cyber security administrator

Cloud Rexpo Pvt. Ltd.

Job Level: Entry to Mid-Level On-Site, Day Shift Location: Bahria Town Phase 7, Rawalpindi.Purpose of the RoleWe are seeking a proactive and technically competent Cyber Security Administrator to strengthen our cyber defenses and support compliance efforts. You will manage security systems, monitor threats, and assist with incident response to protect critical data and systems.The ideal candidate will have a strong security mindset, solid technical skills, and the ability to collaborate effectively with IT, compliance, and operational teams.Key Responsibilities:<ul><li>Configure and maintain security tools and infrastructure</li><li>Can create and manage servers</li><li>Monitor system activity and analyze security logs and alerts</li><li>Conduct vulnerability assessments and apply security recommendations</li><li>Manage patching process and system updates</li><li>Support user access and identity management</li><li>Lead incident investigations and documentation</li><li>Deliver cyber security awareness training</li><li>Support adherence to security frameworks and regulations</li></ul>Qualifications and Skills Essential:<ul><li>Degree in Cyber Security, Computer Science, IT or equivalent</li><li>Hands-on experience with security technologies (SIEM, firewalls, antivirus)</li><li>Strong analytical and communication skills</li></ul>Desirable:<ul><li>Professional certifications (e.g. CompTIA Security+, CEH, CISSP)</li><li>Previous SOC or IT support experience</li><li>Cloud security knowledge (AWS, Azure)</li><li>Experience with compliance standards and security frameworks</li></ul>Job Type: Full-timePay: Rs100,000.00 - Rs150,000.00 per monthEducation:<ul><li>Bachelor's (Required)</li></ul>Experience:<ul><li>Security Technologies (SIEM, firewalls, antivirus): 1 year (Required)</li><li>Cloud Security Knowledge (AWS, Azure): 1 year (Required)</li></ul>License/Certification:<ul><li>Certifications e.g. CompTIA Security+, CEH, CISSP (Required)</li></ul>Work Location: In person

Cyber Security Administrator (On-Site)

Al Hikma Building Contracting

The IT Administrator &ndash; Cybersecurity Specialist will be responsible for the planning, installation, configuration, maintenance, and optimization of the organization's computer systems, networks, and IT infrastructure. This role will place a strong emphasis on cybersecurity, ensuring the protection of company data, emails, and communications, while maintaining the smooth and secure operation of all IT-related functions. The role also provides technical support to employees and leads initiatives to strengthen the organization&rsquo;s IT security posture.Key Responsibilities:<ul><li>Systems &amp; Network Management: Manage and maintain servers, networks, and IT systems to ensure performance, reliability, and security.</li><li>Cybersecurity &amp; Email Protection: Design, implement, and manage security solutions including firewalls, endpoint protection, intrusion detection/prevention systems, and secure email gateways (anti-phishing, anti-spam, encryption).</li><li>Data Protection &amp; Compliance: Ensure compliance with data protection regulations (e.g., GDPR, UAE laws) and safeguard company communications and confidential information.</li><li>Cloud Security: Manage and secure cloud services (Microsoft 365, Google Workspace, Azure, AWS), with a particular focus on email and data protection.</li><li>Backup &amp; Disaster Recovery: Develop and implement robust backup, disaster recovery, and business continuity plans.</li><li>Technical Support: Provide technical support and troubleshooting for employees, covering hardware, software, and network-related issues.</li><li>Documentation: Maintain comprehensive IT documentation, including systems, processes, and inventory.</li><li>Procurement &amp; Vendor Management: Assist with the procurement of new technologies and services, liaising with vendors to ensure best practices in IT and cybersecurity.</li><li>User Awareness Training: Conduct regular IT security awareness sessions for employees to mitigate risks from phishing and other cyber threats.</li></ul>Required Qualifications:<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, or related field (or equivalent professional experience).</li><li>5 years of proven experience in IT administration, systems/network management, and cybersecurity.</li><li>expertise in operating systems</li><li>Excellent analytical, problem-solving, and troubleshooting skills.</li><li>Strong written and verbal communication skills.</li></ul>Preferred Certifications &amp; Skills:<ul><li>Professional certifications such as CISSP, CISM, CEH, Microsoft Security, Cisco Security, or equivalent.</li><li>Experience with Microsoft 365 Security, Exchange, Proofpoint, Mimecast, or similar email protection platforms.</li><li>Hands-on experience with SIEM tools (Splunk, Microsoft Sentinel).</li><li>Knowledge of current cyber threats (Phishing, Ransomware, Data Breaches) and mitigation strategies.</li><li>Ability to design and implement IT security strategy from the ground up.</li><li>Experience in managing a small IT/security team and external vendors.</li></ul>Job Type: Full-timeExperience:<ul><li>IT: 3 years (Required)</li></ul>Language:<ul><li>English (Required)</li></ul>

