Job Summary
Design and enhance enterprise governance risk and compliance frameworks for a multinational organization by creating robust security policies and standards aligning them with regulatory expectations and business objectives and ensuring practical implementation across hybrid work environments to protect data systems and card and payment processes while enabling secure innovation and sustainable growth for society through trusted digital services.
Responsibilities
Design and implement network segmentation DMZ
Microsegmentation removal of crossaccess
Traffic Network control DDOS Protection FWIPSWAF DNSWebFiltering DNS
Manage AWS network security
Design and implement network segmentation DMZ
Microsegmentation removal of crossaccess
Traffic Network control DDOS Protection FWIPSWAF DNSWebFiltering DNS
Manage AWS network security
Must have qualifications
Advanced or completed studies related to Technology andor Information Security
Knowledge and experience in
General Network Management and Security
Network Protocols TCPUDPIPTLSDHCP
Network Security Solutions IDSIPSWAFFW
PKI Digital Certificates
Security Controls and Auditing
Security Policies and Best Practices
IntermediateAdvanced English
- Develop and maintain comprehensive security governance frameworks that translate regulatory requirements and industry guidelines into actionable policies and standards adopted across the organization to strengthen overall resilience and trust in digital services.
- Design and refine security policies for data protection access control incident response and technology usage that support day to day operations while minimizing risk exposure and enabling business teams to deliver secure products and services.
- Oversee an enterprise wide process for security standards management that ensures technical baselines and control requirements are consistently defined periodically reviewed and effectively communicated to engineering and operations teams.
- Provide expert guidance to project and product teams on interpreting security policies and standards and on integrating appropriate security controls into solution designs across hybrid work models and modern technology platforms.
- Lead formal security risk assessments and control evaluations for critical business processes including card and payment services to identify control gaps prioritize remediation and support informed risk based decision making.
- Coordinate with internal audit and compliance stakeholders to align governance risk and compliance activities with audit findings and regulatory expectations ensuring timely closure of issues and clear accountability across functions.
- Drive implementation of security management processes such as exceptions handling risk acceptance and policy waivers that use consistent criteria and transparent documentation to balance innovation needs with risk appetite.
- Collaborate with information technology and business operations teams to embed security by design practices in solution development and change management so that security requirements are considered early and tracked through implementation.
- Monitor effectiveness of security policies and standards using metrics and key risk indicators and prepare clear reports and dashboards that help senior stakeholders understand security posture and areas requiring improvement.
- Guide integration of security governance requirements into vendor and third party management activities by defining minimum control expectations and reviewing assessments to safeguard shared data and outsourced services.
- Support security awareness and targeted training initiatives by translating policy and standard requirements into practical scenarios that help employees understand how their daily actions protect company assets and customer information.
- Evaluate emerging regulations industry frameworks and security trends and recommend updates to governance risk and compliance approaches to keep the organization aligned with best practices and competitive expectations.
- Contribute to incident preparedness by ensuring that response plans roles and decision processes are clearly documented in security management standards enabling coordinated action when events occur.
Qualifications
- Demonstrate extensive experience in security policy and standards management with a proven track record of drafting reviewing and implementing enterprise security policies that are pragmatic and aligned to international frameworks.
- Bring strong hands on expertise in security management including risk assessments control design and governance processes that support sustainable operations in complex multinational environments.
- Apply deep knowledge of security policies to guide technology and business stakeholders on how to operationalize requirements within infrastructure applications cloud services and user workflows.
- Utilize familiarity with card and payment domains to interpret specialized regulatory expectations and scheme rules and to shape governance and compliance practices that safeguard transaction data and payment operations.
- Employ advanced analytical and communication skills to produce clear documentation risk reports and executive summaries that make technical security topics understandable and actionable for non technical audiences.
- Use solid experience in hybrid working models and day shift operations to coordinate effectively with distributed teams ensuring policy adherence and consistent security practices across locations and functions.
Sobre a Cognizant
Cognizant (NASDAQ: CTSH) é uma construtora de IA e fornecedora de serviços de tecnologia, criando a ponte entre o investimento em IA e o valor para as empresas por meio do desenvolvimento de soluções de IA completas para nossos clientes. Nossa profunda experiência em setores, processos e engenharia nos permite incorporar o contexto único de cada organização em sistemas tecnológicos que potencializam a capacidade humana, geram resultados tangíveis e mantêm empresas globais à frente em um mundo em rápida transformação. Saiba mais em cognizant.ai ou @cognizant.
A Cognizant é uma empregadora que investe em equidade. Sua candidatura não será pautada em raça, cor, gênero, sexualidade, credo, origem, deficiência, gravidez ou qualquer outra característica protegida pelas leis brasileiras.
Informações adicionais de emprego
Os candidatos podem ser obrigados a comparecer a entrevistas presenciais ou por videoconferência. Além disso, os candidatos podem ser obrigados a apresentar seu documento de identificação emitido pelo estado ou governo atual durante cada entrevista.
Embora nosso sistema permita a candidatura em todos os idiomas, o(s) idioma(s) e o(s) nível(is) de proficiência exigidos para o trabalho variam. No entanto, é necessário um nível básico de inglês para fins de comunicação em toda a empresa.
A Cognizant é uma empregadora que investe em equidade. Sua candidatura não será pautada em raça, cor, gênero, sexualidade, credo, origem, deficiência, gravidez ou qualquer outra característica protegida pelas leis brasileiras.
Se você tem uma deficiência que requer adaptações razoáveis para procurar uma vaga de emprego ou enviar uma candidatura, envie um e-mail para [email protected] com sua solicitação e informações de contato.
