field_remote_option

field_job_employment_type

job_industry

field_job_occupational_field_parents_all

field_job_experience

job_organization_name

The Role This is an opportunity for a highly motivated Senior Security Analyst to deliver the next generation of customer authorization solutions supporting Fidelity business applications. The ideal candidate brings expertise working with security-focused teams and application development teams.&nbsp; The candidate brings experience analyzing stakeholder needs and translating them into technical requirements for development teams and tracking them to completion.&nbsp; This role encourages new perspectives, creative thinking and rewards individuals who are passionate about technology and problem solving. We value the ability to closely partner with engineers, architects, and product teams across business units. This individual must possess strong communication skills and understands the need to be proactive in engaging teams throughout the development cycle – all while demonstrating a dedicated focus on protecting our customers' digital experiences at Fidelity. The Expertise and Skills You Bring<ul><li>Excellent communication skills in spoken, written, and presentation form </li><li>Skilled at communicating technical solutions, risks, and business value to both engineering and non-technical teams, product owners, and business partners </li><li>Ability to perform deep analysis on customer authorization policies for security and application teams </li><li>At least 5 years of experience working with business critical, enterprise-wide applications </li><li>Robust critical thinking skills coupled with a desire to grow, learn and engage with peers in technical and design discussions </li><li>Ability to dig into code and documentation artifacts to interpret business processes and system workflows </li><li>Ability to guide others about new &amp; complex technologies </li><li>Experience with Agile Methodology </li></ul>§ Preferred Experience<ul><li>Experience with coordination of large scale infrastructure deployments. </li><li>Understanding of web application architecture and HTTP servers. </li><li>Understanding of authentication and role-based authorization concepts.&nbsp; </li><li>Understanding of API consumer subscription processes. </li></ul>The Team The Workplace Security Services team is part of the Workplace Customer Protection Center of Excellence and supports protecting thousands of employers and millions of participants. The team develops client-facing cybersecurity applications that help us win and retain institutional clients, as well as Authorization, B2B Security and Single Sign-On infrastructure software components that are the backbone for many of Fidelity’s web business applications including NetBenefits and PlanSponsor WebStation. As a member of the Customer Protection Center of Excellence, you will be joining a culture that is defined by how our team members work. We: <ul><li>Are&nbsp;trusted, collaborative partners&nbsp;who are engaged and transparent </li><li>Are&nbsp;security subject matter experts&nbsp;and continuous learners that are passionate about protecting our customers </li><li>Take&nbsp;personal accountability for quality &amp; timely delivery&nbsp;of our services </li><li>Demonstrate&nbsp;inclusion and empathy&nbsp;where everyone feels safe to be their authentic selves </li><li>Foster&nbsp;associates’ well-being&nbsp;by supporting work-life balance and guilt-free time off </li></ul>Company Overview Fidelity Investments is a privately held company with a mission to strengthen the financial well-being of our clients. We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients’ money. Join Us At Fidelity, you’ll find endless opportunities to build a meaningful career that positively impacts peoples’ lives, including yours. You can take advantage of flexible benefits that support you through every stage of your career, empowering you to thrive at work and at home. Honored with a Glassdoor Employees’ Choice Award, we have been recognized by our employees as a Best Place to Work in 2023. And you don’t need a finance background to succeed at Fidelity—we offer a range of opportunities for learning so you can build the career you’ve always imagined. At Fidelity, our goal is for most people to work flexibly in a way that balances both personal and business needs with time onsite and offsite through what we’re calling “Dynamic Working.” We invite you to&nbsp;Find Your Fidelity&nbsp;at fidelitycareers.com. Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging. &nbsp;<h4>Company Overview</h4>Fidelity TalentSource is the in-house temporary staffing provider for Fidelity Investments, one of the largest and most diversified global financial services firms in the industry. We welcome individuals from all backgrounds, including technology and customer service, to fill assignments across Fidelity’s U.S.-based regional and investor center locations. If you would like to experience Fidelity’s supportive and collaborative culture while expanding your skill set and developing your professional network, consider a role with Fidelity TalentSource. Apply today at&nbsp;FTSJobs.com.We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging. Fidelity TalentSource will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation, please contact our HR team at HR@ ftsjobs.com.<h4>Information about Fidelity investments</h4>At Fidelity Investments, our customers are at the heart of everything we do. As a privately held company with a rich 75-year history, our mission has remained the same since our founding: to strengthen the financial well-being of our clients. We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients’ money. For information about working at Fidelity, visit FidelityCareers.com.Fidelity TalentSource’s working model blends the best of working offsite with maximizing time together in person to meet associate and business needs. Currently, most hybrid roles require associates to work onsite all business days of one assigned week per four-week period (beginning in September 2024, the requirement will be two full assigned weeks).Fidelity Investments and Fidelity TalentSource are equal opportunity employers.