IT Administrator – Cybersecurity Specialist

MAERSK

<div>Associate Cyber Manager &ndash; Portfolio Cyber Support &ndash; Cyber Portfolio Management (Maersk)
Job Level 3 (Associate Cyber Manager)
A.P. Moller - Maersk
A.P. Moller &ndash; Maersk is the global leader in container shipping services. The business operates in 130 countries and employs c. 100,000 staff. An integrated container logistics company, Maersk aims to connect and simplify its customers&rsquo; supply chains.
We Offer / The Brief
Maersk is going through times of unprecedented change and is growing its capability to provide enhanced Cyber Security solutions to support the organization&rsquo;s Digital Transformation.
This role is key to ensure Maersk Technology's transformation remains aligned to Cyber security principles and Board level commitments, with Cyber security embedded at all lifecycle stages of product and service development to maintain our customers security and trust in Maersk as the leading global integrator par excellence.
At Maersk we value the diversity of our talent and will always strive to recruit the best person for the job &ndash; we value diversity in all its forms, including but not limited to: gender, age, nationality, race, sexual orientation, disability or religious beliefs. We are proud of our diversity and see it as a genuine source of strength for building high performing teams.
We are recruiting world-class talent to ensure that the technology services are modernised, enabling Maersk to become a logistics integrator leveraging a competitive advantage through technology.
Why this job matters?
Working with the Portfolio Cyber Leads you will be part of the Portfolio Management function, which is accountable for maximising Cyber value realisation at the strategic level.
The Portfolio function governs the levers and interlocks for value realisation and performance management (of the Cyber Portfolio) to ensure alignment to business goals (assessed through management reports), and through continued engagement with Platform leads x Technology to negotiate and commit outcomes as changes occur (through the Portfolio Cyber Leads), and through internal governance within Cyber (Cyber Portfolio Operations and Data Quality).
Scope
Supporting the Portfolio Cyber Leads you will be aligned to various Maersk Tech Platforms.
We are searching for candidates with a cyber background, who enjoy working in an ever-changing, fast paced environment, are adaptive, collaborative and persuasive.
With high EQ and a collaborative nature, you will be able to navigate internally in Cyber and will be expected to build and maintain relationships across multiple Departments (Risk, Architecture, Operations and Governance).
Your knowledge of Maersk&rsquo;s Technology strategies, and ongoing situational awareness will ensure Cyber is at the heart of Tech&rsquo;s transformation, continuing to secure Maersk services as we not only transform aligned to the global integrator strategy but also complete our security promise to customers &lsquo;Secured by Maersk&rsquo;.
Your position will be key in developing new Front of House (FoH) methodologies, embedding processes, and promoting strong team collaboration.
To be successful in this role you will need to be able to identify challenges and opportunities in both ways of working, and in your allocated Platform Portfolio&rsquo;s requirements of Cyber/from Cyber.
In joining Maersk, you will embark on a great journey with career development in a global organization. You will be exposed to a wide and challenging range of business issues, communicate across geographical and cultural borders that will enable you to expand your strong professional network. We will provide you with opportunities to broaden your knowledge and strengthen your technical and professional foundation, working with agile teams that are responsible for providing crucial Cyber Security capability for the entire Maersk Global Organization and its customers.
Specific Job Requirements - What I'll be doing &ndash; your accountabilities?
Responsibilities will include but not be limited to:
<ul><li>Actively facilitates, coordinates and drives each FoH team (aligned to Portfolio Cyber Leads) to follow common ceremonies and utilise common tools and techniques to ensure situational awareness and context is maintained across all Portfolios and Brands
</li><li>Uses tooling competencies (Jira, Confluence, Teams, Archer and related tooling) to minimise duplication of effort and maximise visibility of requirements
</li><li>Communicates on the team's activity/progress using shared reports, tracking, and reporting of backlog progress including clear identification of associated risks, dependencies, or any issues
</li><li>Supports the Portfolio Cyber Lead to identify and clarify emerging requirements both of Cyber from Platform Portfolios and from Cyber to Technology teams, ensuring visibility, alignment, and readiness to respond to evolving priorities across the Cyber Portfolio
</li><li>Identifies opportunities for optimisation working alongside BA&rsquo;s and Portfolio Operations to maximise value overall
</li><li>Coordinates with internal stakeholders to gather updates, clarify requirements, and ensure alignment across delivery teams
</li><li>Reports into Data Quality to ensure quality, standardisation, and value add of roles
</li><li>Actively support the maturation of the Portfolio Management function
</li><li>Actively support the embedding of all new processes related to Cyber FoH, drive mindset and behavioural changes, key to collective success, share best practise with peers in this new function and operate with a continual learning and continual improvement mentality
</li><li>Applies foundational understanding of AI tools and techniques to explore opportunities for automation, insight generation, and process improvement within the Cyber Portfolio
</li><li>Uses data analysis tools (e.g., Excel, Power BI) to support visibility of progress, risks, and opportunities, contributing to informed decision-making and continuous improvement
</li></ul>The Candidate
<ul><li>Someone who can lead by example, encourage and engage with the teams to ensure FoH becomes a high-performing virtual team that is keen to learn and evolve
</li><li>Demonstrable experience engaging, motivating, influencing and negotiating with cross functional teams particularly in complex and challenging environments
</li><li>Strong organisational and administrative skills, able to connect more senior colleagues with the detail they need to be aware of
</li><li>Highly organised, can juggle multiple simultaneous priorities and does not lose sight of the value of each requirement
</li><li>Self-organised, with the ability to work independently in a multi-location team to plan and manage multiple assignments with conflicting priorities, and continually emerging dependencies
</li><li>A problem solver who strives to continually improve the quality of processes and artefacts they are accountable for
</li><li>Able to build and develop productive working relationships with a wide variety of teams and leaders (Portfolio, Risk, Architecture, Governance)
</li><li>Foundational knowledge of Cyber Security principles, with a strong interest in developing deeper expertise across areas such as governance, risk management, and implementation practices
</li></ul>Technical/Core skills:
<ul><li>5 years' experience working in Cyber Security
</li><li>3-4 years&rsquo; Experience of working as a Scrum Master or within technical delivery teams, with working knowledge of Agile frameworks (e.g., Kanban, SAFe)
</li><li>Familiarity with portfolio and project support practices, including documentation, backlog tracking, and governance reporting
</li><li>Experience using collaboration and delivery tools such as JIRA, Confluence, MIRO, MURAL, and Microsoft Teams
</li><li>Basic proficiency in data analysis and visualisation using tools such as Excel or Power BI to support reporting and decision-making
</li><li>Foundational understanding of AI tools and techniques, with a willingness to explore their application in Cyber and delivery contexts
</li></ul>Basic knowledge of one or more of the following areas:
<ul><li>Cyber Security (IT, ICS, IoT, OT) auditing process
</li><li>Cyber Security Governance and Risk Management
</li><li>Data Management &amp; Modelling
</li><li>Cyber Security Implementation - IDAM, PKI, cryptography, zero trust networks, wireless, mobile and end-to-end security
</li></ul>Education:
<ul><li>Degree level minimum
</li></ul>Personal Profile:
<ul><li>Self-starter, collaborative, enjoys problem solving
</li><li>Experience building processes &lsquo;from the ground up&rsquo;
</li><li>Excellent written and verbal communication skills and able to be understood by both technical and non-technical personnel
</li><li>Ability to manage conflicting priorities and multiple tasks
</li></ul>Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements. 
We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing accommodationrequests@maersk.com .</div>

