Group Specialist - Security And Governance

Key Accountabilities

JOB DESCRIPTION

• Candidate is responsible for identifying the misconfigurations in all the security technologies such as next generation firewall (NGFW), web application firewall (WAF), EDR, PAM, NAC, O365 etc.
• Develop the technical assurance program to improve the cyber sanity & improve the security posture.
• Verify compliance against the DP World cyber security standard and baseline.
• Suggest corrective measures for identified issues during the assessment.
• Review the network design for any gaps against secure architecture principles.
• Perform assessment of on-prem, cloud infrastructures and ensure governance across business units as per DP World IT standards.
• Perform assessment of Azure container resource like Kubernetes, Docker images to identify any misconfigurations & weaknesses.
• Perform application, server and database compliance checks against the best practices.
• Automate the security assessments by implementing latest technologies such as AI, ML etc.
• Periodic follow up with regional IT teams to close the identified gaps.
• Understand technology trends and the practical application of existing, new and emerging technologies to enable emerging business and operating models.
• Ensure and monitor effective implementations of the policies and procedures across DP World’s business units.
• Act as an ambassador for DP World at all times when working; promoting and demonstrating positive behaviours in harmony with DP World’s Founder’s Principles, values and culture; ensuring the highest level of safety is applied in all activities; understanding and following DP World’s Code of Conduct and Ethics policies
• Perform other related duties as assigned.
  
  

• Bachelor’s Degree in Computer Science or equivalent
• Should have 8-10 years of experience in IT security and governance
• At least 5 years hands on experience in network design and segmentation.
• At least 5 years hands-on experience in security technologies such as NGFW, WAF/ DDoS, PAM, NAC, EDR, Data Classification & DLP etc.
• At least 5 years of experience in auditing in network, servers, databases hosted on cloud & on-premises
• Hands on experience in auditing Microsoft Azure & AWS cloud architecture, services and solutions.
• Must have strong knowledge on network security and infrastructure security.
• Ability to assist in defining and updating information security policies & standard as per industry best practices and regulatory requirements.
• Prior experience in multinational organization and working with virtual teams spread across different regions is desired.
  
  

• Excellent analytical skills.
• Excellent verbal and written communication.
• Program and Project management skills.
• Time management skills.
• Team player and conflict management skills.
• Ability to adapt in a complex environment, loves challenges, with the will and drive to learn new things on his/her own.
• Cultural awareness.
  
  

• Hands-on experience in technologies O365 Security, NGFW, WAF/DDoS, EDR, NAC, PAM, Active Directory, Network design etc.
• Azure and AWS hosting services including infrastructure & security
• Strong understanding of networking, Linux, distributed systems, cloud design patterns, API's, and security.
• Knowledge of developing policies, procedures related to IT & information security processes
• Expertise in Microsoft Word, Excel, PowerPoint & Power BI