Security L2

**Who We Are**

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

**The Role**

Are you passionate about cybersecurity and looking for an exciting role where you can make a difference? If so, we have an opportunity for you As a Security Specialist at Kyndryl, you will play a crucial role in enabling and securing our customer organizations, cultures, and ecosystems.

Your responsibilities will be varied and dynamic, spanning asset classification models, risk assessment reports, information security policies, security solution scenarios, implementation plans, organization models, procedures, security services, security effectiveness evaluation reports, and security awareness workshops. You will be tasked with configuring, monitoring, and managing the performance of networks to maintain the quality of services, while also protecting organizational infrastructure from malicious cyber-attacks.

As a key member of our team, you will assess, predict, prevent, and manage the risk of IT infrastructure and data, helping our customers stay ahead of the curve and ensure their systems are secure. You will develop and implement security policies and procedures, working closely with other departments to ensure that all security measures are in place and operating effectively.

But that is not all - at Kyndryl you will have the opportunity to explore innovation in CyberSecurity data science - taking information that has been gathered and looking for areas to have that “Ah Ha” moment. Drawing conclusions and patterns from the data across single and multiple clients. Creating new ideas in the area of risk management and risk quantification.

In addition to your technical responsibilities, you will also play a key role in raising awareness of potential security threats through technical security training on best practices. This is an exciting opportunity to help shape the culture of our clients' organizations and make a tangible impact on their security posture.

If you have a passion for cybersecurity - governance, risk and compliance, are looking for a challenging and dynamic role, and want to work with a team of like-minded individuals, then we want to hear from you Join us as a Security Specialist and help us secure the future of our clients' organizations.

Your Future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career. We have opportunities that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.
- Manage Information Security technologies that fall under the team’s responsibilities, confirming they are operating within agreed service levels and at peak possible performance
- Coordinate planned maintenance activities with relevant stakeholders
- Manage incident response efforts
- Provide 24/7 network support for troubleshooting, diagnosing, and resolving network security-related issues.
- Ensure compliance with required security regulations such as ISO 27001, PCI-DSS and others applicable policies and frameworks.
- Incident Handling: Respond to escalated incidents from L1, performing deeper investigation and analysis.
- Enhancements: Propose improvements in security monitoring, detection, and response protocols.
- Risk Management: Assist in identifying security risks, supporting vulnerability remediation efforts for the above security technologies
- Reporting: Document incidents, update knowledge bases, and report complex issues to the L3 team.
- Analysis: Perform initial assessment and triage of security events; escalate incidents as per the defined protocols.
- Response: Conduct basic troubleshooting for Firewall - Fortinet Firewall, Forti analyzer, Palo Alto Firewall and other security technologiesDocumentation: Maintain accurate logs and documentation, updating incident reports and tickets.

**Who You Are**

Required Skills and Experience
- 2+ years of experience in more than one of the following GRC frameworks; enterprise risk management, internal audit, regulatory compliance management, policy management, third party risk management
- Working knowledge of common audit and compliance tools
- Experience in analyzing and translating business requirements into control objectives, designing security controls, and implementation within a security management cycle
- Excellent understanding of security standards and best practices e.g., ISO27001, NIST
- Experience in advising clients on one or more regulatory requirements (e.g.,HIPAA, PCI DSS, FBA, GDPR, DORA)
- Experience performing GRC m