Fidelity TalentSource

Security Analyst and IAM

You Lead the Way. We’ve Got Your Back.With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.Join Team Amex and let's lead the way together.How we serve our customers is constantly evolving and is a challenge we gladly accept. Whether you’re finding new ways to prevent identity fraud or enabling customers to start a new business, you can work with one of the most valuable data sets in the world to identify insights and actions that can have a meaningful impact on our customers and our business. And, with opportunities to learn from leaders who have defined the course of our industry, you can grow your career and define your own path. Find your place in risk and analytics on #TeamAmex.About the OrganizationGlobal Risk, &amp; Compliance (GRC) group is the independent risk management (Second Line) organization within American Express and is headed by the Chief Risk Officer (CRO).GRC provides oversight as well as governance of risks and ensure the company operates in a safe and sound manner within global regulatory expectations.The Information Security Risk Director is a leadership position within GRC’s Cybersecurity, Technology, and Resiliency Risk Oversight (CTRRO) team. The Director will lead a team of colleagues who execute independent risk management activities for assigned cybersecurity processes as well as lead CTRRO’s data and automation capabilities. The role reports into the Vice President of CTRRO, who reports into the Head of CTRRO and Vendor Risk Oversight, who reports into the EVP of Enterprise Risk Management.Job Responsibilities<ul><li>Lead and nurture a global team of four to six direct reports and maintain performance management for assigned colleagues</li><li>Lead execution of risk assessments, monitoring, and reporting over assigned cybersecurity processes, such as vulnerability management</li><li>Identify and apply thought leadership, best practices, and emerging trends </li><li>Lead gap assessments per laws, regulations, and regulatory guidance as well as industry frameworks and company policies</li><li>Demonstrate high level of curiosity to learn and willingness to present an effective credible challenge</li><li>Identify issues for control failures or gaps and execute issue management until closure </li><li>Develop strong working relationships with all levels of the organization, handle and resolve conflict, to achieve results and enact wide-scale impact across the organization.</li><li>Lead CTRRO's data strategy, including analysis and creation risk metrics (KRIs/KPIs), direction of enhancement of the team's GRC modules and capabilities, query cyber data warehouses, and building risk dashboards and reporting.</li></ul>Job Qualifications<ul><li>BA or BS in Cybersecurity, Information Systems, Computer Science, Data Science, or related field is preferred&nbsp;</li><li>Must have relevant Cybersecurity, technology, or risk management certification (CISSP, CCSP, CEH, CISM, etc.)</li><li>Minimum eight years of experience in relevant fields such as technology audit, risk, cybersecurity, or information technology, with minimum of 3 years leading others&nbsp;</li><li>Prior experience in cybersecurity and information technology is preferred</li><li>Prior experience in creating or directing development of automation capabilities, GRC tools, big data platforms, KRIs/KPIs</li><li>Prior experience in applying cybersecurity concepts and countermeasures in public cloud environments</li><li>Demonstrated expertise in using regulatory and industry cybersecurity frameworks and guidance (CRI Sector Profile, NIST, FFIEC, MITRE ATT&amp;CK) to audit cybersecurity controls</li><li>Knowledge of current cybersecurity industry trends and events and experience in applying evolving trends to audits, assessments, or lessons learned</li><li>Demonstrated proficiency in translating cybersecurity concepts for public cloud environments</li><li>Proven ability to lead projects and initiatives that drive performance&nbsp;</li><li>Demonstrated track record of integrity, effective communication, innovation, and excellence&nbsp;</li><li>Strong written and verbal communication skills to deliver high quality, actionable feedback to client management on control issues and potential solutions to close gaps</li></ul>Salary Range: $170,000.00 to $255,000.00 annually + bonus + equity (if applicable) + benefitsThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:<ul><li>Competitive base salaries&nbsp;</li><li>Bonus incentives&nbsp;</li><li>6% Company Match on retirement savings plan&nbsp;</li><li>Free financial coaching and financial well-being support&nbsp;</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits&nbsp;</li><li>Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need&nbsp;</li><li>20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy&nbsp;</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)&nbsp;</li><li>Free and confidential counseling support through our Healthy Minds program&nbsp;</li><li>Career development and training opportunities</li></ul>For a full list of Team Amex benefits, visit our Colleague Benefits Site.At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.US Job Seekers/Employees - Click here to view the “Know Your Rights” poster and the&nbsp;Pay Transparency Policy Statement.If the links do not work, please copy and paste the following URLs in a new browser window:&nbsp;<a href="https://www.dol.gov/agencies/ofccp/posters&nbsp;to" target="_blank">https://www.dol.gov/agencies/ofccp/posters&nbsp;to</a> access the three posters.

American Express

Director-Information Security Risk

You Lead the Way. We’ve Got Your Back.With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.Join Team Amex and let's lead the way together.POSITION SUMMARY:This position is responsible for the regional management of fire safety programs at AXP offices, buildings and facilities.This involves management oversight of Fire Safety Coordinators, and the various programs they manage.The incumbent will be responsible for administration and review of regional fire safety programs in their area of responsibility, which includes evacuation plans, fire drills, fire warden training, emergency action plans, personal emergency evacuation plans for self-identified colleagues, fire risk assessments, and evacuation awareness training.SCOPE AND RESPONSIBILITY:Partial list of job duties:·Manage and interact with Fire Safety Coordinators responsible for implementation and management of the local fire safety programs.In some cases, the Fire Safety Manager will also perform the duties of the Fire Safety Coordinator.·Implement, manage, and administer all fire safety related programs and procedures at American Express facilities.·Assist the Director in managing the administration of the global fire safety program.·Assure each AXP facility is compliant with all local fire safety laws and ordinances.·Serves, when needed, as the primary company representative to the local fire department in order to maintain the program’s effectiveness.·Align with regional GSOC Directors, Crisis Management Director &amp; Manager, and Vice President, Global Security to assure deployment and alignment of all CMO and GSOC procedures.·Establish and maintain documentation and administrative tracking of all fire safety programs and activities at AXP facilities.This will consist of maintenance and reviewing the documentation of the following programs:Fire Drills, Fire Warden Recruitment &amp; Training, Emergency Action Plans, Navigator Training, PRA/PEEP program, Fire Risk Assessments, Awareness training.This will be completed in the Regional Manager’s area of responsibility.·Maintain communication with all Global Security management personnel.·Support the local market Global Security Director/Manager in various operational processes.The position could be a member of the local Crisis Response Team.·Collaborate with other regional Managers to assure alignment in the oversight of the fire safety program.·Provide oversight of local market metrics to assure effective management and measurement of the fire safety program in local markets.·Work with local, national, and international law enforcement and/or government fire safety officials.·Assist Global Security events, incidents, or crises when needed/required·Plan and monitor expenditures within program budget.·Develop and supervise the annual FSC travel schedule to locations where required.·Travel may be required.·Required to be on call 24 hours a day.QUALIFICATIONS:·Previous fire safety management experience is required; candidates must have at least 10 years combined experience in one or more of the following: Fire Chief/Captain, Fire Marshall, Fire Inspector, Occupational Fire Safety, Fire Safety Coordinator.·Professional certification in fire safety (NFPA or similar-like/international certification) is preferred.·Bachelor’s or other 4-year degree is required. Preferred fields of study include fire science &amp; fire safety/prevention and administration, occupational safety, etc.·Excellent computer skills are required, with thorough working knowledge of programs like, Slack, Share-Point, Excel, Power-point, and Word. ·Knowledge and thorough understanding of all types of fire sprinkler, fire suppression, fire detection and fire alarm systems.·Knowledge and thorough understanding of applicable NFPA standards and best practices.·Significant multi-tasking ability required in order to manage a high volume of work projects and processes.·Regional and cultural sensitivity with emphasis on diversity required in order to adjust communication and presentation styles to manage business relationships and expectations, while achieving Global Security goals.·Strong organizational skills and project management experience is required.·Ability to analyze problems and make appropriate decisions quickly.·Ability to drive large complex programs and solutions using both direct and virtual teams.·Strong written and verbal communication skills.Salary Range: $80,000.00 to $155,000.00 annually + bonus + benefitsThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:<ul><li>Competitive base salaries&nbsp;</li><li>Bonus incentives&nbsp;</li><li>6% Company Match on retirement savings plan&nbsp;</li><li>Free financial coaching and financial well-being support&nbsp;</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits&nbsp;</li><li>Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need&nbsp;</li><li>20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy&nbsp;</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)&nbsp;</li><li>Free and confidential counseling support through our Healthy Minds program&nbsp;</li><li>Career development and training opportunities</li></ul>For a full list of Team Amex benefits, visit our Colleague Benefits Site.American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.US Job Seekers/Employees - Click here to view the “Know Your Rights” poster and the&nbsp;Pay Transparency Policy Statement.If the links do not work, please copy and paste the following URLs in a new browser window:&nbsp;<a href="https://www.dol.gov/agencies/ofccp/posters&nbsp;to" target="_blank">https://www.dol.gov/agencies/ofccp/posters&nbsp;to</a> access the three posters.

