CRI Group

Nature of the tasks- Contribute to the design of the overall application security.- Define security requirements and derive technical actions targeting the application components and the code base.- Analyse SAST and DAST findings (initial triage with the team), performing code review of implemented corrections.- Draft documentation such as architecture design descriptions, assessment reports and configuration descriptions.- Take an active part in developing and improving the application security, and have it understood and implemented by the team.- Analyse risks and security policy requirements and propose actions.- Vulnerability testing definition of corrective actions.- Categorize events, incidents and vulnerabilities based on relevance, exposure and impact.- Advance security enhancements in DevSecOps processes.- Provide security training and education.- Draft security programmes, security plans and propose implementation actions.- Animate the Security Champions communitySkills and knowledge- Experience with ISO 27000 family of standards or equivalent security standards implementation. - Knowledge of ITSRM2 is a plus.- Excellent knowledge of application security.- Experience in the security aspect of software development (i.e.: authentication with open id connect - SAML or CAS, secure rest or web services, encryption with PKI, authorisation, secrets management).- Experience with secure IT development patterns.- Experience in the security domain- Understanding of risk assessments- Experience in penetration testing and ethical hacking (i.e.: usage of tools like Metasploit, Burpsuite or equivalent).- Experience with security test tools (i.e.: Fortify or equivalent) and web site vulnerability scans.- Good understanding of the 3rd party dependency security (libraries, container and VM images).- Knowledge of OWASP.- Proven experience in Information Systems Development and Information Systems Security, preferably for Java EE technology (at minimum understanding the code and architectural blueprints, however hands-on programming experience is a plus- Knowledge of Agile methodology- Autonomous and rapid self-starting capability.- Strong organisational and time-management skills. - Strong team spirit.- Ability to apply high quality standards.- Capability of integration in an international/multi-cultural environment.- Ability to participate in multi-lingual meetings.- Ability to understand, speak and write English (B2 level)- Proactive attitude, communicative (e.g., good listener) and customer-oriented.Specific expertise and technologies- at least 5 years of specific expertise in Owasp standard (min. competence level 4 to 5)- at least 5 years of specific expertise in IT development patterns IT development patterns and architecture (min. competence level 4 to 5)- at least 5 years of specific expertise in Experience with security test tools SAST , DAST (min. competence level 4 to 5)CERTIFICATIONS:At least one following certificates are required for the performance of tasks:- Certified Information Systems Security Professional (CISSP), - Certified Information Security Manager (CISM), - Certified Ethical Hacker (CEH), Offensive Security - Certified Professional (OSCP) - or equivalent - to be approved by the Commission
The following documents / procedures will be requested to successfully complete the hiring process :
<ul>
<li>A copy of your university degree(s)</li>
<li>A copy of your criminal record</li>
<li>Security Clearance Procedure</li>
</ul>
WHO WE ARE?
CRI company part of VASS Group, leads the digital transformation and cyber security in the European Union.
CRI operates serving the European Union Institutions, telecom operators, financial institutions and governmental bodies through a comprehensive offering of services and technologies.
Please visit our website and let's get in touch: <a href="https://cri-group.eu/" rel="noopener noreferrer nofollow ugc" target="_blank">www.cri-group.eu</a>

Brussel

Expert in Secure Development with application security Expertise

WHAT IS BOX?Box is the market leader for Cloud Content Management. Our mission is to power how the world works together. Box is partnering with enterprise organizations to accelerate their digital transformation by creating a single platform for secure content management, collaboration and workflow. We have an amazing opportunity to further establish ourselves as leaders in the space, and we need strong advocates to help us achieve that goal.
By joining Box, you will have the unique opportunity to help capture a majority of this developing market and define what content management looks like for the digital enterprise. Today, Box powers over 100,000 businesses, including 67% of the Fortune 500 who trust Box to manage their content in the cloud.
WHAT YOU'LL DO 
<ul>
<li>
Provide compliance guidance on new product features, deviations, and changes in the infrastructure
</li>
<li>
Implement improvements by assessing the current environment, evaluate trends, and anticipating future enhancements/requirements
</li>
<li>
Assess any M&amp;A activities for new products that Box is interested in, assess the existing security and compliance posture, and provide guidance on implementing products into Box's production environment
</li>
<li>
Provide guidance, knowledge papers, and FAQs for customers on new products regarding Security and Compliance, and the impact it has on compliance certifications
</li>
<li>
Work with the Box's Architecture Council to create repeatable patterns for deployments
</li>
<li>
Proactively identify issues related to our Compliance with existing and future standards and find solutions with the Engineering teams to address
</li>
<li>
Participate in cloud and application security strategic planning and execution
</li>
<li>
Drive improvements in existing processes and develop new innovative and efficient solutions
</li>
<li>
Communicate gaps to management and coordinate cross functional team meetings to remediate and close the control gaps
</li>
<li>
Build relationships with internal and external stakeholders
</li>
</ul>
WHO YOU ARE 
<ul>
<li>
5+ years of professional experience working in a SaaS company in GRC, Information Security or similar position
</li>
<li>
Expertise in cloud computing with experience in GCP products and services
</li>
<li>
Strong understanding of information security frameworks, such as FedRAMP, PCI, ISO 27000 Series, and SOC
</li>
<li>
BS degree in Business or Management Information Systems or related field OR equivalent work experience
</li>
<li>
CISSP, GSEC, CISM or other related certifications a plus
</li>
</ul>
<ul>
<li>
Excellent written, verbal communication and presentation skills with a willingness to wear different hats and work in areas where needed
</li>
<li>
Amazing organizational skills with a drive to succeed in a fast-paced environment
</li>
<li>
Ability to hustle, get stuff done, and has strong integrity - make mom proud!
</li>
</ul>

