Lucid Motors

Technical Project Manager, Battery Software

Gojek

About the Team GoTo Group has an immediate need for a Senior IT Internal Audit. In this role, you will be part of the Internal Audit Team based in Indonesia. Focusing heavily on providing assurance by evaluating and improving the control process. you will employ analytical thinking skills, and communication skills, and be ableto adapt to a fast-phase environment in an effort to deliver the audit successfully. In our humble opinion, the coolest part is your ability to be eloquent in delivering communication with stakeholders and have high enthusiasm for learning.<h3>What You Will Do </h3><ul><ul><li>Conduct audit in conformance with IIA Standards and activities shall be performed in compliance with the GOTO Audit Methodology.</li><li>Plan &amp; Implement risk-based IT audit programs. This includes ensuring IT audits are performed properly and in accordance with SOX / professional standards.</li><li>Perform IT audit, regulatory compliance assessment, and IT risk assessment, in areas covering IT general controls (ITGC), application controls, business cycle, and IT security review.</li><li>Identify and evaluate complex technology and business risks and internal controls which mitigate risks, and related opportunities for internal control improvement.</li><li>Proactively engaging in all high-risk incidents. Preparing IT Audit written reports covering the audit findings (control issue/ gap) and proposing corrective action plans to the management.</li><li>Perform effective communication with stakeholders to ensure the audit operates smoothly.</li><li>Leading Audit projects simultaneously.</li></ul></ul><h3>What You Will Need </h3><ul><ul><li>3-5 years of experience in auditing IT environments in reputable companies / public accounting firms. </li><li>Bachelor’s Degree in Information Technology, Information Systems, or other closely related fields. </li><li>Earned one of the following certificates - CISA, CISSP, CISM or other relevant certifications in the IT or cybersecurity domain.</li><li>Strong knowledge and experience in delivering  ISO 27001 / 27701 audits, ITGC, ITAC, and SOX testing.</li><li>Ability to lead a project.</li><li>Excellent interpersonal &amp; communication skills both oral and written - English proficiency a plus.</li><li>Analytical thinker with strong conceptual and problem-solving skills with the willingness to learn new Technology.</li><li>Meticulous attention to detail with the ability to multitask.</li></ul></ul>About the Team Our Internal audit team is divided into two teams, the Operational audit, and IT audit teams, and all members are located in Indonesia. As a Senior IT Internal auditor in GoTo, we had a chance to gain exposure in 3 OpCos covering Gojek, GoTo Financial, and Tokopedia where you are forced to keep learning new things. The great thing is, we are expanding!Our objective as GoTo Internal Audit Team is to consistently deliver high-quality auditing by evaluating and improving the effectiveness of business control processes which are expected to give management assurance in fulfilling their duties to the organization. To achieve that objective, we strive our best to keep improving our quality to become a trusted business partner. About GoTo GroupGoTo is the largest technology group in Indonesia, combining on-demand, e-commerce, and financial services through the Gojek, Tokopedia, and GoTo Financial brands. It is the first platform in Southeast Asia to host these three essential use cases in one ecosystem, capturing a majority of Indonesian consumer household expenditure.GoTo’s mission is to “Empower Progress” by offering an unparalleled selection of goods and services through a comprehensive merchant and partner network and promoting financial inclusion through its leading payments and financial services business.About GojekGojek is a Super App. It is one app for ordering food, commuting, digital payments, shopping, hyper-local delivery, and a dozen other products. We are Indonesia’s first decacorn. We are  also the only Southeast Asian startup to be part of Fortune's list of 'Companies That Changed The World.'Our Mission: To create and scale positive socio-economic impact for our customers, driver-partners, business, and MSMEs.As of 2018, Gojek processed more than $9 billion in annualized gross transaction value across all markets where it operates - in Singapore, Vietnam, and Indonesia. We have the largest food delivery product in Asia (outside of China) and is the largest payments wallet in Southeast Asia.Gojek contributed IDR 249 T to the Indonesian economy (equivalent to 2% of Indonesia's GDP in 2020). As of Q1 2021, the Gojek App witnessed over 190mn downloads by customers. The platform has over 2mn Driver Partners &amp; ~900000 Merchant Partners across SEA.About GoTo FinancialGoTo Financial brings secure, reliable, and user-friendly financial solutions to over 55 million monthly active users, more than 14 million merchants, and over 2.5 million driver-partners eager to benefit from the digital economy in the GoTo ecosystem.GoTo Financial’s consumer services include GoPay, GoPayLater, and other financial services. We also serve businesses of all sizes through leading payment gateway Midtrans, Indonesia’s largest cloud POS network Moka and GoKasir. We also have the all-in-one merchant solution GoBiz, GoBiz Plus, GoStore, and Selly - available in Indonesia and Southeast Asia.GoTo group of companies is committed to building a diverse and inclusive workplace and is an equal opportunity employer. We do not discriminate on the basis of race, religion, national origin, gender, gender identity, sexual orientation, disability, age, education status, or any other legally protected status.