Manager, Fire Safety & Emergency Response (Security Services)

You Lead the Way. We’ve Got Your BackWith the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities, and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally. At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.Join Team Amex and let's lead the way together.As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers’ digital lives.&nbsp; Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems.&nbsp; American Express offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source.&nbsp; And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development.&nbsp; Find your place in technology on #TeamAmex. The Information Security Specialist-Incident Response/ Digital Forensics willRESPONSIBILITIES:<ul><li>Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations and partner concerns&nbsp;from junior analysts across Windows, Mac, Linux, and Cloud platforms.</li><li>Participate in incident response and crisis management activities.</li><li>Advise leadership on containment, eradication, and recovery strategies during incident response.</li><li>Fully scope incidents through proper identification of all affected systems and/or accounts.</li><li>Recognize attacker tactics, techniques, and procedures as well as Indicators of Compromise (IOCs) / Indicators of Attack (IOAs) that can be applied to current and future investigations.</li><li>Contribute to team projects, process improvement, and development of new capabilities.</li><li>Curate a world class security operations and incident response team with a relentless focus on innovation and continuous improvement.</li><li>Assess and develop incident response standard methodologies to help mature the overall security operations of the organization.</li><li>Make recommendations for improving enterprise risk posture based on individual research and technical expertise.</li><li>Stay current on industry trends, attack techniques, mitigation techniques, and security technologies. &nbsp;</li><li>Produce high-quality written and verbal reports, recommendations, and actions.</li><li>Participate in on-call rotation and provide after-hours support on an as-needed basis&nbsp;</li></ul>REQUIRED SKILLS/ QUALIFICATIONS:<ul><li>3+years of experience in information security, incident response, digital forensics and/or incident response consulting.</li><li>Experience with host, network, and/or memory forensics</li><li>Experience with various network and/or host-based security tools to detect and respond to security events. (e.g. SIEM, web proxy, intrusion detection/prevention, etc.)</li><li>Theoretical and practical security knowledge and investigation experience with Mac, Linux, and Windows operating systems, as well as cloud environments.</li><li>Theoretical and practical knowledge of Incident Response lifecycles</li><li>Ability to convey complex technical concepts to audiences with varying levels of technical ability</li></ul>PREFERRED QUALIFICATIONS:<ul><li>Excellent analytical, documentation, and communication skills. &nbsp;</li><li>Multiple applicable certifications (GSE, GDAT, GCIA, GCIH, GCFA, GNFA, GCFE, GREM, CCSP, CEH, CCISP)</li><li>Knowledge and investigation experience in a global, multi-cloud environment.</li><li>Experience in programming and/or scripting languages (Python, PowerShell, Go, etc.)</li></ul>Salary Range: $110,000.00 to $190,000.00 annually + bonus + benefitsThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:<ul><li>Competitive base salaries&nbsp;</li><li>Bonus incentives&nbsp;</li><li>6% Company Match on retirement savings plan&nbsp;</li><li>Free financial coaching and financial well-being support&nbsp;</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits&nbsp;</li><li>Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need&nbsp;</li><li>20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy&nbsp;</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)&nbsp;</li><li>Free and confidential counseling support through our Healthy Minds program&nbsp;</li><li>Career development and training opportunities</li></ul>For a full list of Team Amex benefits, visit our Colleague Benefits Site.American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.US Job Seekers/Employees - Click here to view the “Know Your Rights” poster and the&nbsp;Pay Transparency Policy Statement.If the links do not work, please copy and paste the following URLs in a new browser window:&nbsp;<a href="https://www.dol.gov/agencies/ofccp/posters&nbsp;to" target="_blank">https://www.dol.gov/agencies/ofccp/posters&nbsp;to</a> access the three posters.Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.