BENEFITS
<ul>
<li>Visit this webpage to check out all of our exciting healthcare benefits: <a href="https://join.collectivehealth.com/box" rel="noopener noreferrer nofollow ugc" target="_blank">https://join.collectivehealth.com/box</a></li>
<li>For all other benefits, please check out: <a href="https://cloud.box.com/s/3u38zhdv4gac9h0j7lmumm7arbe14yqa" rel="noopener noreferrer nofollow ugc" target="_blank">Box Benefits + Perks</a></li>
</ul>
EQUAL OPPORTUNITYWe are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability, and any other protected ground of discrimination under applicable human rights legislation. Box strives to respect the dignity and ‎‎independence of people with disabilities and is committed to giving them the same ‎‎opportunity to succeed as all other employees. Accommodations are available ‎throughout ‎the application process and an employee’s employment at Box.
HEALTH AND SAFETYTo promote the health and safety of all Boxers and our communities, in order to "Go to Work" at Box in the U.S., you must be Fully Vaccinated or have an approved accommodation. "Go(ing) to Work" at Box is defined as visiting a Box office, facility, or co-working site, visiting or meeting in person with fellow Boxers, Box clients and/or customers, vendors, or partners, engaging in business travel, and or participating in any Box-sponsored and/or related activity where others are present. If you are fully remote and do not "Go to Work,” the vaccination requirement is not applicable.  "Fully Vaccinated" means that an individual is at least two weeks past their final dose of an authorized COVID-19 vaccine regimen. If you are unable to get a vaccine due to a medical condition, a sincerely-held religious belief or another legally recognized reason, Box will consider requests for an accommodation.

 
 