Associate Cyber Manager

Sanam

Position Overview: We are seeking an experienced Cybersecurity GRC Manager to design, implement, and oversee SANAM&rsquo;s GRC framework. The role requires aligning cybersecurity practices with national and international regulatory standards (SAMA CSF, NCA ECC, PDPL, ISO 27001, PCI DSS, NIST, etc.), conducting comprehensive risk assessments, compliance audits, gap analyses, and full-cycle framework implementations. The ideal candidate combines strategic vision with hands-on execution, ensuring that SANAM maintains a strong security posture, regulatory compliance, and stakeholder trust.Key Responsibilities: <ul><li>Develop, maintain, and oversee the Cyber Security framework, including processes, policies, procedures, standards, and guidelines.</li><li>Design, implement, and maintain risk management processes &amp; delivering risk-based cyber security solutions that address people, process and technology.</li><li>Align cybersecurity and governance practices with national and international regulatory standards.</li><li>Lead the full risk assessment lifecycle: identification, prioritization, mitigation, and reporting of SANAM&rsquo;s information assets.</li><li>Conduct comprehensive compliance audits and gap analyses.</li><li>Maintain and update the risk register while monitoring and reporting mitigation efforts.</li><li>Manage compliance with SAMA CSF, PDPL, ISO 27001, NCA ECC, PCI DSS, and other frameworks.</li><li>Conduct internal audits and assessments to identify gaps and ensure timely remediation.</li><li>Lead awareness and training programs for staff, customers, and third parties.</li><li>Oversee Third-Party Risk Assessments (TPRA) and vendor compliance with policies, regulations, and SLAs.</li><li>Manage relations with regulators, auditors, and GRC related external stakeholders.</li><li>Oversee CS committee meetings and ensure structured governance reporting.</li><li>Lead SANAM&rsquo;s representation in regulatory inspections, cybersecurity compliance assessments, and GRC-related audits, ensuring the organization demonstrates a robust posture of CS governance, risk management, and compliance.</li><li>Measuring and reporting the KRIs and KPIs and providing regular updates to the CEO and senior management.</li><li>Perform any additional GRC-related responsibilities as assigned to support SANAM&rsquo;s evolving compliance and risk landscape.</li></ul>Qualifications: <ul><li>Saudi national (Preferred)</li><li>4+ years of experience in Cybersecurity GRC within financial services, fintech, or regulated industries.</li><li>Proven experience in risk assessments, compliance audits, gap analyses, and full-cycle framework implementations.</li><li>Deep knowledge and practical experience with frameworks like SAMA CSF, NCA ECC, PDPL standards.</li><li>Strong understanding of governance best practices and policy development.</li><li>Excellent English communication skills.</li><li>Strong analytical, documentation, and reporting abilities.</li></ul>Soft Skills: <ul><li>Strong attention to detail and disciplined approach to compliance and governance.</li><li>Strategic thinker with the ability to balance regulatory requirements and business needs.</li><li>Exceptional communication and presentation skills for engaging senior management and regulators.</li><li>Resilient under pressure, particularly during audits and regulatory reviews.</li><li>Blend of strategic vision and hands-on execution, driving both high-level initiatives and detailed implementations.</li><li>Strong Sense of Ownership: Takes initiative and responsibility for tasks and projects.</li></ul>Job Type: Full-timeApplication Question(s):<ul><li>Are you a Saudi National?</li><li>What is your salary expectation in SAR?</li></ul>Experience:<ul><li>Cybersecurity: 4 years (Required)</li></ul>License/Certification:<ul><li>Cybersecurity Certificates (Preferred)</li></ul>Location:<ul><li>Riyadh (Preferred)</li></ul>

Cybersecurity GRC Manager

JPMorganChase

<div>JOB DESCRIPTION 
The Supplier Assurance Services (SAS) team performs comprehensive risk assessments of suppliers within JPMC&rsquo;s Corporate Third Party Oversight (CTPO) program. SAS also supports JPMC&rsquo;s Cybersecurity and Technology functions by designing and implementing controls and processes to further enhance the security posture of JPMC&rsquo;s supply chain. SAS is part of Global Supplier Services (GSS), reporting directly to JPMC&rsquo;s Global Head of Corporate Third Party Oversight.
Job Summar
As an Associate, Supplier Cybersecurity Controls Assessor within the Supplier Assurance Services (SAS) team, you will perform technology and cybersecurity control assessments of supplier environments. These assessments review infrastructure, application stacks and other technologies to ensure compliance with JPMC Corporate Policies &amp; Standards. You will validate those technical risks are managed by JPMC Issue Owners and security controls are fully implemented. You will partner with JPMC&rsquo;s Global Cybersecurity and Technology team and JPMC&rsquo;s Lines of Business (LOBs) to focus on the latest cyber risks identified in the industry.
Job responsibilities
<ul><li>Manage all aspects of the control assessment of suppliers including assessing completed questionnaires and supporting field work materials to ensure they are complete and meet JPMC expectations.</li><li>
Lead the onsite / virtual assessment, providing the overall technology and cybersecurity risk and controls expertise.</li><li>
Identify and document control breaks and vulnerabilities within suppliers&rsquo; IT environments and work with the LOB Delivery Manager and Information Security Manager to resolve through action plans or seek risk acceptance approvals.</li><li>
Identify opportunities for process improvements to deliver increased operational efficiency and opportunities for improving supplier posture including expanded monitoring, key risk indicator tracking, etc.</li><li>
Support internal education and best practices sharing with peers and colleagues, as well as third party education &amp; awareness</li><li>
Escalate issues associated with suppliers as needed.</li></ul>
Required qualifications, capabilities, and skills<ul><li>
5+ years of experience in Technology, Technology Risk &amp; Controls, Technology Audit, Cybersecurity, Application Security, Cloud Security (SaaS, PaaS &amp; IaaS), Network, Security, Cyber Resiliency and Third Party Outsourcing Risk Management within a large enterprise level environment.</li><li>
Understanding of industry risk frameworks (ISO27001, NIST Cybersecurity Framework, etc.)</li><li>
Strong written and verbal presentation skills at the senior management level</li><li>
Experience debating issues with senior decision makers and pushing back when necessary</li></ul>
Preferred qualifications, capabilities, and skills
<ul><li>CISSP, CISA, CISM, CCSP or CRISC certification is a plus</li></ul>
ABOUT US<div> 
JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world&rsquo;s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management. 
 