Information Security Specialist-Incident Response/ Digital Forensics

You Lead the Way. We’ve Got Your Back.With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.Join Team Amex and let's lead the way together.As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers’ digital lives.Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems.American Express offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source.And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development.Find your place in technology on #TeamAmex. The Amex Third Party Security Strategy &amp; Governance team is responsible for creating, developing, and managing the American Express third-party cyber risk strategic initiatives, third party security roadmap, and defining third party cyber risk requirements based on internal American Express information security standards and regulatory requirements.The team advises internal Business partners on third party cyber threats, works with General Counsel to ensure Information Security contractual rights with third parties, and drives key program initiatives through reporting and metrics.The team also partners with internal and external stakeholders to create innovative technologies that support third party cyber risk monitoring and processes automation.How Will you make an impact in this role?Reporting to the Director of Third-Party Security Strategy &amp; Governance, this role will lead strategic third party cyber risk initiatives, build &amp; maintain a robust third party cyber risk operating model, and drive overall program compliance through reporting on associated cyber risk metrics while providing consultancy services to internal stakeholders.Primary Job Responsibilities<ul><li>Identify and drive opportunities for maturing the Amex third party cyber risk program</li><li>Drive the evolution of key risk metrics to effectively measure third party cyber health across Business portfolios and thousands of Amex third parties </li><li>Manages an evolving reporting framework, generates metrics on third party cyber risk, and delivers meaningful reports to leadership across Business units and market areas, risk management committees, and other internal stakeholders.Evaluates third party adherence to program and identify opportunities and best practices to influence alignment with risk appetite</li><li>Partners with internal stakeholders to develop, improve, &amp; document processes, and ensure that Program meets global regulatory requirements for third party information security risk</li><li>Develops training materials, process flows, and communication plans for socializing efforts to support execution of the Program across the organization</li><li>Documents requirements as needed for the development and improvement of supporting technology products, tools, automation scripts, and internally developed applications</li><li>Assist in managing the third-party cyber risk strategic roadmap and portfolio</li><li>Provides subject matter expertise to internal Business stakeholders</li></ul>Qualifications<ul><li>Proven success at driving thought-provoking strategic initiatives from vision to execution</li><li>Must be able to identify proactive opportunities for improvement &amp; efficiencies and to articulate plans required to reach objectives</li><li>Experience with matrix organizations consisting of multi-functional teams and experience in driving complex, large-scale change efforts</li><li>Well-organized, action-oriented team player with the ability to prioritize daily work, work on multiple initiatives simultaneously, and deliver mature solutions</li><li>Must pay strong attention to detail and demonstrate a natural disposition to diagnose issues, mediate differing opinions, and converge on solutions</li></ul>Technical Skills &amp; Requirements<ul><li>3-5 years of experience in third party cyber risk management with demonstrable knowledge of related topics such as information security risk assessment, common due diligence requirements, and third-party oversight practices</li><li>Familiarity with treatment of third parties as it relates to cyber security oversight, risk ranking determination, and gap remediation processes</li><li>A proven record of accomplishment delivering data driven solutions with a customer-first mindset</li><li>Strong understanding of information security risks and threats, including concepts of vulnerability management, what information or assets are of value to threat actors, and how organizations and data are breached, including through relationships with external third parties</li><li>Familiarity with industry standard control frameworks, security assurance auditing standards, best practices guidelines, and third party regulatory requirements, such as ISO27001, NIST CSF, SSAE16/18, CSA, CIS Top 20, OWASP Top 10, FFIEC, etc.</li><li>Understanding of modern security controls including vulnerability scanning, penetration testing, encryption, anti-malware protection, network security, and DLP</li><li>Must have a good balance of risk management expertise, technical knowledge, and business acumen</li><li>Superior analytical skills – both quantitative and qualitative – coupled with an ability to assess a situation without always having the full picture</li><li>Ability to drive cross functional initiatives with a working knowledge of project management practices and governance</li><li>Must have excellent written and communications skills</li></ul>Salary Range: $85,000.00 to $150,000.00 annually + bonus + benefitsThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:<ul><li>Competitive base salaries&nbsp;</li><li>Bonus incentives&nbsp;</li><li>6% Company Match on retirement savings plan&nbsp;</li><li>Free financial coaching and financial well-being support&nbsp;</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits&nbsp;</li><li>Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need&nbsp;</li><li>20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy&nbsp;</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)&nbsp;</li><li>Free and confidential counseling support through our Healthy Minds program&nbsp;</li><li>Career development and training opportunities</li></ul>For a full list of Team Amex benefits, visit our Colleague Benefits Site.American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.US Job Seekers/Employees - Click here to view the “Know Your Rights” poster and the&nbsp;Pay Transparency Policy Statement.If the links do not work, please copy and paste the following URLs in a new browser window:&nbsp;<a href="https://www.dol.gov/agencies/ofccp/posters&nbsp;to" target="_blank">https://www.dol.gov/agencies/ofccp/posters&nbsp;to</a> access the three posters.Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.