DKI Jakarta

Senior IT Internal Auditor

Halvik

If you are looking for a rewarding career with a highly successful company that puts people first, Halvik Corp is the place for you! We are committed to delivering smarter IT-driven solutions bolstered by quality and innovation to help the US Federal Government succeed. Join our growing team and make a difference!THIRD PARTY INFORMATION SECURITY ASSESSOR Carries out procedures to assess defensive posture of Ginnie Mae’s Cloud Environment and supporting cloud-hosted applications.  Coordinates assessments with integrated business partners, ensures compliance with new or forecasted FedRAMP requirements.  Acts as a subject matter expert in cloud security, advising senior leaders on strategies and methods for risk reduction.  Assists in the risk reviews or change management process to reduce any unintended negative impacts to the environment of accreditation.  Supports development of strategies, roadmaps and compliance (or audit) reporting.            Required Experience / Education: ●Cybersecurity professional experience●Specialized experience supporting Federal IT organizations with Information Security risk management (i.e., vulnerability assessments, risk assessments, penetration testing, policy and program development, etc.)●ISC2 Certified Cloud Security Professional or comparable/specialized Cloud Security Certification●Knowledge and understanding of FedRAMP compliance and certification ●Experience assessing and auditing cloud service offerings●Experience monitoring networks and systems for security breaches or intrusions Desired Experience / Education: ●Experience with FedRAMP compliance and certification ●Knowledge and experience with Zero Trust architecture, solutions and compliance or reporting standards  ●ISC2 Certified Information Systems Security Professional (CISSP) and/or ISACA Certified Information Security Manager (CISM)●ISACA Certified Information Systems Auditor (CISA) ●AWS Certified Security - Specialty certificationHalvik offers a competitive full benefits package including:Company-supported medical, dental, vision, life, STD, and LTD insuranceBenefits include 11 federal holidays and PTO.401(k) with company matchingFlexible Spending Accounts for commuter, medical, and dependent care expensesTuition AssistanceCharitable Contribution matchingTo comply with the guidance provided by the <a href="https://www.saferfederalworkforce.gov/overview/" rel="noopener noreferrer nofollow ugc" target="_blank">Safer Federal Workforce Task Force (Task Force) </a>for Federal Contractors and Subcontractors, Halvik is requiring COVID-19 vaccinations for all their employees except where an employee is legally entitled to an accommodation. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Vienna

Third Party Information Security Assessor

If you are looking for a rewarding career with a highly successful company that puts people first, Halvik Corp is the place for you! We are committed to delivering smarter IT-driven solutions bolstered by quality and innovation to help the US Federal Government succeed. Join our growing team and make a difference!Provide an on-site individual to act as senior Enterprise Mobility Management Cybersecurity Information Systems Security Manager specializing in Risk Management Framework and National Security Agency (NSA) Commercial Solutions for Classified (CSfC) Mobile Access (MA), Data at Rest (DAR), Wireless Local Area Network (WLAN), and Multi-Site Connectivity (MSC) Capability Package submissions. Must have broad knowledge of Mobile Device Management (MDM) technology, as well as, BlackBerry, iOS, Windows Mobile, and Android operating systems and devices. Typical Duties Include: Primary function is to help develop and maintain the SOCOM Enterprise Gray network environments. Perform risk and vulnerability assessments of Mobile IT and Mobile IS for accreditation; prepare risk assessment reports for submission to the Security Assessor/Certification Authority (SCA/CA) and Authorizing Official/Designated Accrediting Authority (AO/DAA) in accordance with DoD, DIA, USCYBERCOM, USSOCOM, Component Command, TSOC, and deployed forces’ policies, procedures, and regulations. Acts as a subject matter expert for mobile solution planning and custom needs. Work closely with the Systems Integration Facility (SIF) lab to test the infrastructure and troubleshoot complex issues. Tracks Assessment and Authorizations (A&amp;A) status of SIE governed Information Systems (ISs). Ensures these artifacts and documentation are available in the USSOCOM-chosen automated tool. Advises AOs on the adequacy of implementation of mobile cybersecurity requirements. Serves as a liaison for the Chief Information Officer (CIO) to USSOCOM’s AO, Information Systems Officer (ISOs), Common Control Providers (CCPs), and Information Systems Security Manager (ISSMs) concerning mobility issues. Serves as a liaison between HQ USSOCOM, Components and TSOCs and the NSA CSfC office in order to establish SOF priorities during the authorization and annual rea-authorization processes. Analyze, evaluate, and build an authorization roadmap for new mobile systems to include Commercial Solutions for Classified (CSfC) systems. Develop and maintain supporting documentation for new mobile networks, mobile systems, and technologies as they are introduced into the SIE. Develop and review the mobile security architecture used on SIE networks, systems, services, devices, hardware, and software. Knowledge, Skills and Abilities: Bachelor’s Degree in computer or systems science or engineering discipline and eight (8) years of progressive, relevant experience or equivalent combination of education and experience. Must have a working knowledge and understanding of Microsoft Active Directory, Microsoft Exchange, Windows Server 2016 and higher, and understanding of networking. Experience with the US Combatant Commands (USCENTCOM/USSOCOM) is desired. Working knowledge of the Risk Management Framework (RMF). Must have broad knowledge of Mobile Device Management (MDM) technology, as well as, BlackBerry, iOS, Windows Mobile, and Android operating systems and devices. Must have excellent communications skill (written and oral) and interpersonal skills. Knowledge and experience with DOD IA processes and policies (e.g., DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a>, NIST, CNSS and other cybersecurity policies). Active TS/SCI clearance required.DoD 8570 IAM II Certification (CAP, CASP+ CE, CISM, CISSP (or Associate), GSLC, CCISO, HCISP)BA/BS degreeHalvik offers a competitive full benefits package including:Company-supported medical, dental, vision, life, STD, and LTD insuranceBenefits include 11 federal holidays and PTO.401(k) with company matchingFlexible Spending Accounts for commuter, medical, and dependent care expensesTuition AssistanceCharitable Contribution matchingTo comply with the guidance provided by the <a href="https://www.saferfederalworkforce.gov/overview/" rel="noopener noreferrer nofollow ugc" target="_blank">Safer Federal Workforce Task Force (Task Force) </a>for Federal Contractors and Subcontractors, Halvik is requiring COVID-19 vaccinations for all their employees except where an employee is legally entitled to an accommodation. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Fort Benning