#LI-KN1 #LI-REMOTE

North America

Product Compliance Manager, GRC

Veeva Systems

Veeva [NYSE: VEEV] is the leader in cloud-based software for the global life sciences industry. Committed to innovation, product excellence, and customer success, our customers range from the world’s largest pharmaceutical companies to emerging biotechs. Veeva’s software helps our customers bring medicines and therapies to patients faster.We are the first public company to become a <a href="https://www.veeva.com/pbc/" rel="noopener noreferrer nofollow ugc" target="_blank">Public Benefit Corporation</a>. As a PBC, we are committed to making the industries we serve more productive, and we are committed to creating high-quality employment opportunities.Veeva is a <a href="https://www.veeva.com/work-anywhere/" rel="noopener noreferrer nofollow ugc" target="_blank">Work Anywhere</a> company which means that you can choose to work in the environment that works best for you - on any given day. Whether you choose to work remotely from home or work in an office - it’s up to you.<a href="https://bizj.us/1q6ubv" rel="noopener noreferrer nofollow ugc" target="_blank">Veeva was recently named the #1 Best Place to Work in Central Ohio by Columbus Business First.</a>The RoleVeeva’s Security Compliance and Audit team is seeking a Compliance Automation Engineer to improve the efficiency and accuracy of its compliance operations. As an automation engineer, you will be part of team that helps Veeva ensure ongoing compliance with relevant information security regulations and standards.  You will improve the overall effectiveness of compliance operations by automating steps in the evidence collection and review process, building dashboards, and building workflow support tools.You will enhance the effectiveness of Veeva’s security compliance operations by automating key processes that support third party, customer, and internal audits. These audits include ISO 27000, SOC 2, and HIPAA. You will also assist in constructing reports and dashboards that provide insight into the current compliance and risk status of the company.The Compliance Automation Engineer is expected to possess strong technical and interpersonal skills. The person in this position will work with teams throughout Veeva to identify automation opportunities and implement them. The Engineer is expected to show good judgement in designing secure solutions, prioritizing work, and selecting technologies. A strong customer focus and a team-first attitude are essential to success in this role.
<h3>What You'll Do </h3>
<ul>
<li>Identify opportunities to leverage automation for collecting, reviewing and organizing evidence in support of security audits of Veeva products. The end goal is to reduce the manual effort required to collect, review and organize evidence while at the same time improving the reliability of the evidence collection processes</li><li>Develop and enhance processes to maintain awareness of the current state of risk and compliance. This includes building dashboards and reports to show the current status of evidence collection for each audit, health of select security controls, and current information security risk posture of the company</li><li>Design, build, document, and maintain tools to support compliance operations as described above. This includes utilizing APIs, SDKs, and other technologies to integrate with various components of Veeva infrastructure as needed. Tools are expected to be reliable, secure, maintainable, and well documented</li><li>Follow established security team practices for building, testing, maintaining and documenting tools</li></ul>
<h3>Requirements </h3>
<ul>
<li>BS in Computer Science or related field, or equivalent work experience</li><li>2+ years of work experience as an application developer or application security engineer</li><li>Programming experience with one or more: Python, JAVA, Java Script, PowerShell, Bash scripting</li><li>Experience with cloud service providers, preferably AWS and its various services</li><li>Experience with Linux, Windows Server, and database technologies such as MySQL, Amazon RDS</li><li>Well versed in application design</li></ul>
<h3>Nice to Have</h3>
<ul>
<li>Knowledge of ISO 27001, SOC 2, HIPAA, GDPR</li><li>Experience with the audit process – gap analysis, evidence collection, evidence presentation, management of auditors</li><li>Understanding of network security, authentication protocols, cryptography, and application security</li><li>Knowledge of security concepts such as web application firewalls, IDS/IPS, vulnerability management</li><li>Security, risk, or compliance certification such as CISSP, CISA, CRISC, CIPP</li></ul>#LI-RemoteUS#BI-Remote Veeva’s headquarters is located in the San Francisco Bay Area with offices in more than 15 countries around the world. Veeva is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity or expression, religion, national origin or ancestry, age, disability, marital status, pregnancy, protected veteran status, protected genetic information, political affiliation, or any other characteristics protected by local laws, regulations, or ordinances. If you need assistance or accommodation due to a disability or special need when applying for a role or in our recruitment process, please contact us at talent_accommodations@veeva.com.

Ohio

Columbus

Compliance Automation Engineer

Stockbit

We are looking for an experienced and knowledgeable IT Security Governance to join our Security Engineer team. You will be responsible for the management and advances of our security policies, standards and procedures.<ul> <li>Ensure the strategy and implementation of information security in accordance with the needs &amp; applicable regulations</li> <li>Develop an information security framework and architecture in accordance with the company's needs</li> <li>Develop and maintain policies, standards, and procedures that support the information security framework in accordance with best practices and applicable regulations.</li> <li>Actively identify, analyze, measure, provide control recommendations, and monitor follow-up on risk control &amp; information security.</li> <li>Carry out regular evaluations of the implementation of IT security management policies, standards and procedures</li> </ul>Requirements<ul> <li>Minimum Bachelors degree of Information Technology</li> <li>Minimum 3 years Experience as IT/ ITES industry</li> <li>Familiar and able to implement and lead various best practices &amp; regulations for IT Security &amp; Cyber Security such as ISO 27000, CIS, NIST, GDPR, etc.</li> <li>Familiar with Security compliance or assessment tools</li> </ul>Benefits<ul> <li>Supportive teammates</li> <li>Health insurance benefits</li> <li>Self development activities that support careers</li> <li>Flexible working hours</li> <li>Remote working during pandemic</li> <li>Broaden your knowledge in financial investment</li> </ul>