Information Security Analyst-Third Party Security Strategy & Governance

Sr. Engineer, Cybersecurity (Application Security)&nbsp;Summary:Are you a seasoned Senior Application Security Engineer who gets excited by the challenge of securing complex systems against emerging threats?&nbsp; Do you love diving deep into code to find vulnerabilities and crafting solutions that strengthen application defenses?&nbsp; If so, we are looking for you!As a Senior Application Security Engineer, you will play a pivotal role in designing and implementing security controls to protect our applications.&nbsp; Leveraging your extensive hands-on experience with secure coding practices and application security tools, you will develop and enforce policies, procedures, and controls that protect our software from ever-evolving cyber threats.&nbsp; Working closely with cross-functional teams, you will ensure our applications meet the highest standards of security and compliance while fostering a culture of secure software development.In this role, you will tackle exciting challenges that push you to stay ahead of the curve in application security.&nbsp; You will have access to the latest tools and technologies and the opportunity to make a tangible impact on the security posture of our software systems.&nbsp; If you are passionate about application security and love solving complex technical problems, we want to hear from you!&nbsp; Join us and be a key part of shaping the future of secure software at National Life Group.Key Responsibilities:<ul><li>Collaborate with IT leadership to align and support the execution of the Application Security program’s vision, strategy, and governance, ensuring it meets organizational objectives.</li><li>Collaborate with IT teams to enhance the software security program by defining, documenting, and communicating security requirements within the SDLC. &nbsp;This may include integrating Software Composition Analysis (SCA), generating Software Bill of Materials (SBOM), and implementing comprehensive dependency management, ensuring alignment with industry best practices.</li><li>Work with stakeholders to automate continuous security assessments (web and mobile applications), manage tool implementation, identify critical vulnerabilities, and ensure a streamlined remediation process, minimizing security risk in the development lifecycle.</li><li>Enhance security reporting capabilities by developing metrics-driven dashboards and reports that communicate current risk exposures to leadership and highlight security improvements, including prioritized remediation and trend analysis.</li><li>Conduct detailed software, security code, design, and architecture reviews to assess risks, enforce secure coding standards, influence architectural decisions, and ensure potential security issues are identified and addressed prior to production deployments.</li><li>Lead threat modeling and security risk analysis across client-side and server-side applications.&nbsp;&nbsp; Provide actionable insights to development teams and security leadership, supporting risk-based decision-making process.</li></ul><ul><li>Collaborate with IT leadership and vendor partners to define and deliver application security training and awareness programs, tailored to development teams, focused on secure coding practices, and reducing vulnerabilities in production.</li></ul><ul><li>Oversee the governance of application security exceptions, ensuring all requests for deviations from security policies are evaluated based on a thorough risk assessment and documented with appropriate approvals.</li><li>Maintain an up-to-date knowledge of emerging security threats, vulnerabilities, and best practices, and proactively adjust the organization’s security posture to mitigate risks.&nbsp; This includes evaluating new security tools, practices, and frameworks for adoption where appropriate.</li><li>Promote a culture of security by collaborating with security and IT teams, advocating for secure-by-design principles, and developing reusable security code components that can be integrated into projects where applicable. </li></ul>Job Requirements:<ul><li>Bachelor’s degree in computer science, Information Security, or a related field.</li><li>A minimum of 5 years of experience in software development and/or software design, with hands-on coding experience in .NET, C#, Java, JavaScript and/or Python.</li><li>A minimum of 3 years of progressive experience in application security, with a demonstrated history of leading secure coding practices.</li><li>CISSP or CSSLP certification preferred.</li><li>Experience in designing and implementing security solutions for cloud-based technologies and APIs.</li><li>Demonstrated ability to translate vulnerability assessments and reports into prioritized, actionable tasks for development teams, ensuring that remediation efforts are aligned with risk assessments to address the most critical issues first.</li><li>Extensive experience with security assessment tools such as SAST, DAST, SCA, and fuzz testing, paired with a deep awareness of their strengths and limitations.&nbsp;</li><li>Thorough knowledge of OWASP Top 10, CWE 25, and data protection standards.</li><li>Strong analytical and problem-solving skills, with the ability to react quickly and effectively to production issues.</li><li>Excellent communication and presentation skills, with the ability to convey complex ideas in a clear and collaborative manner.</li><li>Proven ability to manage multiple priorities in a dynamic, fast-paced environment, effectively navigating ambiguity while consistently meeting deadlines.</li><li>Demonstrated leadership skills, with a passion for mentoring, coaching, and developing teams.</li><li>Strong relationship-building skills, with the ability to engage stakeholders at all levels, including senior leadership.</li><li>A proactive, self-motivated attitude with a clear passion for cybersecurity and servant leadership values.</li></ul><h6>The base compensation range represents the low and high end of the range for this position. Actual compensation will vary and may be above or below the range based on various factors including but not limited to qualifications, skills, competencies, location, and experience. The range listed is just one component of our total compensation package for employees.</h6><h6>Other rewards may include an annual bonus, quarterly bonuses, commissions, and other long-term incentive compensation, depending on the position.&nbsp; National Life offers a competitive total rewards package which includes: a 401(k) retirement plan match; medical, dental, and vision insurance; a company funded wellness account for director and below employees; 10 paid holidays; a generous paid time off plan (22 days of combined time-off for non-exempt employees and exempt employees have discretion in managing their time, including scheduling time off in the normal course of business, but in no event will exempt employees receive less sick time than required by state or local law); 6 weeks of paid parental leave; and 6 weeks of paid family leave after a year of full-time employment.</h6><h6>National Life is accepting applications for this role on an ongoing basis and the role remains open until filled. &nbsp;&nbsp;</h6><h6>National Life Group® is a trade name of National Life Insurance Company, Montpelier, VT – founded in 1848, Life Insurance Company of the Southwest, Addison, TX – chartered in 1955, and their affiliates. Each company of National Life Group is solely responsible for its own financial condition and contractual obligations. Life Insurance Company of the Southwest is not an authorized insurer in New York and does not conduct insurance business in New York. Equity Services, Inc., Member FINRA/SIPC, is a Broker/Dealer and Registered Investment Adviser affiliate of National Life Insurance Company. All other entities are independent of the companies of National Life Group.</h6><h6>National Life Group</h6><h6>1 National Life Dr</h6><h6>Montpelier, VT 05604</h6><h6>Social Media Policy&nbsp;</h6><h6>Site Disclosure and Privacy Policy&nbsp;</h6>

National Life Group

Sr. Engineer, Cybersecurity (Application Security)