Cybersecurity Analyst - Mobile Devices

If you are looking for a rewarding career with a highly successful company that puts people first, Halvik Corp is the place for you! We are committed to delivering smarter IT-driven solutions bolstered by quality and innovation to help the US Federal Government succeed. Join our growing team and make a difference!Cybersecurity Systems Analyst Performs assessment and authorization coordination. Advises and assists the customer with Risk Management Framework (RMF) and develops a Plan of Action and Milestones for resolving network deficiencies in accordance with DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a> and ICD 503. The duties of this task include assessing network compliance against controls listed in NIST 800-53 and creating A&amp;A packages. Performs assessment, compliance, and validation of IT systems to support the Cybersecurity program at USSOCOM, its component Commands, TSOCs, and deployed forces. The Contractor shall execute a comprehensive assessment, compliance and validation of customer networks to ensure compliance with regulations and security and standards. The end goal is to ensure the integrity of customer systems by identifying and mitigating potential shortcomings and vulnerabilities. Advise USSOCOM, its Component Commands, TSOCs, and deployed forces on network and system risks, risk mitigation courses of action, and operational. Additionally, the Cybersecurity Systems Analyst should be able to perform security evaluations and vulnerability assessments using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool and Security Content Automation Protocol tool. Identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool. The Cybersecurity Systems Analyst will liaison with network and system administrators to correct identified deficiencies. The Cybersecurity Systems Analyst will also scan (or review scans) for new systems and applications being introduced into the SOF environment, identify issues, and draft certification letters for the government. The contractor will liaison with the Site Integration Facility (SIF) to ensure systems and application meet the standards in the DISA Security Technical Implementation Guides (STIG). The Cybersecurity Systems analyst should be knowledgeable of cyber network defense tools such as end point security, SIEM, comply to connect, etc. Typical duties include:  Tracks A&amp;A status of SIE governed ISs. Ensures these artifacts and documentation are available in the USSOCOM-chosen automated tool.  Advises stakeholders on the adequacy of implementation of cybersecurity requirements.  Provide DoD &amp; IC RMF subject matter expertise to USSOCOM, its Component Commands, TSOCs, deployed forces and their delegates, including other Contractors, and assist with the development and execution of the RMF program at USSOCOM, its Component Commands, TSOCs, and deployed forces.  Maintain, track, and validate DISN, cloud and DIA connection approval packages, including those from USSOCOM, its Component Commands, TSOCs, and other subordinate organizations.  Develop and maintain supporting documentation for new and existing networks, cloud environments, information systems and technologies as they are introduced into the SIE.  Develop and review the A&amp;A of SIE networks, cloud environments, systems, services, telecommunication circuits, mobile devices, portable electronic devices, hardware, and software using the DoD &amp; IC RMF to obtain an Authority to Operate (ATO), Interim Authority to Test (IATT), or Authority to Connect (ATC).  Perform risk and vulnerability assessments of IT and IS for authorization; prepare risk assessment reports for submission to the SCA and Authorizing Official/Designated Authorizing Official/Designated Accrediting Authority (AO/DAO/DAA) in accordance with DoD, DIA, USCYBERCOM, USSOCOM, Component Command, TSOC, and deployed forces’ policies, procedures, and regulations.  Assist USSOCOM, its Component Commands, TSOCs and deployed forces with the enforcement of A&amp;A, as well as DoD, DIA, USSOCOM, Component Command, TSOC, and deployed forces’ connection standards for networks and systems.  Track and maintain A&amp;A databases, web sites and tools to ensure that networks, systems and devices are properly documented and managed from a cybersecurity perspective.  Track and report to higher headquarters organizations (e.g. USCYBERCOM, DIA) compliance with applicable Cybersecurity regulations and directives.  Ensure timely notifications are made to responsible individuals and organization in order to prevent lapses in accreditations (e.g., 30,60, and90 day notices).  Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing awareness of information security, vulnerabilities, security controls, and threats to support organizational risk management decisions.  Identify, assess, and advise on cybersecurity control compliance and associated risks. Coordinate with USCYBERCOM, DoD, DIA, NSA, DISA, and subordinate organizations to support the resolution of issues with security, A&amp;A, connection approvals, and waiver requests.  Perform network, cloud, information systems, hardware, software and device security authorization and assessments, as well as the application and execution of policy, including project management support services.  Validate the patching of systems, perform validation scanning, develop Plans of Action &amp; Milestone (POA&amp;Ms), and report as directed by applicable policies, procedures, and regulations.  Provide subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies.  Develop and implement required processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.  Identify, implement and validate continued effectiveness of key performance parameters and applied security measures  Perform analytics on cybersecurity posture and provide reports to the AO/DAO and applicable stakeholders as required per ISCM and AO/DAO direction. Knowledge, Skills and Abilities: Experience with the US Combatant Commands (USCENTCOM/USSOCOM) is desired. Technical background with system administration experience, architecture and engineering preferred Technical background in networking, identity management, Microsoft and Linux operating systems, database, and mobility Working knowledge of the RMF. Knowledge of the Telos Xacta or Enterprise Mission Assurance Support Services (eMASS) system is desired. Must have excellent communications skill (written and oral) and interpersonal skills. Knowledge and experience with DoD IA processes and policies (e.g., DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a>, NIST, CNSS and other cybersecurity policies, Chairman of the Joint Chiefs of Staff Manual (CJCSM) <a href="http://65101.01" rel="noopener noreferrer nofollow ugc" target="_blank">65101.01</a>, Incident Response and other IA policies). Active TS/SCI clearance required. DoD 8570 IAM III certification (CISM, CISSP / CISSP Associate, GSLC, or CCISO) MA/MS degree5+ years of experienceHalvik offers a competitive full benefits package including:Company-supported medical, dental, vision, life, STD, and LTD insuranceBenefits include 11 federal holidays and PTO.401(k) with company matchingFlexible Spending Accounts for commuter, medical, and dependent care expensesTuition AssistanceCharitable Contribution matchingTo comply with the guidance provided by the <a href="https://www.saferfederalworkforce.gov/overview/" rel="noopener noreferrer nofollow ugc" target="_blank">Safer Federal Workforce Task Force (Task Force) </a>for Federal Contractors and Subcontractors, Halvik is requiring COVID-19 vaccinations for all their employees except where an employee is legally entitled to an accommodation. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Florida