DKI Jakarta

IT Security Governance

phia LLC

At phia, we hire talented and passionate people who are focused on collaborative, meaningful work, providing technical and operational subject matter expertise and support services to our partners and clients. We are looking for a Cybersecurity Risk Expert (ISSO) to support a large enterprise Cyber Risk Management team to design and administer procedures in the organization that sustains the security of the organization’s data and access to its technology and communications systems. This job is located in Merrifield, VA, with some remote capability during the pandemic at the discretion of the customer. Preferred candidates will live within a commutable distance to Fall Church, Virginia What You'll Do<ul> <li>Support the execution of product cybersecurity elements across global programs and services. </li> <li> Will work with multiple security, IT and engineering leadership/stakeholders and a variety of security, IT and engineering technical resources to identify and plan physical and cybersecurity work to meet/exceed corporate initiatives. </li> <li>Follow and develop procedures to assist in the vulnerability scans and/or implementation of security measures and controls</li> <li>Perform risk assessments for identified issues and assisting with research and identification of risk in the environment</li> <li>Conduct qualitative and quantitative risk and/or cyber risk assessments</li> <li>Provide security analysis process by applying security principles, methods (e.g., risk assessment, systems security planning, disaster recovery planning) and tools</li> <li>Review systems to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes, and document upgrades.</li> <li>Identify organization risks, prioritize those risks, and maintain a risk registry for escalating.</li> <li>Execute business impact assessments and system security reviews using a formal C&amp;A structure.</li> <li>Assess external cybersecurity risks to an organization either through customer or supplier interaction</li> <li>Follow and determine audit policy and reporting mechanisms for ensuring compliance with IA/IS standards by keeping current with IA/IS requirements.</li> <li>Develop risk management by creating plans, procedures, protocols, and evaluation measures and ensuring there are desired levels of enterprise-wide IA/IS.</li> <li>Serve as the Cyber Risk Management representative and/or advisor on various review and change control boards</li> </ul>RequirementsEducation + Experience <ul> <li>A Bachelor's Degree in Computer Science, Engineering, similar technical discipline or equivalent experience</li> <li>7 years of relevant experience</li> <li>Experience providing technical expertise across a range of security technology, techniques, and practices</li> <li>Ability to provide recommendations and explain approaches concerning risk mitigation to wide audiences</li> <li>Ability to map risk assessments to existing industry standards (e.g., ISO 27000 series, NIST publications, CIS Controls</li> <li>Proven history or working independently without supervision.</li> </ul>Certifications<ul><li>Possesses a current active industry standard certificate in the information security/assurance field: e.g. Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), Certified Authorization Professional (CAP)</li></ul>Security Clearance Requirements <ul> <li>U.S. Citizenship required</li> <li>Ability to obtain Public Trust (or higher) government clearance</li> </ul> Who You Are <ul> <li>A proactive problem solver that appreciates the challenges of working in a fast-paced, dynamic environment.</li> <li>Intellectually curious with a genuine desire to learn and advance your career.</li> <li>An effective communicator, both verbally and in writing.</li> <li>Customer service-oriented and mission-focused.</li> <li>Critical thinker with excellent problem-solving skills.</li> </ul> If your experience and qualifications aren’t a match for this position, you will remain in our database for consideration for future opportunities that may be a better fit.MPORTANT: This position may be subject to Executive Order 14042 and the Safer Federal Workforce Task Force Guidance requiring covered employees to be fully vaccinated against COVID-19, which the Federal Government is not enforcing at this time.BenefitsWho We Are phia LLC ("phia") is a Northern Virginia based, 8a certified small business established in 2011 with focus in Cyber Intelligence, Cyber Security/Defense, Intrusion Analysis &amp; Incident Response, Cyber Architecture &amp; Capability Analysis, Cyber Policy &amp; Strategy, and Information Assurance/Security. we proudly support various agencies and offices within the Department of Defense (DoD), Federal government, and private/commercial entities. phia values work-life balance and offers the following benefits to full-time employees: <ul> <li>Comprehensive medical insurance to include dental and vision</li> <li>Short Term &amp; Long-Term Disability</li> <li>401k Retirement Savings Plan with Company Match</li> <li>Tuition and Professional Development Assistance</li> <li>Flex Spending Accounts (FSA)</li> </ul> phia does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.

Merrifield

Cybersecurity Risk Expert (ISSO)

Apply to Iso 27000 Cyber Security Jobs in companies remotely and near you. New Iso 27000 Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Expert in Secure Development with application security Expertise at CRI Group	Agile Application Security Burpsuite CEH CISM
Product Compliance Manager, GRC at Box	Application Security CISM Cissp Cloud Compliance
Compliance Automation Engineer at Veeva Systems	Application Security Audits Automation AWS BASH
IT Security Governance at Stockbit	Compliance GDPR Golangvernance Iso 27000 NIST
Cybersecurity Risk Expert (ISSO) at phia LLC	C Cissp Clearance DOD GIAC

Iso 27000 Cyber Security Jobs

0 Iso 27000 Cyber Security Jobs. Page 1 of 1

5 closed iso 27000 cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Iso 27000 Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Iso 27000 Cyber Security Jobs

0 Iso 27000 Cyber Security Jobs. Page 1 of 1

5 closed iso 27000 cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Iso 27000 Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter