Job Description

Job Description

Job Description

Key Job Responsibilities:

• Capture observations and findings identified via audits, assessments, scans, etc. in a centralized repository.
• Validate appropriateness of findings to Marvell, and perform risk analysis aligned with Marvell risk management standards.
• Leveraging the risk analysis and any recommendations from assessors, develop a remediation plan aligning with relevant stakeholders.
• Per Marvel risk management procedures, track remediation progress and develop management reporting / metrics.
• Support the exceptions governance process (i.e. reviewing and updating remediation and mitigation plans with relevant stakeholders for adequacy, performing follow-ups to verify compliance upon exception expiration, reporting).
• Conduct periodic comprehensive cyber security risk assessments.
• Support audits and assessments of GRC processes.

Qualification:

• Bachelor's degree in Information Technology or related field
• Minimum 10 years of progressive experience in Cyber Security plus managerial related role
• Minimum 5-8 years' experience in Vulnerability assessment, Configuration Audit, Web and Mobile application security in an enterprise environment
• Have a working knowledge of the NIST CSF and RMF frameworks
• Knowledge of ISO 27001, NIST 800-53 Rev 5 and CIS Top 18 controls
• Experience with Commercial and open-source IT Security tools like Tenable, Qualys, NMAP, Nessus, Acunetix, BurpSuite, Kali Distro, etc.
• Experience in VAPT, Secure configuration, and hardening based on CIS, OWASP, SANS, CVE guidelines.
• Experience in working with global teams and time zones, tool vendors, and strong analytical and communication skills.
• Knowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption)
• Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML)
• Skill in recognizing vulnerabilities in security systems. (e.g., vulnerability and compliance scanning)
• CISSP, CRISC, CISA, CEH/ OSCP/ SANS GIAC GPEN, certification preferred

Job Tags

Similar Jobs