Total 92 Senior Executive it analyst job vacancies in Legal / Public / Security category in Malaysia

Develop policy and standards for API security.

Key Responsibilities:

Vulnerability Scanning:

• Conduct regular vulnerability scans of designated network segments and systems using industry-standard tools (e.g., Tenable, Nessus).
• Configure scans according to established schedules and scope.
• Document and maintain scan configurations, historical results, and schedules.

Analysis and Reporting:

• Perform basic analysis of scan results, identifying critical vulnerabilities and potential risks.
• Perform basic assessment of vulnerabilities, to input CVE advisories to vulnerability reports.
• Prepare clear and concise reports with vulnerability summaries, risk levels, and suggested remediation actions.
• Distribute scan reports to relevant stakeholders in a timely manner.

Stakeholder Communication and Follow-up:

• Collaborate with system owners and IT teams to provide context for findings and facilitate remediation efforts;
• Conduct weekly follow-ups with stakeholders to track remediation progress and identify any obstacles;
• Track and manage remediation follow-ups according to protocol and established processes;
• Escalate unresolved vulnerabilities or remediation delays to management, as needed.

Status Reporting:

• Create regular status reports on remediation progress for management review.

Requirements :

• Diploma with at at least 2 years' relevant experience in an IT or information security role;
• Demonstrated experience managing vulnerability scanning tools (Tenable, Nessus, Qualys, etc.);
• A good understanding of common network vulnerabilities and remediation techniques;
• Basic knowledge of security standards and best practices (e.g., OWASP, NIST);
• Capability to understand and interpret CVE technical documentation;
• Ability to analyse scan results, interpret technical data, and identify risks;
• Detail-oriented and organised with the ability to track progress across multiple stakeholders.

Additional Notes

• Contract Duration : 12 months.
• Work Arrangement : On site

An opportunity has arisen for the key role of Senior Cyber Security Technician within the Royal Wolverhampton NHS Trust.

This role is key to the operational effectiveness of cyber security measures across the organisation and will play a significant part in contributing to its compliance with national cyber security standards in line with mandated national policy and our internal Governance, Risk and Compliance Framework.

Working as part of the IT Cyber Security Team you will be responsible for penetration testing, security vulnerability assessment, patch management, managing malware detection, anti-exploit, anti-ransomware, advanced threat protection, web filtering, encryption, security information event management (SIEM) and mobile control security solutions.

You will work directly with specialties across IT and the wider organisation to ensure cyber security best practice and principles are embedded into core IT functions ensuring robust monitoring and adherence to cyber security policies and standards. Excellent communications skills are required together with an in-depth knowledge of cyber risks.

You will assist in the production of action plans and documentation across a range of cyber activities. You will assist in the provision of evidence to support the National Data Protection and Security Toolkit and assist in the assurance process for cyber security aspects of Data Protection Impact Assessments.

To design, manage, monitor and maintain ICT security systems to prevent compromise of data and hardware owned or maintained by or on behalf of the Trust. This includes, but is not limited to, systems with restricted access or security reasons, such as antivirus, malicious code prevention, web filtering, encryption, patch management software, security vulnerability scanners, network and firewall configurations.

To design, implement and enforce ICT Security policies in conjunction with the Head of Cyber Security and Trust Governance Team. To ensure provision of relevant ICT Security documents and procedures for use as evidence toward the Trust’s commitment to meeting full compliance with Information Governance data security requirements.

To resolve user reported ICT security related incidents and service requests.

To manage and lead on IT Security breaches including containment, resolution and where necessary provision of information for investigations.

To deputise for the Head of Cyber Security.

To perform regular auditing of ICT systems and analysis of results.

The Royal Wolverhampton NHS Trust is one of the largest NHS trusts in the West Midlands providing primary, acute and community services and we are incredibly proud of the diversity of both our staff and the communities we serve. We are building a workforce that can help us to fulfil our values, improve the quality of care for patients, and solve the health care problems of tomorrow. We’re passionate about the value that diversity of thinking and lived experience brings in enabling us to become a learning organisation and leader in delivering compassionate care for our patients.

We are delighted that we have been rated as “Good” by CQC. We have achieved numerous awards; The Nursing Times Best Diversity and Inclusion Practice and Best UK Employer of the Year for Nursing Staff in 2020.

The Trust is a supportive working environment committed to creating flexible working arrangements that suit your needs and as such will consider all requests from applicants who wish to work flexibly.

Please see attached Job Description/Person Specification for a full detail of role and main responsibilities


This advert closes on Monday 8 Apr 2024

Role: Penetration Tester / Pen Tester 

Location: Bangalore

Expeirence Range: 6-8 Years 

Roles & Responsibilities:

As a Pen Tester/ Information Security Consultant at Resillion, your key responsibilities include:

1. Performing manual penetration tests on IT Systems, including applications and infrastructure, by defining test procedures, executing tests, creating test reports, and following up on reported weaknesses.
2. Assessing the security status of individual applications and the infrastructure landscape.
3. Developing automatic test environments and automatic tests as needed.
4. Providing support to other Information Security functions such as Vulnerability Management (e.g., assessing vulnerabilities) and Incident Management (in a consulting capacity).
5. Delivering various engagements for customers in and the UK, contributing as a technical point of contact in meetings, advising on project scoping, and conducting peer reviews of consultants' output.
6. Representing Resillion at trade shows and events, including giving presentations based on experience.

 

Maintain, further develop and assist in implementation of Information Security Management Systems in use within the ICS in line with the requirements of Data Security and Protection Toolkit, National Guidelines and Security Best practice Support the development of good practice and workable security operating procedures in relation to cyber security across the system and provide specialist knowledge and analyse to improve the safety and stability of systems.Propose changes and improvements to IT security policies and procedures, implementing changes under the direction of Cyber Security Lead Provide proactive monitoring, review, analysis and interpretation of security incidents and alerts using security technologies such as Sophos Central management console, Microsoft Defender for Endpoint and other security platforms, to ensure that alerts are resolved quickly by the appropriate team Act as a senior member of the team responsible for the monitoring, detection and response to cyber security events, ensuring the appropriate technical response and timely remediation of threat alerts Act as an escalation and co-ordination point for cyber related incidents. investigate suspected and actual breaches of IT security and undertake reporting/remedial action as required Be part of an on call rota to cover security related events outside of working hours alongside the wider CITS 24\7 service. Maintain detailed logs of any security events, incidents and remedial recommendations and actions taken Perform ongoing IT Security risk assessments and audits to ensure that IT Systems are adequately protected Coordinate work with the wider IT operational and project teams, information asset owners and system managers to ensure all solutions utilise IT Security best practices Work with vendors, outside consultants and other 3rd parties to improve IT security within the organisation Help facilitate regular penetration testing exercises of the Trusts perimeter network, to gather intelligence from these exercises and use these to generate lessons learned and drive Continuous Improvement Collaborate with cyber security team colleagues to prepare operational security reports and KPIs, including security event and security incident alerts from network, infrastructure, end point, database, application and data security controls. Responsible for ensuring that at all times, the highest standards of customer service are delivered. Provide advice and act, where necessary, in response to Audit findings and recommendations in respect of information security Review and advise on IT Security patches, software updates and vulnerabilities according to best practices Identify threats to the confidentiality, integrity, availability, accountability and relevant compliance for information systems and provide authoritative advice and guidance on the application and operation of all types of security controls. Work closely with organisation information governance teams to maintain legislative and regulatory requirements in regards to data protection and records management Maintain currency with security and security enhancing technologies and brief colleagues as needed to enable measures, to be implemented where and when necessary or desirable Ensure that access control, disaster recovery, business continuity, incident response and risk management needs are appropriately addressed Review cyber security threat notifications received from the NHS Digital Carecert service, using detailed log information, a variety of software utilities and software management tools to identify potential threats and eliminate false positives Demonstrate a detailed knowledge and experience of the installation, configuration and maintenance of PCs and mobile devices and an understanding of network protocols, including TCP/IP, and their use in relation to network operating systems and perimeter security Apply a comprehensive knowledge of best practice in relation to cyber-security, malware prevention and critical security updates and a knowledge of Microsoft Windows server technologies and Active Directory infrastructure and be able to communicate requirements to a wide variety of users Ensure personal prioritisation and management of allocated tasks and workload

Job Responsibilities:

• Manage and implement Security projects
• Maintain Global IT Security Standards and Policy.
• Conduct Internal IT Security Audit to group companies in Asia
• Conduct Annual External Audit (Vulnerability Assessment/Penetration Test)
• Conduct Security Awareness Training.
• Incident Response, investigation and recovery.
• Support daily Security operations
• Manage and Adminster Firewall operations in Asia
• Maintaining EndPoint Protection and updates.
• Maintaining Patch Management system
• Any other ad hoc duties as assigned.

Requirements

• Preferably possess a Diploma in Information Technology or Computer Engineering related.
• 1-2 years of experience in Cybersecurity domain
• Knowledge on Security products and technology
• Knowledge in conducting Internal IT Security Audit
• Knowledge in handling security incident and response
• Knowledge in managing various type of firewall
• Knowledge in managing various type of endpoints protection
• Knowledge in managing patch management tools

Interested applicants, please Email , and look for

Jensen Fang Lifa

Recruit Express Pte Ltd

EA License No. 99C4599

EA Personnel Registration Number: R2197080

We regret that only shortlisted candidates will be contacted.

Role and Responsibilities

1. Analysing documents (e.g., design, requirements, architecture, diagrams, flowcharts) to obtain an understanding of the requirements.

2. Identifying the required test scenarios, test case preparation, test data preparation and document traceability matrix to ensure sufficient test coverage.

3. Execute test cases and test plans to support the quality assurance activities throughout the software lifecycle.

4. Defect reporting and verifying fixes.

5. Participate in continuous improvement in quality of test process.

6. Participate in peer reviews of test plans and cases to ensure consistency and adequate coverage.

7. Coordinate large scale testing projects and improve testing efficieny for programme roll out

Requirements / Qualifications

- At least 5-6 years experience in testing IT systems

- must have project management skill.

- In-depth knowledge and experience in Test Plan, Test Strategy, Test Estimation and Test Methodologies

- Experiences in Load Testing and Performance Testing are required.

- Strong written and verbal communication skills.

- able to manage stakeholders, chair meeting and carry out presentation.

- fast learner, able to multi-task, prioritize tasks and quickly adjust in a rapidly changing environment.

- Experience in Healthcare domain and Test Automation is an advantage

• SME in Group Information Security Office
• All rounded exposure in application security, cloud security, DevSecOps

Key Responsibilities:

• Offer expert security consultancy, technical guidance, and education to our enterprise.
• Advise on and evaluate application and infrastructure security design for relevance and effectiveness.
• Ensure alignment of security architecture with business strategies and uphold cyber risk management framework.
• Review application security design, driving necessary remediation tasks.
• Develop application security blueprints and training courses to elevate developers’ security awareness.
• Assess security by design principles in Cloud platforms (GCP, AWS, Azure) and integrate security tools seamlessly into DevOps pipelines.
• Ensure adherence to security requirements for low code platforms and conduct threat modeling for critical applications.
• Manage project priorities, deadlines, and deliverables, and assist with ad-hoc duties as required.
• Review RFP proposals for compliance with security requirements.
• Offer expert security consultancy, technical guidance, and education to our enterprise.

Requirements:

• Bachelor degree in IT, computer science or related fields
• 6+ years' experience in information security
• Expertise in application security will be a bonus
• Have in-depth knowledge of secure application development techniques and hands-on experience with security testing tools; good understanding in cyber security threats, vulnerabilities, and hacking methods.
• Possess professional security certifications (CISSP, CSSLP, CEH, CCSP, etc.), preferably.
• Be familiar with Agile, DevSecOps, OWASP Top 10, and cloud security in (Azure / AWS / GCP); experience with technologies like WAF and Anti Bot Protection will be a bonus

If you are interested in the above job or related cybersecurity opportunities, please kindly send your updated CV to Shannagh.Wu@ethosbc.com


Reg No.R23112660
BeathChapman Pte Ltd
Licence no. 16S8112

Intuition Machines uses AI/ML to build enterprise security products. We apply our research to systems that serve hundreds of millions of people, with a team distributed around the world. You are probably familiar with our best-known product, the hCaptcha security suite. Our approach is simple: low overhead, small teams, and rapid iteration.

As a Senior Cyber Security Analyst, you will leverage your expertise in bot detection, web traffic analysis, and deep behavioral analytics to identify and investigate anomalous activities within our hCaptcha SaaS security platform.

Your primary responsibilities will include conducting advanced investigations of potential automated and human threats, analyzing complex patterns and behaviors, and developing actionable insights to enhance our security posture. Working closely with other teams, you will contribute to the continuous improvement of our AI/ML detection and response capabilities, ensuring that our platform remains resilient against evolving cybersecurity challenges.

By staying up-to-date with the latest developments in the cybersecurity landscape, you will play a pivotal role in fortifying the security of our platform, thereby protecting our Customers' data and digital assets.

What will you do:

• Monitor, identify and analyze events from a range of sources to spot threats and respond to such incidents with a sense of urgency.
• Collaborate with globally distributed teams to accomplish tasks.
• Assist in the collection of metrics to measure the efficiency of Security Operations functions.
• Audit the effectiveness of security measures to check if the systems meet the Security compliance norms.
• Assist in implementation of security policies and procedures.
• Fine-tune of the process and eventually update standard operating procedures for the team.
• Participate in various stages of incident investigations and threat hunting engagements.
• Work closely with internal company teams such as Product, Customer Success, etc.

What we are looking for:

• Exposure to web and API security, coding standards, WAFs, advanced persistent threat actors, botnets (off the shelf and custom) and attack mitigation.
• Hands-on SQL proficiency is a must-have.
• Knowledge of managing, securing and preparing production web environments with tools like Kubernetes.
• Familiar with Threat Hunting - Web/ API, web hacking, web data analysis or WAF hands-on experience.
• In-depth knowledge of the web technology and web application security field.
• Deep understanding of the cybersecurity threat landscape, and the attacker mindset.
• Experience in scripting and programming (JavaScript, Python, etc.).
• Interest in keeping up with industry trends and market demands to recommend product enhancements and new sources of intelligence.
• Demonstrated interest in working with data and metrics as applied to security.
• Be a great collaborator and communicator, stay curious and enjoy innovating. Nothing stands still in security.

Nice to Have:

• Familiarity with open source analytics and visualization tools like Grafana, Apache Superset.
• Experience red-teaming, especially developing bot-nets and whitehat hacking.
• Hands on knowledge on Web security modules and secure configuration.
• Hands-on experience and proficiency in API test automation and standardization.
• Experience and solid knowledge on computer and network security.
• Integrating security into build automation, deployment automation, test automation, SDLC orchestration, environment management, monitoring, and production.
• Mentor development teams, review pull requests, and guide evolution of the development pipeline.
• Experience with modern application packaging, deployment, containerisation, bug tracking tools and other supporting tools (Jenkins, Docker, Kubernetes, etc.).
• Familiar with ISMS (ISO/IEC 27001), SOC2, NIST Cybersecurity Framework, CIS Controls and Open Web Application Security Project.

What we offer:

• Fully remote position with flexible working hours.
• An inspiring team of colleagues spread all over the world.
• Pleasant, modern development and deployment workflows: ship early, ship often.
• High impact: lots of users, happy customers, high growth, and cutting edge R&D.
• Flat organization, direct interaction with customer teams.

We are committed to building an inclusive and diverse global workforce. We believe that the best way to learn, grow, and succeed, both as individuals and as a company, is to foster a culture that is fundamentally rooted in equality.

Join us as we transform cyber security, user privacy, and machine learning online!

Intuition Machines uses AI/ML to build enterprise security products. We apply our research to systems that serve hundreds of millions of people, with a team distributed around the world. You are probably familiar with our best-known product, the hCaptcha security suite. Our approach is simple: low overhead, small teams, and rapid iteration.

As a Senior Cyber Security Analyst, you will leverage your expertise in bot detection, web traffic analysis, and deep behavioral analytics to identify and investigate anomalous activities within our hCaptcha SaaS security platform.

Your primary responsibilities will include conducting advanced investigations of potential automated and human threats, analyzing complex patterns and behaviors, and developing actionable insights to enhance our security posture. Working closely with other teams, you will contribute to the continuous improvement of our AI/ML detection and response capabilities, ensuring that our platform remains resilient against evolving cybersecurity challenges.

By staying up-to-date with the latest developments in the cybersecurity landscape, you will play a pivotal role in fortifying the security of our platform, thereby protecting our Customers' data and digital assets.

What will you do:

• Monitor, identify and analyze events from a range of sources to spot threats and respond to such incidents with a sense of urgency.
• Collaborate with globally distributed teams to accomplish tasks.
• Assist in the collection of metrics to measure the efficiency of Security Operations functions.
• Audit the effectiveness of security measures to check if the systems meet the Security compliance norms.
• Assist in implementation of security policies and procedures.
• Fine-tune of the process and eventually update standard operating procedures for the team.
• Participate in various stages of incident investigations and threat hunting engagements.
• Work closely with internal company teams such as Product, Customer Success, etc.

