Extelligence is an intelligent partner that goes the extra mile. We provide customized information management solutions for major industries. Our team in Prague and Bucharest is working with international companies, transforming, and adding value to their business on a daily basis. We are growing quickly, and we are interested to bring more talented individuals into our team.
Job Overview:
- Responsible for the Cloud security and access management framework and security/compliance practices across the platforms and solutions, overseeing delivery by technical domains, identifying risks and managing security innovations, acting as the main SPOC for ISRM/SOC and ISRM/IAM
Major Accountabilities
- Accountable for Cloud SecOps processes governance ensuring adherence to Global Security and Compliance policies and procedures including audit readiness
- Collaborate with cross-functional teams to ensure we are aligned with ISRM
- High-level security technical strategy, including technical roadmap, capabilities, and lifecycle
- Define and maintain security processes. governing lifecycle
- Defines security disciplines and security best practices across technical domains
- Define Cloud SecOps framework and activities
- Define the framework for the technical governance for all resources including consistency, with taxonomies, naming conventions, tagging, management groups, accounts, etc
- Steer implementation in close collaboration with other Leads within engineering and operations teams
- Identify areas for optimization, implement strategies to enhance processes and procedures with additional capabilities to improve performance, and solve strategic problems
- Highlight and raise appropriate gaps / exceptions in case of security deviations from IMF Controls
- Performs product / platform delivery oversight on any demand or projects with an impact on Security topic
- Defines reporting and analytics capabilities to be able to manage and monitor security statuses across the technical domains
- Ensures that SOC and other security related provisions are also aligned with our Cloud requirements
- Responsible for onboarding all Cloud Services into ISRM/SOC provisions
- Identify risks and gaps relevant to the Security domain and escalate appropriately
- Define and maintain IAM framework and standards specific to Cloud Services
- Accountable for IAM processes governance ensuring adherence to Security and Compliance policies and procedures including audit readiness
- Collaborate with cross-functional teams to ensure we are aligned with ISRM Governance, Compliance and overarching Global Processes
- Define IAM processes that are adequate for all Cloud Services ensuring that adequate artifacts, procedures and proper documentation is kept up to date
- Responsible for escalating any support issues w.r.t ISRM, IAM or application managers
- Oversee IAM and security related implementations across technical domains and provide necessary support as required
- Ensures Security by design principles are followed during design and implementation of infra / platform solutions pertaining to IAM
- Defines Access Modeling in collaboration with Engineering team for all technical domains, ensuring it is properly maintained during platform lifecycle
- Performs product / platform delivery oversight on any demand or projects with an impact on IAM topic
- Drives and oversee IAM integrations and IAM onboarding jointly with technical domains and ensures that SOC monitoring and other security related provisions are also aligned with our IAM requirements
- Define reports and dashboards to be able to manage and monitor IAM statuses across the technical domains
- Manage accesses and accounts across technical domains with the collaboration of engineering team
- Main approver for all IAM workflows, onboarding, etc
- Identify risks and gaps for the IAM domain and escalate appropriately
Competencies
- Security Management
- Access Management governance and practices
- Compliance, Risk Management (GxP: sound knowledge of validation practices and IT control standards)
- IAM tools / ISEC tools
- Strong understanding of Security best practices and how to apply them in a Multi cloud / Hybrid environment
- Very good knowledge of security regulations and standards as applicable to Pharmaceutical Industry
- Cloud Security certifications i.e. Microsoft Certified Azure Security Engineer Associate, AWS Certified Security, CompTIA Cloud+, Certificate of Cloud Security Knowledge (CCSK), GIAC Cloud Security Automation (GCSA)
Working with Extelligence:
- We take care of the important things that matter to contractors, for example, we guarantee on-time payment for your work. You will never have to chase us for payment.
- We always seek to have long term relationships with our team and we always seek to offer opportunities to extend cooperation beyond the first contract or project.
- Extelligence is a multicultural team, we have more than 15 different nationalities working with us.
- We also organize events to bring our team together including team building activities and social events.