Job Summary
Design and enhance enterprise governance risk and compliance frameworks for a multinational organization by creating robust security policies and standards aligning them with regulatory expectations and business objectives and ensuring practical implementation across hybrid work environments to protect data systems and card and payment processes while enabling secure innovation and sustainable growth for society through trusted digital services.
Responsibilities
Design and implement network segmentation DMZ
Microsegmentation removal of crossaccess
Traffic Network control DDOS Protection FWIPSWAF DNSWebFiltering DNS
Manage AWS network security
Design and implement network segmentation DMZ
Microsegmentation removal of crossaccess
Traffic Network control DDOS Protection FWIPSWAF DNSWebFiltering DNS
Manage AWS network security
Must have qualifications
Advanced or completed studies related to Technology andor Information Security
Knowledge and experience in
General Network Management and Security
Network Protocols TCPUDPIPTLSDHCP
Network Security Solutions IDSIPSWAFFW
PKI Digital Certificates
Security Controls and Auditing
Security Policies and Best Practices
IntermediateAdvanced English
- Develop and maintain comprehensive security governance frameworks that translate regulatory requirements and industry guidelines into actionable policies and standards adopted across the organization to strengthen overall resilience and trust in digital services.
- Design and refine security policies for data protection access control incident response and technology usage that support day to day operations while minimizing risk exposure and enabling business teams to deliver secure products and services.
- Oversee an enterprise wide process for security standards management that ensures technical baselines and control requirements are consistently defined periodically reviewed and effectively communicated to engineering and operations teams.
- Provide expert guidance to project and product teams on interpreting security policies and standards and on integrating appropriate security controls into solution designs across hybrid work models and modern technology platforms.
- Lead formal security risk assessments and control evaluations for critical business processes including card and payment services to identify control gaps prioritize remediation and support informed risk based decision making.
- Coordinate with internal audit and compliance stakeholders to align governance risk and compliance activities with audit findings and regulatory expectations ensuring timely closure of issues and clear accountability across functions.
- Drive implementation of security management processes such as exceptions handling risk acceptance and policy waivers that use consistent criteria and transparent documentation to balance innovation needs with risk appetite.
- Collaborate with information technology and business operations teams to embed security by design practices in solution development and change management so that security requirements are considered early and tracked through implementation.
- Monitor effectiveness of security policies and standards using metrics and key risk indicators and prepare clear reports and dashboards that help senior stakeholders understand security posture and areas requiring improvement.
- Guide integration of security governance requirements into vendor and third party management activities by defining minimum control expectations and reviewing assessments to safeguard shared data and outsourced services.
- Support security awareness and targeted training initiatives by translating policy and standard requirements into practical scenarios that help employees understand how their daily actions protect company assets and customer information.
- Evaluate emerging regulations industry frameworks and security trends and recommend updates to governance risk and compliance approaches to keep the organization aligned with best practices and competitive expectations.
- Contribute to incident preparedness by ensuring that response plans roles and decision processes are clearly documented in security management standards enabling coordinated action when events occur.
Qualifications
- Demonstrate extensive experience in security policy and standards management with a proven track record of drafting reviewing and implementing enterprise security policies that are pragmatic and aligned to international frameworks.
- Bring strong hands on expertise in security management including risk assessments control design and governance processes that support sustainable operations in complex multinational environments.
- Apply deep knowledge of security policies to guide technology and business stakeholders on how to operationalize requirements within infrastructure applications cloud services and user workflows.
- Utilize familiarity with card and payment domains to interpret specialized regulatory expectations and scheme rules and to shape governance and compliance practices that safeguard transaction data and payment operations.
- Employ advanced analytical and communication skills to produce clear documentation risk reports and executive summaries that make technical security topics understandable and actionable for non technical audiences.
- Use solid experience in hybrid working models and day shift operations to coordinate effectively with distributed teams ensuring policy adherence and consistent security practices across locations and functions.
About Cognizant:
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant.
Additional employment information
Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.
Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.
