background

Niestety, nie wspieramy Twojej przeglądarki

Niestety nie wpieramy Twojej przeglądarki co może znacznie wpłynąć na poprawne ładowanie skryptów strony.

Logo Pracuj.pl

IT Security Analyst

Acxiom Global Service Center Polska sp. z o. oAbout the company

  • Lubusz
    Lubusz
  • offer expired 2 years ago
  • contract of employment
  • full-time
  • specialist (Mid / Regular)
  • home office work
  • remote recruitment

Technologies we use

Expected

  • GDPR

  • ISO 27001/2

  • PCI-DSS

  • Nexpose

  • QRadar

  • Web Application Firewalls (WAF)

  • DLP

  • AV solutions

  • AWS

  • GCP

  • CISSP

  • CCNA

  • GSEC

  • CEH

Optional

  • Secure SDLC

  • SAST/DAST

  • Checkmarx

  • Veracode

  • Burp Suite

  • SCA

Operating system

About the project

In this position you will be reporting to the Business Information Security Officer for EMEA and APAC regions, providing advice and security consultancy to all areas of Acxiom and its customers. Partnering with the Regional Privacy Officer and Chief Security & Compliance Officer, you will ensure technical guidance for new and existing solutions, annual audits (both internal and external) and compliance (i.e., ISO, TISAX, HITRUST) assessments, as well as maintain annual policies, standards and training programs.

If you’re a business-minded technical and assurance analyst who cares about Information Security principles of availability, integrity and confidentiality, then this job is for you!

Your responsibilities

  • Accountable for conducting and providing engineering and configuration requirements to ensure the code and practices ensures the protection of Acxiom’s information and client data
  • Maintain high standards and reflect this through Information Security output
  • Act as an authoritative subject-matter expert: making recommendations to business areas, project teams, pre-sales, customers and individuals on good practice and requirements, to ensure Acxiom and customer data is appropriately protected, providing constructive challenge and using persuasion and negotiation to drive policy compliance
  • Facilitate the ongoing development of data security processes
  • Determine risks, non-compliance issues and opportunities for improvement by conducting periodic security assessments of Acxiom solutions, SaaS Services and vendors
  • Report and escalate appropriately any identified risks or threats to Acxiom systems and data
  • Produce regular management reports on the status of Information Security Projects, metrics and risks

Our requirements

  • Highly IT literate, able to work quickly and precisely on a variety of systems, often under pressure and to important deadlines
  • In-depth knowledge of relevant legislation, codes of practice, guidance and operating procedures such as GDPR, ISO 27001/2 and PCI-DSS
  • Understanding of Nexpose, QRadar, Web Application Firewalls (WAF), DLP and AV solutions, AWS and/or GCP security concepts and standard interpretation of security threats
  • Solid working experience in Information Security and good understanding of the Defense in Depth concept
  • Ability to understand infrastructure and application designs and identify security challenges, threats and risks in new project proposals
  • Experience of balancing security and business needs to find sensible and pragmatic solutions to security challenges
  • Proven ability to manages large scale security program and project implementations
  • Industry recognised certification such as CISSP, CCNA, GSEC, CEH
  • Very good English language skills, written and spoken

Optional

  • Understanding of Secure SDLC practices including security by design concept
  • Understanding of automated security testing methodologies to verify that secure coding best practices were used
  • Hands-on experience with static and dynamic security analysis tools (SAST/DAST) including Checkmarx, Veracode, Burp Suite etc.
  • Understanding of Software Composition Analysis (SCA) methodology for managing open-source application components
  • Knowledge of OWASP Top 10 Security Risks and how to remediate them
  • Knowledge of how to secure cloud computing infrastructure, configure secure cloud storage and APIs
  • Understanding of authentication and authorization infrastructure (SSO, MFA, SAML, OpenID, OAuth)
  • AWS or GCP professional certifications
  • German language skills will be a bonus

What we offer

  • Permanent contract from the very beginning (umowa o pracę)
  • Multisport/participation in cultural events
  • Lunch+ card which can be used in cafes and restaurants
  • Private health care
  • Life insurance
  • On-site English and/or German classes
  • Training - professional certificates, webinars, classroom trainings
  • Online access to thousands of technical ebooks (Books 24x7, Safari Books Online) and trainings (SkillsSoft)
  • Fun rooms with a pool table, darts, football table, playstation and board games

Benefits

  • sharing the costs of sports activities
  • private medical care
  • sharing the costs of professional training & courses
  • life insurance
  • remote work opportunities
  • flexible working time
  • dental care
  • corporate library
  • no dress code
  • video games at work
  • coffee / tea
  • leisure zone
  • pre-paid cards
  • sharing the costs of private schools for kids
  • christmas gifts
  • employee referral program

Recruitment stages

1

HR phone screen

2

Technical Interview with TL and the team (Zoom)

3

Decision

Acxiom Global Service Center Polska sp. z o. o

Acxiom is a recognized global leader in marketing services and technology. Company was founded in 1969, headquartered in the United States with offices in Europe, Australia, New Zealand and China. Our data and technology have transformed marketing – giving our clients the power to successfully manage audiences, personalize customer experiences and create profitable customer relationships. We deliver campaigns to 127 countries in more than two dozen different languages.

Pracodawca zakończył zbieranie zgłoszeń na tę ofertę

Aktualne oferty pracodawcy

Pracodawca zakończył zbieranie zgłoszeń na tę ofertę

Aktualne oferty pracodawcy

Pracodawca zakończył zbieranie zgłoszeń na tę ofertę

Aktualne oferty pracodawcy
Powiadamiaj mnie o podobnych ofertach

IT Security Analyst, Lubusz