Cybersecurity Systems Analyst - Intermediate

If you are looking for a rewarding career with a highly successful company that puts people first, Halvik Corp is the place for you! We are committed to delivering smarter IT-driven solutions bolstered by quality and innovation to help the US Federal Government succeed. Join our growing team and make a difference!Cybersecurity Systems Analyst Performs assessment and authorization coordination. Advises and assists the customer with Risk Management Framework (RMF) and develops a Plan of Action and Milestones for resolving network deficiencies in accordance with DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a> and ICD 503. The duties of this task include assessing network compliance against controls listed in NIST 800-53 and creating A&amp;A packages. Performs assessment, compliance, and validation of IT systems to support the Cybersecurity program at USSOCOM, its component Commands, TSOCs, and deployed forces. The Contractor shall execute a comprehensive assessment, compliance and validation of customer networks to ensure compliance with regulations and security and standards. The end goal is to ensure the integrity of customer systems by identifying and mitigating potential shortcomings and vulnerabilities. Advise USSOCOM, its Component Commands, TSOCs, and deployed forces on network and system risks, risk mitigation courses of action, and operational. Additionally, the Cybersecurity Systems Analyst should be able to perform security evaluations and vulnerability assessments using the DOD Assured Compliance Assessment Solution (ACAS), Nessus vulnerability scanning tool and Security Content Automation Protocol tool. Identify applicable STIGs and perform assessments using the Security Content Automation Protocol tool. The Cybersecurity Systems Analyst will liaison with network and system administrators to correct identified deficiencies. The Cybersecurity Systems Analyst will also scan (or review scans) for new systems and applications being introduced into the SOF environment, identify issues, and draft certification letters for the government. The contractor will liaison with the Site Integration Facility (SIF) to ensure systems and application meet the standards in the DISA Security Technical Implementation Guides (STIG). The Cybersecurity Systems analyst should be knowledgeable of cyber network defense tools such as end point security, SIEM, comply to connect, etc. Typical duties include:  Tracks A&amp;A status of SIE governed ISs. Ensures these artifacts and documentation are available in the USSOCOM-chosen automated tool.  Advises stakeholders on the adequacy of implementation of cybersecurity requirements.  Provide DoD &amp; IC RMF subject matter expertise to USSOCOM, its Component Commands, TSOCs, deployed forces and their delegates, including other Contractors, and assist with the development and execution of the RMF program at USSOCOM, its Component Commands, TSOCs, and deployed forces.  Maintain, track, and validate DISN, cloud and DIA connection approval packages, including those from USSOCOM, its Component Commands, TSOCs, and other subordinate organizations.  Develop and maintain supporting documentation for new and existing networks, cloud environments, information systems and technologies as they are introduced into the SIE.  Develop and review the A&amp;A of SIE networks, cloud environments, systems, services, telecommunication circuits, mobile devices, portable electronic devices, hardware, and software using the DoD &amp; IC RMF to obtain an Authority to Operate (ATO), Interim Authority to Test (IATT), or Authority to Connect (ATC).  Perform risk and vulnerability assessments of IT and IS for authorization; prepare risk assessment reports for submission to the SCA and Authorizing Official/Designated Authorizing Official/Designated Accrediting Authority (AO/DAO/DAA) in accordance with DoD, DIA, USCYBERCOM, USSOCOM, Component Command, TSOC, and deployed forces’ policies, procedures, and regulations.  