FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Information Security risk management, including threat modeling, risk assessments, and the implementation of security controls across various platforms. Proficient in cloud security, identity and access management, and Agile methodologies, with strong communication skills to convey security risks to stakeholders.
Highest-signal resume keywords
Information Security Risk ManagementCloud SecurityIdentity And Access ManagementSecurity Controls ImplementationAgile And DevSecOps Methodologies
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Threat ModelingRisk AssessmentSecurity ArchitectureSecurity Configuration StandardsData EncryptionApplication SecurityInfrastructure SecurityVirtualizationSecurity MonitoringAPI Security
Soft Skills
Exceptional JudgmentTactDecision-MakingFlexibilityExcellent Communication
Tools & Technologies
Microsoft AzureGCPAWSIBM CloudAliCloudAzure Active DirectoryWAFsAPI GatewaysIntrusion Detection And PreventionIDaaS
Certifications & Qualifications
GIACCISSPCISMCISA
Industry Keywords
Secure-By-Default DesignsSDLCSecurity VulnerabilitiesBusiness Risk TerminologyMulti-Tenant Platforms
Tech Stack
Tools & technologiesAWSAzureCloudGoogle Cloud PlatformMicroservicesSDLC
About the role
Key responsibilities & impact- Serve as a trusted security advisor to the Client Technology Platforms Delivery organization within IT Services
- Support architects, engineers and product managers on technology programs and projects
- Define security risks and controls and provide security guidance
- Identify and prioritize security-related requirements
- Promote secure-by-default designs
- Facilitate delivery of information security services throughout the SDLC
- Communicate risk treatment and mitigation options for security vulnerabilities
- Translate technical vulnerabilities into business risk terminology for business stakeholders
- Provide security architectures and pragmatic guidance balancing business benefit and risk
- Engage IT project teams throughout the SDLC to identify and prioritize security controls and guide implementation
- Perform threat modeling and risk assessments of information systems, applications and infrastructure
- Maintain and enhance Information Security risk assessment and certification methodologies
- Define security configuration standards for shared and multi-tenant platforms and technologies
- Develop risk treatment and mitigation options for risks identified during security reviews or audits
- Recommend corrective actions to customers and project stakeholders
- Share knowledge and provide technical assistance to team members
- Act as subject matter expert for responsible technologies and service portfolios
Requirements
What you’ll need- Advanced degree in Computer Science or a related discipline; or equivalent work experience
- Five or more years of experience in the management of a significant Information Security risk management function
- Experience managing communication of security findings and recommendations to IT project teams, business leadership and technology management executives
- Significant working security experience and knowledge in designing, implementing and operating security controls
- Experience in cloud security, infrastructure security, application security, identity and access management, or Agile and DevSecOps methodologies
- Technical understanding of virtualization, cloud infrastructure and public cloud offerings such as Microsoft Azure, GCP, AWS, IBM or AliCloud
- Experience with identity and access management, WAFs, API gateways, intrusion detection and prevention, security monitoring and data encryption
- Experience with application-level access and entitlement management, data tenancy and isolation, encryption and logging
- Working familiarity with REST API and microservices architecture
- Experience with Azure Active Directory-based IAM and authorization design, API, IDaaS and federation technologies
- Experience promoting automated security features in pipelines and security testing in Agile or DevOps environments
- Strong English language skills are required
- Exceptional judgment, tact and decision-making ability
- Flexibility to adjust to multiple demands, shifting priorities, ambiguity and rapid change
- Excellent communication and organizational skills
- Related GIAC, CISSP, CISM, CISA or similar cloud-security certifications are preferred or actively pursued
Benefits
Comp & perks- Competitive remuneration package
- Support for flexible working
- Career development support
- Holidays
- Health and well-being benefits
- Insurance
- Savings benefits
- Discounts, offers and promotions
- Support, coaching and feedback from colleagues
- Opportunities to develop new skills and progress your career
- Freedom and flexibility to handle the role in a way that’s right for you