Key Responsibilities:
Security Onboarding & Product Integration:
*Collaborate closely with Product Team to integrate and onboard product to security controls.
*Work with CSO to agree compliance and onboarding requirements to CSO controls. Interpret security policies and standards to define appropriate control compliance for new and existing products.
*Facilitate the implementation of security controls, including but not limited to: certificate management, (automation) access management and Authorisation, data encryption, and secure configuration.
*Work with engineering teams to implement and test security controls.
*Develop and maintain documentation for security onboarding processes and control implementation.
Security Control Evidencing & Audit Readiness:
*Proactively identify and collect evidence demonstrating compliance with security controls and mapping to client Standards and policies
*Prepare and maintain detailed documentation, reports, and artifacts for internal and external audits.
*Act as a primary point of contact during security control reviews, effectively explaining and demonstrating control effectiveness.
*Identify and track any gaps in control implementation or evidence, working with relevant teams to remediate them.
Database Security Engineering (Oracle Focus):
*Possess expertise in Oracle database security principles, best practices, and configurations.
*Design, implement, and review security controls for Oracle platform.
*Perform security assessments and vulnerability reviews specifically for Oracle environments.
*Troubleshoot and resolve security-related issues within Oracle database environments.
*Management & Delivery:
*Manage security control onboarding streams concurrently, from initiation to closure.
*Develop and execute plans for onboarding controls, including scope definition, resource allocation, timelines, and risk management.
*Track progress, identify dependencies, and proactively address impediments.
*Communicate onboarding status, risks, and issues to stakeholders at all levels.
*Ensure timely and high-quality delivery of all security onboarding deliverables.
Required Skills & Experience:
*Education: Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field. Relevant industry certifications (e.g., CISSP, Oracle Certified Professional - Security) are highly desirable.
Security Expertise:
*Proven experience in security engineering, security architecture, or security compliance roles.
*Strong understanding of security principles, frameworks (e.g., NIST, ISO 27001), and compliance requirements (e.g., SOC 2, GDPR, HIPAA).
*Experience with various security controls, including access management (IAM), data encryption, network security, vulnerability management, and SIEM.
Database Engineering (primarily Oracle):
*Experience with Oracle databases, including installation, configuration, administration, and security hardening.
*Understanding of Oracle security features (e.g., TDE, auditing).
*Experience with database patching, upgrades, and performance tuning from a security perspective.
*Familiarity with other database technologies (e.g., PostgreSQL, SQL Server, NoSQL) is a plus.
Delivery Management:
*Demonstrated experience in managing and implementing controls
*Proficiency with project management methodologies (e.g., Agile, Waterfall) and tools (e.g., JIRA, Asana, Microsoft Project).
*Strong organizational skills, ability to prioritize tasks, and manage multiple parallel initiatives.
Compliance:
*Experience in preparing for security control reviews and evidencing.
*Ability to gather, organize, and present evidence of design and control effectiveness.
*Understanding of compliance requirements and expectations.
Communication & Collaboration:
*Excellent written and verbal communication skills, with the ability to articulate complex security concepts to technical and non-technical audiences.
*Proven ability to build strong relationships and collaborate effectively with diverse teams (Product, Engineering, Operations, Audit).
*Strong analytical and problem-solving skills.
*Self-motivated, proactive, and able to work independently and as part of a team.