Assist USSOCOM, its Component Commands, TSOCs and deployed forces with the enforcement of A&amp;A, as well as DoD, DIA, USSOCOM, Component Command, TSOC, and deployed forces’ connection standards for networks and systems.  Track and maintain A&amp;A databases, web sites and tools to ensure that networks, systems and devices are properly documented and managed from a cybersecurity perspective.  Track and report to higher headquarters organizations (e.g. USCYBERCOM, DIA) compliance with applicable Cybersecurity regulations and directives.  Ensure timely notifications are made to responsible individuals and organization in order to prevent lapses in accreditations (e.g., 30,60, and90 day notices).  Develop and maintain an Information Security Continuous Monitoring (ISCM) Plan. This plan shall address ongoing awareness of information security, vulnerabilities, security controls, and threats to support organizational risk management decisions.  Identify, assess, and advise on cybersecurity control compliance and associated risks. Coordinate with USCYBERCOM, DoD, DIA, NSA, DISA, and subordinate organizations to support the resolution of issues with security, A&amp;A, connection approvals, and waiver requests.  Perform network, cloud, information systems, hardware, software and device security authorization and assessments, as well as the application and execution of policy, including project management support services.  Validate the patching of systems, perform validation scanning, develop Plans of Action &amp; Milestone (POA&amp;Ms), and report as directed by applicable policies, procedures, and regulations.  Provide subject matter expertise for COA development and the implementation of Cybersecurity mitigation strategies.  Develop and implement required processes, procedures, and capabilities to mitigate vulnerabilities and weaknesses for software and hardware deployment.  Identify, implement and validate continued effectiveness of key performance parameters and applied security measures  Perform analytics on cybersecurity posture and provide reports to the AO/DAO and applicable stakeholders as required per ISCM and AO/DAO direction. Knowledge, Skills and Abilities: Experience with the US Combatant Commands (USCENTCOM/USSOCOM) is desired. Technical background with system administration experience, architecture and engineering preferred Technical background in networking, identity management, Microsoft and Linux operating systems, database, and mobility Working knowledge of the RMF. Knowledge of the Telos Xacta or Enterprise Mission Assurance Support Services (eMASS) system is desired. Must have excellent communications skill (written and oral) and interpersonal skills. Knowledge and experience with DoD IA processes and policies (e.g., DODI <a href="http://8510.01" rel="noopener noreferrer nofollow ugc" target="_blank">8510.01</a>, NIST, CNSS and other cybersecurity policies, Chairman of the Joint Chiefs of Staff Manual (CJCSM) <a href="http://65101.01" rel="noopener noreferrer nofollow ugc" target="_blank">65101.01</a>, Incident Response and other IA policies). Active TS/SCI clearance required. DoD 8570 IAM III certification (CISM, CISSP / CISSP Associate, GSLC, or CCISO) MA/MS degree8+ years of experienceHalvik offers a competitive full benefits package including:Company-supported medical, dental, vision, life, STD, and LTD insuranceBenefits include 11 federal holidays and PTO.401(k) with company matchingFlexible Spending Accounts for commuter, medical, and dependent care expensesTuition AssistanceCharitable Contribution matchingTo comply with the guidance provided by the <a href="https://www.saferfederalworkforce.gov/overview/" rel="noopener noreferrer nofollow ugc" target="_blank">Safer Federal Workforce Task Force (Task Force) </a>for Federal Contractors and Subcontractors, Halvik is requiring COVID-19 vaccinations for all their employees except where an employee is legally entitled to an accommodation. Halvik Corp is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