<h4>Introduction</h4> Located in Willimantic, CT,&nbsp;Eastern Connecticut State University (ECSU)&nbsp;is one of the&nbsp;State of Connecticut&nbsp;institutions of higher learning and the state’s designated public liberal arts university.&nbsp;&nbsp;Our mission is to provide&nbsp;high&nbsp;quality undergraduate and select graduate programs to a diverse population of talented students.&nbsp; We are currently accepting applications for two (2) Connecticut POST Certified&nbsp;Police Officer&nbsp;positions to work at our campus, located in Windham County.&nbsp; WHAT WE CAN OFFER YOU: <ul><li>Industry leading health&nbsp;benefits, including medical, vision and dental coverage</li><li>Competitive starting salary and structure&nbsp;</li><li>Extensive pension plan and supplemental retirement offerings</li><li>Paid time off- including 13 holidays per calendar year</li><li>Professional growth and development opportunities</li><li>Culture that encourages&nbsp;work-life balance&nbsp;as well as an employee assistance program</li><li>Work for a Forbes top company: ‘Forbes’&nbsp;State of Connecticut Ranked One of the Best Employers of 2023&nbsp;State of CT Receives National Recognition for Offering Job Growth, Competitive Benefits, and Flexible Schedule</li></ul> POSITION HIGHLIGHTS: <ul><li>Full-time, 40 hours per week</li><li>Must be available to work all shifts</li><li>Candidates must be able to prove current State of Connecticut POSTC certification&nbsp;</li><li>Candidates must have been certified for over two years to be considered&nbsp;</li></ul> THE ROLE:&nbsp; As a University Police Officer, you will: <ul><li>Respond to emergencies and requests for assistance; provide crowd control at various events and activities;&nbsp;</li><li>Monitor designated areas to ensure physical security and authorized access in order to prevent theft, trespass, vandalism, or violation of state statutes or regulations;&nbsp;</li><li>Provide directions and routine information to the public; initiate and conduct criminal and other investigations of violations, suspicious activities or reports of incidents occurring within jurisdiction;&nbsp;</li><li>Direct traffic and enforce motor vehicle and parking regulations;&nbsp;</li><li>Conduct on-site investigations, including question witnesses, arrest individuals at scenes, and issue summonses;&nbsp;</li><li>Record information; and,</li><li>Serve as dispatcher when necessary.</li></ul> FOR ASSISTANCE IN APPLYING Please visit our&nbsp;"Applicant Tips on How to Apply"&nbsp;page <h4>Selection Plan</h4> To Apply: <ul><li>In order to be considered for this job opening&nbsp;you must meet the Minimum Qualifications as listed on the job opening.&nbsp;&nbsp;You must specify your qualifications on your application.</li><li>The minimum experience and training requirements must be met by the close date on the job opening, unless otherwise specified.</li><li>In order to receive educational credits toward qualification for this job posting, the institution must be accredited.&nbsp; If the institution of higher learning is located outside of the U.S., you are responsible for providing documentation from a recognized USA accrediting service which specializes in determining foreign education equivalencies to the individual listed on this job posting.&nbsp;</li><li>Ensure that your application is complete and detailed before submitting it. In order to comply with&nbsp;Public&nbsp;Act 21-69,&nbsp;the State of Connecticut is no longer asking for resumes during the initial application process. You will not be able to make revisions once your application is submitted into the JobAps system.</li><li>Please select all location(s) and shift(s) you are willing to work on your application. Failure to do so may result in not being considered for vacancies in that specific location or shift.</li><li>All application materials must be received by the recruiting agency by the time specified on the job opening for the position for which you are applying. Late applications may not be submitted and will not be considered. Exceptions are rare and limited to documented events that incapacitate a candidate during the entire duration of the job posting time period. It is the candidate’s obligation and responsibility to request an exception and provide a legally recognized justification to accommodate such exception. Requests should be made to&nbsp;<a href="mailto:Hr-Recruitment@easternct.edu" target="_blank">Hr-Recruitment@easternct.edu</a>.</li><li>For current state employees, salary calculations are not necessarily comparable from three branches of state government (i.e., Executive, Legislative, Judicial) to the&nbsp;other.&nbsp;&nbsp;</li></ul> FOR ASSISTANCE IN APPLYING: <ul><li>Please&nbsp;read&nbsp;or&nbsp;watch&nbsp;our&nbsp;Applicant Tips on How to Apply!</li></ul> Important Information After You Apply: <ul><li>This posting may require completion of additional referral questions (RQs). You can access these RQs via an email that will be sent to you after the posting's closing date or by visiting your JobAps Personal Status Board (Certification Questionnaires section). Your responses to these RQs must be submitted by the questionnaire's expiration date. Please regularly check your email and JobAps Personal Status Board for notifications. Please check your SPAM and/or Junk folders on a daily basis in the event an email provider places auto-notification emails in a user's spam.</li><li>Read through this helpful link to&nbsp;prepare for your interview.&nbsp;</li><li>Although applicants will receive correspondence via email, as a backup they are also encouraged to sign on to their Personal Status Board on a daily basis to monitor their status, view all emailed notices and complete tasks required in the recruitment process.</li><li>Note: At any point during the recruitment process, applicants may be required to submit additional documentation which support their qualification(s) for this position. These documents may include: a cover letter, resume, performance reviews, attendance records, supervisory references, licensure, etc., at the discretion of the hiring agency.</li><li>Interviews will be limited to candidates whose experience and training most closely meet the requirements of the position.</li><li>The immediate vacancy is listed above, however, applications to this&nbsp;recruitment may be used for future vacancies in this job class in the next twelve (12) months.</li><li>Candidates who are offered and accept a position with the State of Connecticut are bound&nbsp;by the State Code of Ethics for Public Officials and State Employees which is available at&nbsp;<a href="http://www.ct.gov/ethics" target="_blank">www.ct.gov/ethics</a>.</li></ul> Connect With Us: Due to the large volume of applications received, we are unable to provide confirmation of receipt or status during the recruitment process. Updates will be available through your JobAps portal account. Should you have any questions pertaining to this recruitment, please contact Charlene Gobeli at&nbsp;<a href="mailto:Hr-Recruitment@easternct.edu" target="_blank">Hr-Recruitment@easternct.edu</a>. Follow the State of Connecticut&nbsp;on&nbsp;LinkedIn. <h4>PURPOSE OF JOB CLASS (NATURE OF WORK)</h4> In a state agency, college or university this class is accountable for independently performing a full range of tasks in the protection, safety and security of individuals and property with full police powers and responsibility for law enforcement. <h4>EXAMPLES OF DUTIES</h4> The Police Officer may perform a combination or concentration of the following functions on a fixed or rotating basis as directed by the agency: SECURITY:&nbsp; <ul><li>Provides crowd control at various events and activities;&nbsp;</li><li>Monitors designated areas to ensure physical security and authorized access in order to prevent theft, trespass, vandalism or violation of state statutes or regulations;&nbsp;</li><li>Gives directions and routine information to the public;&nbsp;</li><li>Participates in evacuation activities in event of fire, bomb threats or other potential disasters;&nbsp;</li><li>Operates firefighting apparatus if needed;&nbsp;</li><li>May conduct cruiser or foot patrols;&nbsp;</li><li>May conduct bicycle patrols as weather permits.