-personal management skills

Qualifications:

• Bachelor’s degree or master degree in Information Security System, Computer Science, or relevant IT experience
• Preferably with minimum 10 years' experience in cyber security role, with relevant experience in Security Audits, Security Assessment and/or Compliance
• Possess one of more professional credentials: CISSP, CRISC, CISM, CISA, SSCP, CEH, ISO 27001 or equivalent

Benefits

• Regular team buildings
• 18 leave days / Year
• Health Insurance: GP, Life Insurance, Dental Insurance and Optical insurance
• Annual bonus
• Working hours: from 9am to 6pm, Monday to Friday
• E-learning and certifications paths

Company:

Sopra Steria is a listed European tech leader specializes in Consulting, Digital Service, and Software. We have 50,000 employees worldwide located in different regions (Europe, North America and Asia), whereby Singapore is the HQ for APAC. EvaGroup Asia Pacific is part of Sopra Steria, in charge of Infrastructure, Cloud and Cybersecurity services in APAC.

Context:

We are looking for a Senior Security Specialist in OT to be part of the core APAC team to reduce the risk and cost from an Industrial Security Incident.

This will impact multiple sites in the region and there isn’t any current competency to assess and develop risk mitigation plans

Several main objectives behind the team:

• The to be state will be to have all Industrial Assets in a risk managed state with reportability to APAC Executive Leadership.
• A phase of discovery of industrial assets and define security standards to apply will be required.
• Regional project in APAC with potential travels in specific countries.

Responsibilities:

• Assessment of all APAC sites for Industrial IT, Operational Technology (OT) and Industrial Automation and Control Systems (IACS) with aim of delivering low Cyber risk systems
• Plan and manage an audit following the methods defined at program level
• Deliver a risk assessment of each system in accordance with business criticality
• Develop work packages for each system to ensure protection against intentional misuse by sophisticated means with moderate resources, IACS specific knowledge and moderate motivation.
• Propose, in coordination with the Central Industrial Cyber Security team, a remediation plan for identified risks and vulnerabilities
• Develop Key Metrics that will show the maturity of each system for security based on the risk assessment and work packages
• Align with Industrial Cyber Teams to maximize on global standards and capabilities
• Weekly/Monthly Meetings with different stakeholders from local/regional to global teams
• Monthly KPI Dashboard of Risk Status for Each Asset
• Deliver Risk Plans to IM Risk Manager on a Monthly Basis
• Align to Industrial Cyber Teams in Europe and America on a Monthly basis

Competencies:

• Strong knowledge and experience in Operational Technology (OT) and/or Industrial Control Systems (ICS)
• Updated on the latest industry OT security practices and technologies as well as emerging threats and vulnerabilities
• Strong leadership, communication, interpersonal, analytical and problem-solving skills in a fast-moving environment
• Good project management skills and able to work as a team as well as independently
• Fluent in written and spoken English language is a must

Qualifications:

• Bachelor’s degree or Master degree in Information Security System, Computer Science, or relevant IT experience
• Preferably minimum 5 years of experience in Cybersecurity with minimum 3 years of experience in OT/ICS Cybersecurity
• Proven professional experience working with cyber security standards – ISO 27001, IEC 62443, NIST
• Certifications such as GICSP, ISA/IEC 62443 Cybersecurity certificates, ISO2701 Lead Auditor, CISSP, CISA, CISM, etc, are highly desired

Benefits

• Regular team buildings
• 18 leave days / Year
• Health Insurance: GP, Life Insurance, Dental Insurance and Optical insurance
• Annual bonus
• Working hours: from 9am to 6pm, Monday to Friday
• E-learning and certifications paths

Apply for this job