What we are looking for:

• Exposure to web and API security, coding standards, WAFs, advanced persistent threat actors, botnets (off the shelf and custom) and attack mitigation.
• Hands-on SQL proficiency is a must-have.
• Knowledge of managing, securing and preparing production web environments with tools like Kubernetes.
• Familiar with Threat Hunting - Web/ API, web hacking, web data analysis or WAF hands-on experience.
• In-depth knowledge of the web technology and web application security field.
• Deep understanding of the cybersecurity threat landscape, and the attacker mindset.
• Experience in scripting and programming (JavaScript, Python, etc.).
• Interest in keeping up with industry trends and market demands to recommend product enhancements and new sources of intelligence.
• Demonstrated interest in working with data and metrics as applied to security.
• Be a great collaborator and communicator, stay curious and enjoy innovating. Nothing stands still in security.

Nice to Have:

• Familiarity with open source analytics and visualization tools like Grafana, Apache Superset.
• Experience red-teaming, especially developing bot-nets and whitehat hacking.
• Hands on knowledge on Web security modules and secure configuration.
• Hands-on experience and proficiency in API test automation and standardization.
• Experience and solid knowledge on computer and network security.
• Integrating security into build automation, deployment automation, test automation, SDLC orchestration, environment management, monitoring, and production.
• Mentor development teams, review pull requests, and guide evolution of the development pipeline.
• Experience with modern application packaging, deployment, containerisation, bug tracking tools and other supporting tools (Jenkins, Docker, Kubernetes, etc.).
• Familiar with ISMS (ISO/IEC 27001), SOC2, NIST Cybersecurity Framework, CIS Controls and Open Web Application Security Project.

What we offer:

• Fully remote position with flexible working hours.
• An inspiring team of colleagues spread all over the world.
• Pleasant, modern development and deployment workflows: ship early, ship often.
• High impact: lots of users, happy customers, high growth, and cutting edge R&D.
• Flat organization, direct interaction with customer teams.

We are committed to building an inclusive and diverse global workforce. We believe that the best way to learn, grow, and succeed, both as individuals and as a company, is to foster a culture that is fundamentally rooted in equality.

Join us as we transform cyber security, user privacy, and machine learning online!

Job description

• Leading regional financial institution
• Focus in Information Security Compliance, Policy & Control
• Open to IT professionals with passion in InfoSec Control and Risk Management

Reporting to Head of Information Security & IT GRC, here are your responsibilities:

• Collaborate with the cybersecurity team to develop and execute the annual information security action plan.
• Establish and maintain an efficient incident reporting and tracking system, overseeing corrective and improvement measures.
• Monitor and provide guidance on the effectiveness of information security workflows and controls.
• Lead information security projects and automation initiatives in Asia.
• Manage outsourcing matters across BUs in Asia and oversee outsourcing requirements
• Conduct annual on-site reviews of BUs in Asia.
• Support compliance efforts under Singapore’s PDPA, including policy communication, query management, and liaison with regulatory authorities.
• Report to the Board and management on adherence to laws, regulations, and information security policies.
• Review and update regional information security and outsourcing policies to ensure compliance.
• Develop training materials to enhance information security awareness.
• Design, develop, and maintain automated compliance and information security workflow management systems.
• Manage regional reporting tools and consolidate results.
• Prepare reports and documents for internal committee meetings.
• Collaborate with the Compliance team on various compliance-related initiatives.
  

Requirements:

Bachelor's degree in computer science or related disciplines
Preferred certifications: CISM and/or CISSP.
3+ years of experience in information security or IT risk management
Strong understanding of information security risks, controls, processes, and trends.
Experience in project management.
Familiarity with regional information security regulations and the insurance sector.
Understanding of Asian cultural and business dynamics.

If you are interested in the above job or related information security opportunities, please kindly send your updated CV to Shannagh.Wu@ethosbc.com

Reg No.R1981018

BeathChapman Pte Ltd

Licence no. 16S8112

We are looking for an accomplished, high-performing Cyber Threat Intel Analyst for our Cyber Threat Intel team with experience gathering cyber intel from multiple sources and aggregating that data to produce usable and actionable Cyber Threat Intelligence.  The Analyst is responsible for ensuring we are monitoring and analyzing threat past, present and future relevant to protecting Blackbaud.  This role requires a deep understanding of intel sources and the ability to aggregating and translate into actionable information.