We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.</div> 
 
 
ABOUT THE TEAM 
<div>
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we&rsquo;re setting our businesses, clients, customers and employees up for success.</div><div> 
 
</div><div>Global Supplier Services (GSS) manages the source-to-pay cycle, engaging with suppliers, negotiating contracts, conducting risk assessments and evaluating the customer experience. Global teams support sourcing, third party oversight, procurement and payment operations, supplier relationship management and customer experience.</div></div>

Associate, Supplier Cybersecurity Controls Assessor

Foodics

<div>Who Are We&#10067;
We Are Foodics! a leading restaurant management ecosystem and payment tech provider. Founded in 2014 with headquarters in Riyadh and offices across 5 countries, including UAE, Egypt, Jordan and Kuwait. We are currently serving customers and partners in over 35 different countries worldwide. Our innovative products have successfully processed over 6 billion (yes, billion with a B) orders so far! making Foodics one of the most rapidly evolving SaaS companies to ever emerge from the MENA region. Also, Foodics has achieved three rounds of funding, with the latest raising $170 million in the largest SaaS funding round in MENA, boosting its innovation capabilities to better serve business owners.
The Job in a Nutshell
The Cybersecurity GRC lead will be responsible for developing and implementing Cyber Security policies, standards, and procedures in alignment with regulatory requirements such as SAMA and best practices. Collaborate with stakeholders to prioritize and implement risk mitigations. And Recommend improvements to enhance the overall security posture.
What you will do<ul>
<li>
Develop and implement a comprehensive cybersecurity strategy aligned with the organization&rsquo;s business objectives.</li>
<li>Design and maintain cybersecurity policies, standards, and procedures to comply with regulatory and industry best practices.</li>
<li>Evaluate and recommend emerging security technologies to strengthen the overall security posture.</li>
<li>Identify, assess, and mitigate cybersecurity risks and vulnerabilities across systems and infrastructure.</li>
<li>Conduct regular risk assessments, audits, and configuration reviews to ensure the effectiveness of security controls.</li>
<li>Ensure ongoing compliance with SAMA, NCA, and other relevant regulatory bodies.</li>
<li>Facilitate and deliver cybersecurity awareness and training sessions organization wide.</li>
<li>Represent the cybersecurity function in external audit meetings and support audit readiness.</li>
<li>Establish, coordinate, and maintain the Cybersecurity Committee, ensuring cross-functional representation and action tracking.</li>
<li>Collaborate with IT, legal, compliance, and business teams to embed security controls in systems and project lifecycles.</li>
<li>Maintaining clear communication and coordinating responses to ad-hoc assessments and compliance inquiries.</li>
</ul>
What Are We Looking For&#10067;<ul>
<li>
Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related field. A Master&rsquo;s degree is a plus.</li>
<li>4 years of experience in cybersecurity GRC, technical experience is a plus.</li>
<li>Strong knowledge of cybersecurity frameworks such as SAMA CSF, NCA ECC, ISO 27001, or CIS Controls.</li>
<li>Relevant certifications such as ISO 27001 Lead Implementer ,ISO 31000 Risk Management, GRCP or CGRC or similar will be a plus</li>
<li>Excellent problem-solving and decision-making abilities.</li>
<li>Strong leadership and project coordination.</li>
<li>Effective communication skills to convey regulatory and CS requirements to stakeholders</li>
</ul>
What We Offer You&#10071;
We believe you will love working at Foodics!<ul><li><ul>
<li>
We offer highly competitive compensation packages, including bonuses and the potential for shares.</li>
<li>We prioritize personal development and offer regular training and an annual learning stipend to tackle new challenges and grow your career in a hyper-growth environment.</li>
<li>Join a talented team of over 30 nationalities working in 14 countries, and gain valuable experience in an exciting industry.</li>
<li>We offer autonomy, mentoring, and challenging goals that create incredible opportunities for both you and the company.</li></ul></li></ul></div>