</li></ul> PROTECTION:&nbsp; <ul><li>Provides traffic and/or crowd control;&nbsp;</li><li>Assesses nature of further assistance needed and makes timely and appropriate arrangements;&nbsp;</li><li>May gather background information and provide threat assessments regarding high risk locations, safety of persons or property, biological or physical threats;&nbsp;</li><li>May respond to emergency situations and provide CPR or first aid to injured parties;&nbsp;</li><li>May transport or escort couriers with currency and prisoners or Absent Without Leave (AWOL) persons;&nbsp;</li><li>May assist in search for escaped patients or inmates;&nbsp;</li><li>May assist State Police in investigation of major criminal acts;&nbsp;</li><li>May be required to maintain building security and perform patrol duties at time of heightened alert level under Homeland Security procedures.</li></ul> ENFORCEMENT:&nbsp; <ul><li>Directs traffic and enforces motor vehicle and parking regulations;&nbsp;</li><li>May initiate and conduct criminal and other investigations of violations, suspicious activities or reports of incidents occurring within jurisdiction;&nbsp;</li><li>May conduct on site investigations, question witnesses, arrest individuals at scene and issue summons.</li></ul> ADMINISTRATION:&nbsp; <ul><li>Records information;&nbsp;</li><li>Applies for and serves arrest warrants;&nbsp;</li><li>Processes paperwork on arrests and activity reports;&nbsp;</li><li>Arranges surety and non-surety bond payments or Written Promise to Appear (WPA);&nbsp;</li><li>Provides court testimony;&nbsp;</li><li>Conducts special programs, projects and services as required;&nbsp;</li><li>May process arrested individuals including determining charges, fingerprinting, photographing, initiating National Crime Information Computer (NCIC) check, searching, removing and inventorying personal belongings and transporting arrested persons to lock up;&nbsp;</li><li>May conduct various safety training, certification and/or recertification courses;&nbsp;</li><li>May perform minor equipment repairs;&nbsp;</li><li>May make public presentations regarding crime prevention and safety;&nbsp;</li><li>May serve as dispatcher;&nbsp;</li><li>Performs related duties as required.</li></ul> CONNECTICUT LOTTERY CORPORATION:&nbsp; <ul><li>May enforce gaming regulations for Connecticut Lottery Corporation and casinos.</li></ul> DEPARTMENT OF ENERGY AND ENVIRONMENTAL PROTECTION:&nbsp;&nbsp; <ul><li>Assists Conservation Enforcement Officers in the enforcement of state laws and regulations pertaining to fish, wildlife, parks, forests, boating, snowmobiling and the use of department owned or leased land facilities.</li></ul> <h4>KNOWLEDGE, SKILL AND ABILITY</h4> <ul><li>Knowledge of <ul><li>police and security practices and procedures;&nbsp;</li><li>relevant state and federal laws, statutes and regulations;&nbsp;</li><li>traffic and crowd control practices and procedures;&nbsp;</li><li>criminal law and court procedures;&nbsp;</li></ul></li><li>Considerable <ul><li>interpersonal skills;&nbsp;</li><li>oral and written communication skills;&nbsp;</li></ul></li><li>Ability to <ul><li>analyze emergency situations and develop effective courses of action;&nbsp;</li><li>utilize computer software.</li></ul></li></ul> <h4>MINIMUM QUALIFICATIONS - GENERAL EXPERIENCE</h4> Certification as a law enforcement officer in the State of Connecticut pursuant to regulations promulgated by the Connecticut Police Officer Standards and Training Council. NOTE: Candidates with a pending certification status may be employed on a temporary basis pending re-certification by the Connecticut Police Officer Standards and Training Council. <h4>MINIMUM QUALIFICATIONS - SUBSTITUTIONS ALLOWED</h4> Successful completion of prescribed training and probationary requirements set forth in the class of Protective Services Trainee. <h4>PREFERRED QUALIFICATIONS</h4> Applicants with the follow experience and training is preferred: <ul><li>Excellent written and verbal communications</li><li>Attention to detail, accuracy and proof-reading experience</li></ul> <h4>SPECIAL REQUIREMENTS</h4> <ul><li>Applicants must be authorized to work lawfully in the United States by date of appointment.</li><li>Candidates for this class are subject to selection standards pursuant to Section 7-294-a-e of the Connecticut General Statues and the regulations of the Connecticut Police Officer Standards and Training Council.</li><li>Incumbents in this class must possess and maintain authority from the Commissioner of Emergency Services and Public Protection to “arrest and present before a competent authority any person for any offense committed within his precinct.” (Connecticut General Statutes 29-18 and/or 10a-142)</li><li>Incumbents in this class must possess and maintain certification as a law enforcement officer in the State of Connecticut pursuant to Section 7-294-a-e of the Connecticut General Statutes and the regulations promulgated by the Connecticut Police Officer Standards and Training Council. Loss of certification will result in removal from the class.</li><li>Incumbents in this class may be required to maintain certifications pursuant to the regulations of the Connecticut Police Officer Standards and Training Council and/or agency requirements.</li><li>Incumbents in this class must possess and maintain a valid Motor Vehicle operator’s license.</li><li>Incumbents in this class may be required to obtain and retain Emergency Medical Technician (EMT) certification.</li><li>Incumbents in this class must be eligible and qualified to bear arms.</li><li>Incumbents in this class may be required to travel.</li><li>Department of Energy and Environmental Protection: Incumbents in this class will be required to obtain and retain a Standard First Aid certificate and CPR certificate and participate in any job-related training sessions.</li><li>Department of Energy and Environmental Protection: Incumbents in this class must be willing to accept assignments or transfers to any region of the state consistent with departmental policies or stipulations and work a flexible schedule.</li></ul> <h4>CHARACTER REQUIREMENTS</h4> In addition to the checking of references and of facts stated in the application, a thorough background investigation of each candidate may be made before persons are certified for appointment. <h4>PHYSICAL REQUIREMENTS</h4> <ul><li>Incumbents in this class must have general good health, be free from any disease or injury which would impair health or usefulness and possess and retain sufficient physical strength, stamina, agility, endurance and visual and auditory acuity required, to perform the duties of the class. A physical fitness assessment will be required of all applicants.</li><li>A comprehensive medical examination, including a controlled substance screening, will be required of all applicants upon a conditional offer of employment.</li><li>Department of Energy and Environmental Protection: Incumbents in this class must be able to pass a swim test including swimming 100 yards within four (4) minutes.</li></ul> <h4>WORKING CONDITIONS</h4> Incumbents in this class may be exposed to unpleasant and/or dangerous situations which could cause injury or loss of life, to uncomfortable weather conditions and/or to confinement within a vehicle for prolonged periods. <h4>Conclusion</h4> AN AFFIRMATIVE ACTION/EQUAL OPPORTUNITY EMPLOYER The State of Connecticut is an equal opportunity/affirmative action employer and strongly encourages the applications of women, minorities, and persons with disabilities. <h4>ACKNOWLEDGEMENT</h4> As defined by Sec. 5-196 of the Connecticut General Statutes, a job class is a position or group of positions that share general characteristics and are categorized under a single title for administrative purposes. As such, a job class is not meant to be all-inclusive of every task and/or responsibility.