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube ​

Blackbaud is a remote-first company which embraces a flexible remote work culture.  Blackbaud supports hiring and career development for all roles from the location you are in today!

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

A notice to candidates: Recruitment Fraudulent Alert: Your personal information and online safety as a candidate mean a lot to us! At Blackbaud and our portfolio of companies, recruiters only direct candidates to apply through our official careers page at https://careers.blackbaud.com/us/en or our official LinkedIn page. Recruiters will never request payments, ask for financial account information or sensitive information like social security numbers, or conduct interviews via Skype.  Anyone suggesting otherwise is not a representative of Blackbaud. If you are unsure if a message is from Blackbaud, please email blackbaudrecruiting@blackbaud.com. 

The starting base pay is $101,900.00 to $132,800.00. Blackbaud may pay more or less based on employee qualifications, market value, Company finances, and other operational considerations.

Benefits Include:

• Medical, dental, and vision insurance

• Remote-first workforce

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Volunteer for vacation

• Opportunities to connect to build community and belonging

• Pet insurance, legal and identity protection

• Tuition reimbursement program

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube ​

Blackbaud is a remote-first company which embraces a flexible remote work culture.  Blackbaud supports hiring and career development for all roles from the location you are in today!

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

A notice to candidates: Recruitment Fraudulent Alert: Your personal information and online safety as a candidate mean a lot to us! At Blackbaud and our portfolio of companies, recruiters only direct candidates to apply through our official careers page at https://careers.blackbaud.com/us/en or our official LinkedIn page. Recruiters will never request payments, ask for financial account information or sensitive information like social security numbers, or conduct interviews via Skype.  Anyone suggesting otherwise is not a representative of Blackbaud. If you are unsure if a message is from Blackbaud, please email blackbaudrecruiting@blackbaud.com. 

The starting base pay is $77,700.00 to $104,500.00. Blackbaud may pay more or less based on employee qualifications, market value, Company finances, and other operational considerations.

Benefits Include:

• Medical, dental, and vision insurance

• Remote-first workforce

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Volunteer for vacation

• Opportunities to connect to build community and belonging

• Pet insurance, legal and identity protection

• Tuition reimbursement program

As a Senior Cybersecurity Analyst specializing in risk management, you will play a crucial role in identifying, assessing, and mitigating cybersecurity risks across our organization. You will be responsible for executing risk management strategies, conducting risk assessments, quantifying risks, and collaborating with cross-functional teams to ensure the security of our systems, networks, and data.

What you'll be doing:

• Lead the cybersecurity risk management process, including identifying, analyzing, prioritizing, and quantifying cybersecurity risks based on business impact and likelihood of occurrence.

• Develop and maintain risk management frameworks, policies, and procedures in alignment with industry standards and regulatory requirements.

• Conduct regular risk assessments to identify potential threats and vulnerabilities, and collaborate with stakeholders to address findings.

• Provide guidance and recommendations on risk mitigation strategies, controls implementation, and security best practices.

• Collaborate with internal teams, including IT, compliance, legal, and business units, to integrate cybersecurity risk management into business processes and decision-making.

• Monitor and assess emerging cybersecurity threats and trends, and proactively recommend measures to enhance the organization's cybersecurity posture.

• Act as a subject matter expert on cybersecurity risk management, providing mentorship and training to other analysts and stakeholders as needed.

What we'd like you to have:

• 3+ years in cybersecurity risk management, with a focus on assessing and mitigating cybersecurity risks in complex IT environments.

• In-depth knowledge of cybersecurity frameworks, standards, and regulations (e.g., NIST Cybersecurity Framework, NIST 800-37, FAIR, etc.).

• Prior experience with Risk Management GRC tools (e.g., ServiceNow, Archer, etc).

• Strong analytical skills and ability to effectively prioritize and manage multiple tasks and projects in a fast-paced environment.

• Excellent communication and interpersonal skills, with the ability to convey technical concepts to non-technical stakeholders and collaborate effectively across teams.

• Strong understanding of emerging cybersecurity threats and trends, and ability to stay abreast of evolving industry best practices and regulatory requirements.

Join our team and contribute to building a resilient cybersecurity program that protects our organization's assets, reputation, and stakeholders.

