Information Security

:
- Vulnerability Management Overall 10 years of IT experience with minimum 45 years of experience in Application Security including Vulnerability Management and Code Security ReviewCode Assessment Solid 45 years of IT experience in capacity of Business Analyst in Application Security Cyber Security projects Handsonexperience in using HCL AppScan and familiarity in handling of industry standard source code review tools such as Veracode Fortify HCL AppScan Checkmarx and CERT secure coding standards Strong knowledge of security frameworks OWASP SANS CWE secure coding practices information security principles architecture and industry specific auditory frameworks Perform and assist in the conduct of Code Security Review assessments for critical banking applications Perform falsepositiveanalysis and review findings from automated assessment Security Certifications like CRISC CISM CRISP CEH Certified ethical Hacker preferred Be an advisory to development team and assist development team in fixing open vulnerabilities Adhere to banks Code Security review process and produce all required artefacts as part of process Should possess thorough knowledge and good experience in working with technical team on True and False positive analysis Excellent written oral communication reporting skills and overall ability to work closely with technical teams and conversant with a multiethnic culture Understanding of Secure Coding Lifecycle related regulatory practices Knowledge of security frameworks OWASP SANS CWE secure coding practices information security principles architecture and industry specific auditory frameworks is desirable Good familiarity with industry specific programming languages eg CC NET Java Cobol Python etc and proven development experience in 1 or 2 programming languages Adhere to banks Code Security review process and produce all required artefacts as part of process Conversant in setting up Jira projects and workflow for reporting and tracking vulnerabilities Maintain central repository of all assessments for future reference Excellent written oral communication reporting skills and overall ability to work closely with technical teams and conversant with a multiethnic culture Exposure to Risk management and thirdparty assessment and Produce weekly and monthly status reports Should have the capability and exposure to work with Project Manager and Project team on oBuilding relationships with key stakeholders Business Fellow Change leaders inside and outside of CSS and Front Office oTimely and clear communications to the stakeholder community oSupporting to PM and Project in taking ownership on preparing RFP related activities Preparations in RFI response to RFQ and RFP Evaluations oSupporting PM providing data for ePMO standards Clarity updates including Project static RAG status key milestones financials risks dependencies issues and resource forecasts and they are tracked and reported to the appropriate governance bodies oWorking closely with AVM Vulnerability Project and helping PM Project team in ensuring that all submissions to committees and working groups PED Red Packs Closure Reports Benefit Reports Progress Reports etc are of the right quality and are timely oImplementing AVM Vulnerability Disclosure project closure procedure oReview control and report on financial status of the individual components and overall workstream as per the banks standards and workstream governance oEnsure measures as per the banks standards are in place and workstream governance for benefits tracking are implemented endtoend for AVM Vulnerability Management project Named Job Posting? (if Yes - needs to be approved by SCSC)

Additional Details
- Global Grade :D
- Level :To Be Defined
- Named Job Posting? (if Yes - needs to be approved by SCSC) :No
- Remote work possibility :No
- Global Role Family :To Be Defined
- Local Role Name :To be defined
- Local Skills :vulnerability management
- Languages Required::ENGLISH
- Role Rarity :To Be Defined

---