Washington

Cybersecurity Systems Analyst - Senior

About the Role In GoTo, the growth of our business is continuously challenged by the fast pace of technology development and regulatory changes. As the IT Audit Senior Manager, you will be leading the IT Audit side of the Internal Audit Function with broad discretion in developing a strong foundational technology assurance framework. You will grow both technically and professionally through interaction with one of the most dynamic and driven management teams, exposure to the latest technologies, and observing first-hand on tech-enabled business strategy.<h3>What You Will Do</h3><ul><ul><li>Lead and supervise a team of IT Auditors in the planning, preparation, coordination, and execution of audits to evaluate the adequacy and effectiveness of technology infrastructure, application, and process controls.</li><li>Provide clear, concise, and organized documentation of the audit processes and findings.</li><li>Identify and evaluate complex technology and business risks, implications, and related opportunities for improvements of internal controls.</li><li>Manage audit projects effectively – resource allocation, delivery on commitment, time management, and quality reviews.</li><li>Proactively engage and communicate effectively with related stakeholders throughout the entirety of the audit process.</li><li>Support the development of the foundational audit methodology for the technology audit and provide training to the team.</li><li>Continuously develop and improve your technical skillset through self-studies and training/certification program.</li></ul></ul><h3>What You Will Need</h3><ul><ul><li>Minimum of 10 years of IT audit experience (with at least 5 years in an audit firm), CISA certified and one other technical/professional certification relevant to technology audit (e.g., ITIL, DASA, CISSP, CCSP, CISM, COBIT, ISO, etc.).</li><li>Prior exposure to auditing across broad technology domains such as IT infrastructure, application, databases, SAP, information security / cyber, cloud, SDLC / Agile / DevSecOps, IAM, data privacy, BCP / DRP and / or SOX, etc. is a strong advantage.</li><li>Knowledgeable about standards and regulatory requirements, experienced in performing technology risk assessment in compliance with OJK and Bank Indonesia (BI) reporting requirements. </li><li>Prior experience in performing IT compliance or due diligence work is an advantage.</li><li>Must have strong knowledge of audit methodology – audit planning/communication, audit program development, control testing approach, work paper documentation, work paper review, and reporting (concise write-ups).</li><li>Experienced with using data analytics and/or CAAT tools and demonstrated experience in building or applying data analytics in auditing is a plus.</li><li>Good leadership skills, experience with coaching and developing junior team members, strong confidence to interact with management and senior stakeholders,</li></ul></ul>About the Team Our team, GoTo Internal Audit, is an expanding group of like-minded auditors with growing domain expertise in our respective domains. As Internal Audit in GoTo, our charge is to support the oversight responsibilities of the Board and advise Management on matters relating to operational efficiencies, risk management, and asset safeguards across Gojek, Tokopedia and GoTo Financial.We aim to become a trusted business partner by consistently delivering high-quality audits by evaluating and improving operational excellence through better control and governance practices and providing valuable inputs in terms of transparency of performance against business goals. As a public company, we also assist in the protection of stakeholders’ interests in safeguarding assets and compliance with regulatory requirements.Our work is balanced by the team’s shared love of food! In joining our team, expect to be invited to the various forays to the team’s curated list of well-loved restaurants and intrepid journeys to new eateries.About GoTo GroupGoTo is the largest technology group in Indonesia, combining on-demand, e-commerce, and financial services through the Gojek, Tokopedia, and GoTo Financial brands. It is the first platform in Southeast Asia to host these three essential use cases in one ecosystem, capturing a majority of Indonesian consumer household expenditure.GoTo’s mission is to “Empower Progress” by offering an unparalleled selection of goods and services through a comprehensive merchant and partner network and promoting financial inclusion through its leading payments and financial services business.About GojekGojek is a Super App. It is one app for ordering food, commuting, digital payments, shopping, hyper-local delivery, and a dozen other products. We are Indonesia’s first decacorn. We are  also the only Southeast Asian startup to be part of Fortune's list of 'Companies That Changed The World.'Our Mission: To create and scale positive socio-economic impact for our customers, driver-partners, business, and MSMEs.As of 2018, Gojek processed more than $9 billion in annualized gross transaction value across all markets where it operates - in Singapore, Vietnam, and Indonesia. We have the largest food delivery product in Asia (outside of China) and is the largest payments wallet in Southeast Asia.Gojek contributed IDR 249 T to the Indonesian economy (equivalent to 2% of Indonesia's GDP in 2020). As of Q1 2021, the Gojek App witnessed over 190mn downloads by customers. The platform has over 2mn Driver Partners &amp; ~900000 Merchant Partners across SEA.About GoTo FinancialGoTo Financial brings secure, reliable, and user-friendly financial solutions to over 55 million monthly active users, more than 14 million merchants, and over 2.5 million driver-partners eager to benefit from the digital economy in the GoTo ecosystem.GoTo Financial’s consumer services include GoPay, GoPayLater, and other financial services. We also serve businesses of all sizes through leading payment gateway Midtrans, Indonesia’s largest cloud POS network Moka and GoKasir. We also have the all-in-one merchant solution GoBiz, GoBiz Plus, GoStore, and Selly - available in Indonesia and Southeast Asia.GoTo group of companies is committed to building a diverse and inclusive workplace and is an equal opportunity employer. We do not discriminate on the basis of race, religion, national origin, gender, gender identity, sexual orientation, disability, age, education status, or any other legally protected status.