#LI-REMOTE

Stay up to date on everything Blackbaud, follow us on Linkedin, Twitter, Instagram, Facebook and YouTube ​

Blackbaud is a remote-first company which embraces a flexible remote work culture.  Blackbaud supports hiring and career development for all roles from the location you are in today!

Blackbaud is proud to be an equal opportunity employer and is committed to maintaining a diverse and inclusive work environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, physical or mental disability, age, or veteran status or any other basis protected by federal, state, or local law.

To all recruitment agencies: We do not accept unsolicited agency resumes and are not responsible for any fees related to unsolicited resumes.

A notice to candidates: Recruitment Fraudulent Alert: Your personal information and online safety as a candidate mean a lot to us! At Blackbaud and our portfolio of companies, recruiters only direct candidates to apply through our official careers page at https://careers.blackbaud.com/us/en or our official LinkedIn page. Recruiters will never request payments, ask for financial account information or sensitive information like social security numbers, or conduct interviews via Skype.  Anyone suggesting otherwise is not a representative of Blackbaud. If you are unsure if a message is from Blackbaud, please email blackbaudrecruiting@blackbaud.com. 

The starting base pay is $77,700.00 to $104,500.00. Blackbaud may pay more or less based on employee qualifications, market value, Company finances, and other operational considerations.

Benefits Include:

• Medical, dental, and vision insurance

• Remote-first workforce

• 401(k) program with employer match

• Flexible paid time off

• Generous Parental Leave

• Volunteer for vacation

• Opportunities to connect to build community and belonging

• Pet insurance, legal and identity protection

• Tuition reimbursement program

Looking for cloud security specialist to join us. Should specialize in Cloud security domain such as network security, Infrastructure security, endpoint security, data security, as well as application security, and shall be well-versed with the various security tools in respect to such domains.

Senior IT Security Specialist will be tasked with:

• Implementing and evaluating cloud architecture and deployments, and services across the client.

• Advising on IT security solutions and their implementation, integration and operation into business systems and processes.

• Overseeing the overall security implementation/ Integration of the new platform

• Designing, Implementing, vulnerability scanning, threat detection, deployment and troubleshooting of complex network security issues involving Fortigate Firewalls, WAF, Azure Sentinel, Azure/AWS WAF, Azure/AWS DDoS protection, and IBM guardium etc.

• End to end architecting, designing and engineering plan and managing the Cloud based platform including log source integration on Azure Cloud

• Configuring data digestion types and connectors

• Analysis of design and configuration of the events and logs being digested

• Develop, automate, and orchestrate tasks (playbooks) with logic apps based on certain events

• Implementing use cases and log management

• Create incident categorization and threat management plan

• Configure Sentinel Incidents, Workbooks, Hunt queries, Notebooks.

• Deployment and configuration of cloud based Nessus/ Qualys scanner appliance

What you'll need to excel in the role:

• Must hold good hands-on expertise across various security technologies involving any of the Azure sentinel, Fortigate firewall, Vulnerability assessment, Azure/AWS WAF, IBM Guardium and AWS Cloud native and enterprise security services etc.

• Should have good experience in Security Architecture designing and implementing as well as demonstrating solutions delivery, principles and emerging technologies.

• Deep understanding of how to implement best practices for designing and securing Azure platform

• Expertise in vulnerability management

• Experience in Cloud based WAF solution such as; AWS WAF or Azure application firewall

• Good knowledge on DHCP / DNS and other networking protocols Monitor, troubleshoot, and escalate production problems affecting network infrastructure

• Good to have Infrastructure background/expertise (Unix/Linux/Windows servers, Database, Web/TCP IP networking, Storage & Backup systems etc.)

• Exceptional communication skills with diverse audiences - Strong critical thinking and analytical skills

• Strong stakeholders (i.e. Vendors, Suppliers etc.) management experience

• Strong leadership, project and team-building skills, including the ability to lead teams and drive projects and initiatives in multiple departments

• Demonstrated ability to identify risks associated with business processes, operations, information security programs and technology projects • Working experience on Govtech’s Government Commercial Cloud (GCC) platform will be an added advantage

Preferred skills/certifications:

• Certification in the given discipline will add advantage (i.e., CEH, CHFI, CISSP etc.)

• Microsoft Azure OR Amazon Web Services OR Google Cloud Platform Certified

• Azure sentinel certification/ Fortinate certified/ Nessus or Qualys Certified/ IBM Guardium certified etc