State of Connecticut

Police Officer

Job Description and RequirementsInformation Security Assurance Administrators strengthen the organization's information security posture through the construction, socialization and performance measurement of policies and procedures based on best practices, adopted frameworks, and risk assessment activities.&nbsp;Essential Functions and Responsibilities:<ul><li>Contribute to the strategic and tactical initiatives involving activities associated with managing IT Risk.</li><li>Assist with auditing systems, processes and users to ensure compliance with the organization's information security policies and procedures.</li><li>Assist in the creation and analysis of information security reports on the performance of controls across the enterprise.</li><li>Assist with documenting an organization’s information security requirements in a business context and participate in high-level discussions to identify and respond to business risks.</li><li>Assist with security reviews with stakeholders throughout the organization, identifying gaps and developing risk mitigation plans.</li><li>Provides ongoing support of an effective disaster recovery/incident response program. Works with management to ensure that disaster recovery/incident response plans drive proper strategy and procedures.</li><li>Assist with the development and execution of testing processes utilized to validate the disaster recovery/incident response plans. Schedule and lead all tabletop exercises.&nbsp; Develop and understand all testing necessary for a successful execution.</li><li>Works with the IT staff to ensure that disaster/incident response solutions are adequate, in place, maintained, and tested as part of the regular operational life cycle.</li><li>Assist with the development and deployment of training documentation and communication of incident procedures to the organization.</li><li>Assist with vendor risk assessments.</li><li>With guidance, produce deliverables, specifically process flows, procedure documentation, writing specialized assessment reports, related to process, tools, and metrics and communication activities.</li><li>All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice).</li></ul>Requirements:<ul><li>High School Diploma or GED. Bachelor’s degree in information technology preferred</li><li>Minimum of 3 years’ experience in IT Operations, Security, Risk, and/or Audit</li><li>Technical Project Management and/or Business Analysis experience desired</li><li>Understanding of technical concepts including system, application and network functions and design</li><li>Understanding of financial institution governance and regulations including SSAE16/18, FFIEC, GLBA and NCUA</li><li>Must have high level of communications skills to communicate with all levels of management</li><li>Experience supporting technical projects with technical and non-technical participants</li><li>Experience directly supporting an organization's information security program through development and implementation of policies, standards and procedures</li></ul>Skills and/or Certifications/Licensing <ul><li>Strong oral/written communication, organization, time management and interpersonal skills</li><li>Highly proficient with Microsoft Office software</li><li>Highly self-motivated, able to multi-task and manage deadlines well</li><li>Security certificates, CISA other IT governance related certifications preferred</li><li>Knowledge of regulations and best practices for information security including guidance published by NIST, FFIEC, and CIS</li></ul>All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.

RBFCU

Information Security Assurance Analyst

Job Description and RequirementsThe Information Security Analyst performs tasks to implement and maintain the data security controls that are mandated by policies and regulations. Works closely with the Director of Security Operations to identify and recommends opportunities to implement, enhance, develop, and strengthen the IT Security Team. &nbsp;Research security vulnerabilities, implement security controls, configuration changes, patches and needed updates to resolve IT security issues.&nbsp;Essential Functions and Responsibilities:<ul><li>Plan, coordinate and implement operating system, hardware and software security updates.</li><li>Maintain knowledge of current information security regulations and laws effecting the credit union’s records, processes, products and systems.</li><li>Works with IT department and members of the information security team to identify, select and implement technical control.</li><li>Keep up to date with latest security threats and vulnerabilities.</li><li>Reports findings concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance.</li><li>Assists security configuration and operations standards for security systems and applications, including policy assessment and compliance tools, network security appliances, and host-based security systems.</li><li>Develops and validates baseline security configurations for operating systems, applications, networking and telecommunications equipment.</li><li>Assists IT staff in the resolution of security incidents and events.</li><li>Collaborates on IT projects to ensure that security issues are addressed throughout the project life cycle.</li><li>All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice).</li></ul>Requirements:<ul><li>One to three years of technical information security experience performing tasks as described in the job description AND/OR three years hands on Windows or Linux system advanced administration and or SIEM, end point protection systems, vulnerability management systems, malware detection and remediation processes &nbsp;</li><li>Secure coding knowledge desired&nbsp;</li><li>Knowledge of computer system services, patch management software, mobile device management, 3rd party patch management software, end point protection systems, data loss prevention systems, vulnerability management systems, firewalls, proxies, malware detection and remediation processes</li></ul>Skills and/or Certifications/Licensing:<ul><li>Prefer relevant security certifications such as CompTIA Security+, CompTIA Linux+ or vendor related certifications from Microsoft or Cisco</li></ul>All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.

Information Security Analyst

Job Description and RequirementsThe Cloud Information Security Analyst will performs tasks to implement and maintain the data security controls that are mandated by policies and regulations. Works closely with the Director of Security Operations to identify and recommends opportunities to implement, enhance, develop, and strengthen the IT Security Team.Research security vulnerabilities, implement security controls, configuration changes, patches and needed updates to resolve IT security issues. Essential Functions and Responsibilities:<ul><li>Serve as the central point of contact for IT Security for other Technology teams within the organization related to cloud technologies.</li><li>Assist with design and develop security architectures for Cloud and Cloud hybrid based systems.</li><li>Assist with design and implement Cloud-native architectures that will allow business requirements to be met with a minimal degree of risk to the organization.</li><li>Represent security in development and implementation of the overall enterprise Cloud architecture.</li><li>Works with infrastructure services, and application development organizations to choose appropriate cloud technology solutions.</li><li>Identifies, recommends, coordinates, and delivers timely knowledge to support teams regarding cloud security technologies, processes or tools.</li><li>Create, modify, and maintain cloud architectures documentation.</li><li>All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice).</li></ul>Requirements:<ul><li>High School Diploma or GED. Associates Degree in Information Technology, Information Security or Information Assurance preferred</li><li>One to three years of technical information security experience performing tasks as described in the job description and or three years hands on cloud and cloud hybrid systems</li><li>Previous experience in a Security Analyst role</li><li>Demonstrated Experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies such as (Secure Software development, Application Security, data protection, cryptography, key management, and identity access management</li><li>Knowledge of standard Cloud-native authentication mechanisms</li><li>Familiarity with deployment orchestration, automation, and security configuration management.</li><li>Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies</li><li>Experience with enterprise applications (architecture, development, support, and troubleshooting)</li><li>Ability to perform threat modeling and design reviews to assess security implications and requirements for introduction of new technologies</li><li>Familiarity with O365 implementation and ongoing transitions</li></ul>Skills and/or Certifications and Licensing:<ul><li>Prefer relevant security certifications such as CompTIA Security+, CompTIA Linux+ or vendor related certifications from Microsoft or Cisco</li><li>Knowledge of standard Cloud-native authentication mechanisms </li><li>Familiarity with deployment orchestration, automation, and security configuration management.Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies</li><li>Experience with enterprise applications (architecture, development, support, and troubleshooting)</li><li>Ability to perform threat modeling and design reviews to assess security implications and requirements for introduction of new technologies</li></ul>All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.

123 Public Services Jobs