IT Audit Senior Manager

City

The Email Security Analyst is responsible for providing support to email security and brand protection functions, projects, and programs. The Analyst will provide operational support, intelligence gathering, analysis and report development, publishing, and briefing. Besides managing aspects of the day-to-day function of these programs, he or she will partner with various cyber and information security teams to enhance current solutions and find new solutions to stay ahead of the ever-changing cyber threat. The position will require substantial collaboration with other members of the team and across other Cyber Security Operations teams ensuring appropriate email security support and solutions are triaged appropriately.#CISOResponsibilities:<ul><li>Actively monitor and research cyber threats with a direct or indirect impact to the Citi brand.</li><li>Analyze and provide oversight of analysis of email threats and controls.</li><li>Develop and manage processes to track identified incidents to resolution.</li><li>Develop metrics and reports as needed.</li><li>Triage information received from vendors and process that information through previously defined internal workflows.</li><li>Manage meetings with internal stakeholders to address open issues and identify process improvements.</li><li>Actively engage in liaison activities with intelligence communities, industry associations, peer institutions, and information sharing communities.</li><li>Apply developed communication and diplomacy skills to guide and influence decision makers.</li></ul>Qualifications:<ul><li>Technical and analytical expertise and experience (preferred 2+ years’ Information Technology/ Cybersecurity experience).</li><li>Understanding of and demonstrated experience with the tools and sources available to conduct email and threat analysis.</li><li>Cross-functional understanding of email operations, security practices and the user experience.</li><li>Ability to organize and appropriately prioritize multiple, ongoing tasks via efficient time management and forecasting. Project management skills a plus.</li><li>Ability to work independently, as well as in team situations, to help internal and external customers achieve desired results.</li><li>Strong written and verbal communication and presentation skills.</li></ul>Education:<ul><li>Bachelor’s degree/University degree or equivalent work experience;</li><li>IS Certifications are desired, though optional (CISSP, GSEC, GCFA, GREM, Security+, CISA, CISM). </li></ul>Benefits:<ul><li>Competitive compensation package with a wide range of benefits:<ul><li>Cafeteria Program</li><li>Home Office Allowance - for colleagues working in hybrid and remote work models</li><li>Paid Parental Leave Program - maternity leave and paternity leave</li><li>Private Medical Care Program and onsite medical rooms at our offices</li><li>Pension Plan Contribution to voluntary pension fund</li><li>Group Life Insurance</li><li>Employee Assistance Program</li></ul></li><li>Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed</li><li>Flexible work arrangements to support colleagues’ in managing work - life balance</li><li>Continuous career progression opportunities across geographies and business lines</li><li>Inclusive and friendly corporate culture</li><li>Socially active employee communities with diverse networking opportunities</li></ul>Sounds like Citi has everything you need? Apply to join the world’s most global bank and discover the true extent of your capabilities.-------------------------------------------------Job Family Group: Technology-------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Budapest

Email Security Analyst (Hyrbid)

The Email Security Senior Analyst is responsible for providing expert support and leadership to email security and brand protection functions, projects, and programs. They will be responsible for interactions with vendors, employees, and stakeholders of the team’s services. The Senior Analyst will provide operational support, intelligence gathering, project and program management, analysis and report development, publishing, and briefing. Besides managing aspects of the day-to-day function of these programs, he or she will partner with various cyber and information security teams to enhance current solutions and find new solutions to stay ahead of the ever-changing cyber threat.The position will require substantial collaboration with other members of the team and across other Cyber Security Operations teams ensuring appropriate email security support and solutions are triaged appropriately.#CISOResponsibilities:<ul><li>Provide expertise and experience to existing and future functions and projects focused on email threats and controls.</li><li>Actively monitor and research cyber threats with a direct or indirect impact to the Citi brand</li><li>Analyze and provide oversight of analysis of email threats and controls.</li><li>Provide leadership, solution design, and hands-on development support for email security controls.</li><li>Develop and manage processes to track identified incidents to resolution.</li><li>Develop weekly, monthly, quarterly, and annual metrics and reports as needed.</li><li>Develop written analytical reports and give presentations on findings.</li><li>Triage information received from vendors and process that information through previously defined internal workflows.</li></ul>Qualifications:<ul><li>Highly technical and analytical expertise, with a proven deep background (preferred 5+ years’ IT experience in addition to cybersecurity) in technology design, implementation, and delivery.</li><li>Minimum 3+ years working in security engineering or security operations role, with a focus on email security.</li><li>Strong understanding of and demonstrated experience with the tools and sources available to conduct email and threat analysis.</li><li>Experience with enterprise phishing defense concepts and technologies.</li><li>Cross-functional understanding of email operations, security practices and the user experience</li><li>Ability to identify and develop new processes to address cross-functional and cross-business requirements and implement.</li><li>Ability to manage projects and ensure tasks are being met timely. Work with leaders of Cyber Security Operations teams to track, drive and report on strategic initiatives.</li><li>Ability to organize and appropriately prioritize multiple, ongoing tasks via efficient time management and forecasting. Project management skills a plus.</li></ul>Education:<ul><li>Bachelor’s degree or equivalent work experience;</li><li>IS Certifications are desired (CISSP, GSEC, GCFA, GREM, Security+, CISA, CISM). </li><li>Email vendor certifications a plus.</li></ul>Benefits:<ul><li>Competitive compensation package with a wide range of benefits:<ul><li>Cafeteria Program</li><li>Home Office Allowance - for colleagues working in hybrid and remote work models</li><li>Paid Parental Leave Program - maternity leave and paternity leave</li><li>Private Medical Care Program and onsite medical rooms at our offices</li><li>Pension Plan Contribution to voluntary pension fund</li><li>Group Life Insurance</li><li>Employee Assistance Program</li></ul></li><li>Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed</li><li>Flexible work arrangements to support colleagues’ in managing work - life balance</li><li>Continuous career progression opportunities across geographies and business lines</li><li>Inclusive and friendly corporate culture</li><li>Socially active employee communities with diverse networking opportunities</li></ul>Sounds like Citi has everything you need? Apply to join the world’s most global bank and discover the true extent of your capabilities.-------------------------------------------------Job Family Group: Technology-------------------------------------------------Job Family:Information Security------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Email Security Senior Analyst (Hybrid)

