Senior Security Consultant

As a Senior Security Consultant within the Global Information Security team, the individual will be responsible for providing security guidance to Tax IT Service Delivery teams responsible for delivering on premise and cloud based technology solutions. The consultant will provide security guidance, identify and prioritize security-related requirements, promote secure-by-default designs and facilitate delivery of information security services throughout the system development life cycle (SDLC). The Security consultant will also be expected to perform risk assessments of cloud based information systems and infrastructure, develop appropriate risk treatment and mitigation options based on cloud security controls, and effectively articulate findings and recommendations to IT project teams and management. The successful candidate should have solid background in cloud concepts, Cloud Security Alliance based security controls, broad experience over an array of information security and technical disciplines and be able to provide pragmatic, business-aligned security guidance. The Security consultant will be expected to work on multiple projects and tasks concurrently.

•Degree in computer science or a related discipline
•English language skills - excellent written and verbal communication
•Five or more years of experience in an Information Security or Information Technology discipline with demonstrated experience in one or more the following:
•Experience providing and validating security requirements related to cloud security for private, public and hybrid
•Experience with one or more of the cloud technologies - Microsoft Azure, Rackspace, AWS, or Softlayer
•Experience with providing security controls for global deployments, preferably in cloud environments
•Experience providing and validating security requirements related to information system design and implementation
•Experience providing and validating security requirements related to a broad range of operating systems and databases
•Experience conducting risk assessments, vulnerability assessments, vendor and third party risk assessments and recommending risk remediation strategies
•Experience in the use of tools and methods to identify security exposures and business risks
•Knowledge of common information security standards, such as: ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT
•Knowledge of OWASP top 10 and remediation’s of attacks against web applications. The ability to convey the risks to IT and business stakeholders
•Knowledge of Cloud Security Alliance’ cloud security controls
•Familiarity with information system attack methods and vulnerabilities
•Working experience with the design and engineering of web-based multi-tier information systems and architecture design
•Working experience with web technologies, application firewalls and programming languages
•Working experience with operating systems and database platforms
•Working experience with mobile applications and mobile enterprise application platforms
•Working experience with more than one of these technologies, i.e. Java, .NET, Oracle, SQL, C++, webSphere, Sharepoint, IIS, Apache, etc.
•Working experience of Exchange Server Roles and RBAC model

•Work in prestigious stable company
•Contact of employment
•Fair salary
•Relocation package
•Participating in interesting projects
•Work in a professional, dynamic, truly global team
•Development opportunities in international multilingual environment
•Attractive social package (sport card, medical insurance, life insurance, wellness & spa program, sport events and many others)
•Language courses
•Modern office space near market square
•Home office up to 3 days per week

•Define and provide pragmatic security guidance that balance business benefit and risks in both on premise and cloud based systems (applications and infrastructure)
•Engage IT project teams involved in developing cloud based application, throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls
•Perform risk assessments of information systems and infrastructure
•Maintain and enhance the Information Security risk assessment methodology
•Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
•Translate technical vulnerabilities into business risk terminology for business units and recommend corrective actions to customers and project stake-holders
•Provide knowledge sharing and technical assistance to other team members in the area of cloud security
•Act as Subject Matter Expert (SME) in applying and evaluating loud security capabilities and have deep technical understanding of responsible portfolios