Cyber Security GRC Lead

<div>Line of Service
Advisory
Industry/Sector
Technology
Specialism
Advisory - Other
Management Level
Senior Associate
Job Description &amp; Summary
About PwC ETIC - Egypt Technology and Innovation Centre
 
PwC is opening a new Technology &amp;amp; Innovation Center in Cairo that will
 
deliver high quality technology solutions to consulting Clients across the
 
globe. The Centre will provide a broad suite of skills and services to our
 
clients, ranging from Packaged Applications such as SAP &amp;amp; Oracle, to
 
Cybersecurity, Data Analytics, Custom Development and Cloud services
 
utilising AWS, Azure and Google, as well as expanding our existing
 
Managed Services capabilities.
 
The centre is looking to expand rapidly and we are looking for
 
enthusiastic self-starters with a passion for technology and client
 
delivery to help shape and form this new venture.
About our practice
Cyber security is one of the defining topics of our age, and cyber risk represents one of the most significant strategic risks to PwC&rsquo;s clients. In a recent PwC survey, it remains the top risk in the minds of CEO&rsquo;s globally, with 91% of UK CEOs rating it as a significant concern. Businesses are changing rapidly, facing disrupted supply chains, rapidly changing workforces and accelerating digital transformation on an unprecedented scale.
At PwC we help our clients transform, and our cyber security practice enables them to execute that transformation securely and to become more resilient to cyber security threats. Our cyber security practice operates nationally, and serves clients holistically with strategy, risk and governance advice, and with deep technical implementation and assurance expertise.
Cloud Security - Configuration Review, core responsibility
 
overview:
<ul><li>It involves examining the settings, configurations, and policies used in the IT environment, identifying potential security gaps and vulnerabilities, and recommending best practices to improve the security posture of the organization. The assets in scope can be (Network appliances, security appliances and popular operating systems such as Microsoft windows, Unix, and Linux), the reviewer is expected to look into configurations, setting as well as the man made rules such as firewall rules or access lists to check for any deviations.
Configuration review process:
</li><li>Validate the Scope: Confirm and validate the scope of the assessment, including the systems and devices to be reviewed, the types of configuration settings to be assessed, and any specific security policies and standards that apply.
</li><li>Prepare the Assessment Criteria or checklist: Develop assessment criteria and checklist based on vendor best practices, industry standards and applicable client policies and procedures. The standards can include frameworks such as CIS Controls or NIST Cybersecurity Framework.
</li><li>Conduct the Assessment: Conduct the assessment, reviewing the configurations of systems and devices against the assessment criteria. This can be done using automated tools, manual review, or a combination of both.
</li><li>Identify Findings: Identify any findings or deviations from the assessment criteria. This can include misconfigurations, missing patches, or insecure settings.
</li><li>Analyze Findings: Analyze the findings to determine their impact on the security posture of the organization. Prioritize the findings based on the risk they pose to the organization.
</li><li>Develop Recommendations: Develop recommendations for remediation of the findings, including specific actions to be taken and timelines for completion.
</li><li>Present Findings and Recommendations: Present the findings and recommendations to key stakeholders in the organization.
</li></ul>Overall, a configuration review assessment involves a thorough review of configurations against established criteria and checklist to identify potential security risks and develop recommendations for remediation.
E xperience in the those or similar tools is preferred: Nipper, Tripwire, Qualys, Nessus, Algosec...etc
<div>Role requirements:
<ul><li>Good understanding and practical experience in infrastructure and Cloud
</li></ul>platform security
<ul><li>Good understanding of Microsoft Sentinel and KQL
</li><li>Experience and proven record of success in integrating custom connectors
</li></ul>with Sentinel using APIs. If you have no direct experience with Sentinel,
 
individuals with good developer skills will be considered
<ul><li>Experience with M365 Threat Protection technologies including Microsoft
</li></ul>Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for
 
