Job Closed
This listing is no longer active.
Based in Dublin, Leinster, Ireland, Experian is a global information services company that operates in 40 countries around the world and has additional headquarters in the United K
Client Security Assurance Expert
Location
United States
Posted
94 days ago
Salary
$115.7K - $208.3K / year
Seniority
Lead
Job Description
Client Security Assurance Expert
Experian
• Lead client audits (onsite/virtual) including presentation of evidence, explanation of controls, planning and execution of pre and post audit activities (coordinate needed remediation, etc.) • Support commercial teams to present Experian's security controls and risk posture to clients through Requests for Information / Requests for Proposal and/or pre-sales consultancy. • Review contractual security clauses & deliverables under contractual agreements to ensure Experian does not exceed risk tolerance or be put in a position where it fails in its ability to meet client requirements. • Take the lead on articulating Experian's security posture to justify any changes with clients. • Analyze audit results and post audit reports and follow up on security items. • Conduct gap analysis and articulate contractual risks to internal stakeholders to enable risk-informed contractual decisions. • Maintain current and up-to-date evidence repository • Provide accurate, valid, and appropriate responses in a timely manner to security questionnaires and ad-hoc inquiries sent by prospective and existing clients and business partners. • Provide SME consultancy to Business Units on Experian information security governance and risk management framework in the context of the above. • Maintain client-facing security documentation ensuring its continued relevance and accuracy. • Collaborate with global team members across regions to ensure consistent experiences for clients around the world, and act as a mentor to junior members in sharing knowledges and experiences.
Job Requirements
- In-depth experience reviewing and negotiating contractual terms presented by clients / third parties and understanding the associated risks, communicate the risks to stakeholders and making recommendations
- At least 8 years of experience working in an enterprise IT environment with at least 5 of those years executing internal or external audits, with exposure to supporting roles
- Project management skills
- Experience leading different cyber security audits of varying complexity
- Hands-on experience auditing cloud environments and tactically implementing cloud controls (AWS, GC, Azure, etc.)
- Experience with cloud-native tools such as AWS Security Hub, Azure Security Center, or other 3rd party tools to assess the security posture of cloud environment against industry benchmarks (such as NIST 800-53, CIS, MITTRE ATT&CK, CSA CSM, ISO27002, etc.)
- Professional security certification such as CCSP/CCSK/CISSP/CISM/CISA/ISO27001LA or other equivalent, or willingness to pursue other relevant accreditations (company supported)
Benefits
- Great compensation package and bonus plan.
- Core benefits including medical, dental, vision, and matching 401K.
- Flexible work environment, ability to work remote, hybrid or in-office.
- Flexible time off including volunteer time off, vacation, sick and 12-paid holidays.
Related Guides
Related Categories
Related Job Pages
More Security Engineer Jobs
Cloud Network Engineer
Reveal TechnologyFounded in the mid‑2010s, Reveal Technology operates as a mission‑driven startup headquartered in Bozeman, Montana, specializing in defense and public‑safety software tools s
• Deploy and support Kubernetes environments in cloud and on-site environments • Travel to deployment sites to support the setup of on-site k8s deployments • Ensure system reliability, observability, and compliance through monitoring and alerting • Communication of feedback and deployment issues to the development team to support deployments in isolated environments • Implement Infrastructure-as-Code using tools like Terraform or Bicep • Integrate with secure APIs and microservices in languages like C#, Python, and Node.js • Integrate with third-party systems and mission data sources (REST, gRPC, message queues) • Deploy, manage, and maintain relational and non-relational databases • Collaborate with designers and users to build intuitive UIs for complex workflows • Work closely with product managers, mission operators, and fellow engineers • Participate in architecture reviews, code reviews, and agile planning sessions • Contribute to technical decision-making, prototyping, and long-term system design • Debugging infrastructure as code and k8s deployments in isolated environments with remote support from the engineering team
• Lead information security for client solutions and Practice Area technology. • Embed security controls into product and solution teams during the secure development lifecycle (SDLC). • Oversee security assurance for products and solutions. • Identify, assess, and manage security weaknesses, vulnerabilities, and risks. • Lead Practice Area delivery of relevant global security and transformation initiatives. • Provide Practice Area incident support to Cyber Operations. • Support client security requests, including RFIs, audits and security questionnaires.
z/OS Systems Security Administrator
Diné Development CorporationDiné Development Corporation (DDC) is a Navajo Nation enterprise dedicated to advancing sustainable economic prosperity for the Navajo people. Its mission focu
This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description DDC- IT Services is seeking a Sr. IBM z/OS Systems Administrator to join their growing team! - Ensure that all information systems are managed, operated, and used IAW DISA STIGS and other applicable policies and procedures. - Support all ACPs (ACF2, RACF and CA TSS) utilized by the information systems. - Provide access control and account provisioning for all information systems. - Use DISA approved tools to plan, conduct, review, analyze, and correct findings in support of STIG reviews SRR. - Provide audit and inspection support for the government to include providing artifacts and evidence. - Support COOP exercises (Simulated and Table Top) exercises. - Grant and maintain access and account profiles for both individual and system resources. - Promptly report security violations IAW with specific security requirements for reporting incidents and violations. - Use DISA approved tools and follow policies for Change, Incident and Service Requests. Qualifications - Must have an Active Secret clearance. - Must currently possess one of the IAT Level 2 certifications: - CCNA-Security - CSA+ - GICSP - CompTIA Security+ CE - SSCP Company Description
• Define the development strategy for the offering • Design and scope the offering • Identify the resources required to develop the offering • Develop new delivery models for clients • Conduct market analyses • Energize commercial development • Define the business development plan • Lead and promote the offering internationally • Manage SOC projects for our clients • Maintain a trusted relationship with our clients