Join Citi's forward-thinking security organization as a Cyber Security Engineer, where you will have the opportunity to shape the future of the Cyber Security in Citi. With a focus on cutting-edge technologies and industry best practices, you will design and implement robust security solutions that safeguard the organization against evolving cyber risks.As a Senior Cyber Security Engineer, you will:<ul><li>Design, configure, and implement Check Point firewall solutions to meet clients' security requirements</li><li>Collaborate with other cyber security professionals to evaluate and integrate new security technologies to design and implement comprehensive security controls that meet business and regulatory requirements.</li><li>Implement security best practices and policies to maintain the highest level of security</li><li>Stay up-to-date with the latest cyber security technologies and trends</li><li>Write technical reports, user guides, and author, maintain, and update technical documentation, ensuring compliance with industry standards</li><li>Conduct security assessments, penetration testing, and threat modeling to identify and remediate vulnerabilities in systems, applications, and networks</li></ul>Ideal background:<ul><li>The ideal candidate will have a deep understanding of Check Point firewall technology and will be responsible for designing, implementing, and maintaining firewalls and related security solutions</li><li>5+ years of experience in cyber security, with a strong background in security engineering, incident response, threat intelligence, and risk management</li><li>Excellent communication and interpersonal skills, with the ability to work effectively with cross-functional teams and stakeholders at all levels of the organization</li><li>Strong hands-on experience with firewall deployment, configuration, and troubleshooting</li><li>Understanding of security protocols, such as VPN, IPsec, and SSL/TLS and experience with network security, including firewalls, IDS/IPS, and VPNs</li><li>Familiarity with security best practices and industry standards, such as ISO 27001, NIST, and CIS or experience with security frameworks such as SANS, and industry certifications such as CISSP, CISM, or CISA</li><li>Familiarity with cloud security (AWS, Azure, or GCP) a plus</li></ul>Benefits:<ul><li>Competitive compensation package with a wide range of benefits:<ul><li>Cafeteria Program</li><li>Home Office Allowance - for colleagues working in hybrid and remote work models</li><li>Paid Parental Leave Program - maternity leave and paternity leave</li><li>Private Medical Care Program and onsite medical rooms at our offices</li><li>Pension Plan Contribution to voluntary pension fund</li><li>Group Life Insurance</li><li>Employee Assistance Program</li></ul></li><li>Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed</li><li>Flexible work arrangements to support colleagues’ in managing work - life balance</li><li>Continuous career progression opportunities across geographies and business lines</li><li>Inclusive and friendly corporate culture</li><li>Socially active employee communities with diverse networking opportunities</li></ul>Apply to join the world’s most global bank and discover the true extent of your capabilities!-------------------------------------------------Job Family Group: Technology-------------------------------------------------Job Family:Systems &amp; Engineering------------------------------------------------------Time Type:Full time------------------------------------------------------Citi is an equal opportunity and affirmative action employer.Qualified applicants will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.Citigroup Inc. and its subsidiaries ("Citi”) invite all qualified interested applicants to apply for career opportunities. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review <a href="https://www.citigroup.com/citi/accessibility/application-accessibility.htm" rel="noopener noreferrer nofollow ugc" target="_blank">Accessibility at Citi</a>.View the "<a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/eeopost.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law</a>" poster. View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/regs/compliance/posters/pdf/OFCCP_EEO_Supplement_Final_JRF_QA_508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO is the Law Supplement</a>.View the <a href="http://citi.com/citi/diversity/assets/pdf/eeo_aa_policy.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">EEO Policy Statement</a>.View the <a href="https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf" rel="noopener noreferrer nofollow ugc" target="_blank">Pay Transparency Posting</a>

Senior Cyber Security Engineer (Hybrid)

Apply to CISM Cyber Security Jobs in companies remotely and near you. New CISM Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Senior IT Internal Auditor at Gojek	Full Time CISM Audit
Third Party Information Security Assessor at Halvik	Full Time CISM Audit Manager
Cybersecurity Analyst - Mobile Devices at Halvik	Full Time CISM CISO Analyst Manager
Cybersecurity Systems Analyst - Intermediate at Halvik	Full Time CISM CISO Analyst Incident Response
Cybersecurity Systems Analyst - Senior at Halvik	Full Time CISM CISO Analyst Incident Response
IT Audit Senior Manager at Gojek	Full Time CISM Audit Manager Devsecops
Email Security Analyst (Hyrbid) at City	Remote Full Time CISM CISO Analyst
Email Security Senior Analyst (Hybrid) at City	Remote Full Time CISM CISO Analyst
Senior Cyber Security Engineer (Hybrid) at City	Remote Full Time CISM Incident Response

CISM Cyber Security Jobs

9 CISM Cyber Security Jobs found. Page 1 of 1

Subscribe to the weekly
Cyber Security Jobs Newsletter

CISM Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Cyber Security Jobs by Location

CISM Cyber Security Jobs

9 CISM Cyber Security Jobs found. Page 1 of 1

Subscribe to the weekly Cyber Security Jobs Newsletter

CISM Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Cyber Security Jobs by Location

Subscribe to the weekly
Cyber Security Jobs Newsletter