Office 365, and Microsoft Defender for Cloud Apps
<ul><li>Experience with Azure Security technologies including Microsoft Defender for
</li></ul>Cloud, Key Vault, Azure DDoS Protection, and other
<ul><li>Experience with Information Protection technologies such as Azure
</li></ul>Information Protection, Windows Information Protection, and Data Loss
 
Prevention
<ul><li>Hands-on experience establishing and configuring security controls for
</li></ul>Microsoft Azure components (i.e. Defender for Cloud, Azure Firewall, Azure
 
DDOS Protection, Azure Bastion and Sentinel)
<ul><li>Hands-on experience establishing and configuring security controls for
</li></ul>Microsoft 365 components (i.e. Microsoft Purview, Defender for Cloud App,
 
Endpoint, Identity and Vulnerability Management)
<ul><li>Hands-on experience establishing and configuring security controls for general
</li></ul>security solution (i.e. Azure Active Directory, Azure Identity Protection and
 
Azure RBAC)
<ul><li>Experience with compliance technologies including Advanced eDiscovery, Data
</li></ul>Retention, and Insider Risk Management
<ul><li>Experience with Identity technologies including Azure Active Directory P1 &amp;amp; P2
</li><li>Familiarity with a programming or scripting languages (esp. in KQL and
</li></ul>PowerShell) is a plus
<ul><li>Familiarity with Power BI, Power Apps, or Power Automate is a plus
</li></ul></div><ul><li>Knowledge of well-known SaaS technologies (i.e. SAP, Oracle) is a plus
</li><li>At least 1 year of relevant work experience for Associate grade
</li><li>At least 3 years of relevant work experience for Senior Associate grade
</li><li>Open minded seeking innovative solutions
</li><li>Ability to work within a fast-paced &amp;amp; unstructured environment
</li><li>Ability to adapt to and communicate with different working styles
</li><li>Ability to interact efficiently with senior members of the firm across
</li></ul>multiple time zones
<div>Essential skills &amp; attributes:
<ul><li>Demonstrates extensive knowledge in infrastructure and cloud security
</li><li>Experience in Consulting or in working within multinational environments
</li><li>Excellent communication and presentation skills
</li><li>High level of customer orientation and a convincing demeanour
</li><li>Ability to work within a fast-paced &amp;amp; unstructured environment. Must be able
</li></ul>to multi-task and effectively and continually prioritise
<ul><li>Excellent oral and written English skills. German language proficiency is a
</li></ul></div><div>plus
 
Education
<ul><li>University degree, ideally in the fields of Computer and Information Science,
</li></ul>Business Informatics, Computer Engineering, Cyber Security, Information
 
Technology, Management Information Systems 
</div><div><ul><li>The following Microsoft certifications are a significant plus:
</li></ul></div><ul><li>Azure Security Engineer Associate (AZ-500)
</li><li>Azure Solutions Architect Expert (AZ-303 or AZ-304 or AZ-405)
</li><li>Cybersecurity Architect Expert (SC-100)
</li><li>Security Operations Analyst Associated (SC-200)
</li><li>Identity and Access Administrator Associate (SC-300)
</li><li>Information Protection Administrator Associate (SC-400)
</li></ul>Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified)
Required Skills
Optional Skills
Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Cloud Administration, Cloud Engineering, Cloud Infrastructure, Cloud Infrastructure Architecture Design, Cloud Resource Management, Cloud Security, Cloud Security Auditing, Cloud Service Delivery, Cloud Service Level Risk Management, Communication, Creativity, Cyber Engineering, Embracing Change, Emotional Regulation, Empathy, Forensic Investigation, Incident Investigation, Inclusion, Information Security, Infrastructure as a Service (IaaS), Intellectual Curiosity {+ 19 more}
Desired Languages (If blank, desired languages not specified)
Travel Requirements
Not Specified
Available for Work Visa Sponsorship?
Yes
Government Clearance Required?
No
Job Posting End Date</div>

ETIC, Cyber Security, Cloud Security Engineer Senior Associate

Search 9354+ Cyber security administrator jobs near you this October. New roles added regularly across leading industries. Apply today.