Secure SDLC Program Lead

Client of Ness KDC is a growing and evolving it`s organization, developing and deploying innovative and robust technology solutions for remotely assessing turbomachinery equipment condition. The function is charged with protecting the software products by managing its governance, compliance, risk management, vendor/partner audits and assessments, end user awareness, security monitoring/reporting and incident response.
We are looking for IT Security specialist that will be part of a dispersed team providing advisory services to the rest of the organisation on IT Security at domain level. Place of work - anywhere.

Responsibilities

Act as Program Lead regarding the end-to-end secure SDLC and focus on information security related projects in collaboration with business partners within the organisation in the following information security domains, including:

Information security management
Risk management
Secure application development
Secure testing
Vulnerability management
IT assurance
Incident response
Network security
Security architectures
Identity management and access control
Disaster Recovery & Business Continuity
Cyber Security


Tasks

Support development and maintenance of security requirements
Support the organisation’s risk culture
Support secure design architecture by development and integration of a risk management program in existing process flow (e.g. risk register, gate reviews, security testing), using Rally software product
Support the set up and maintenance of a security, training, awareness and communications program
Support the governance and operating model
Maintain policies and standards for Secure SDLC process
Support development of management reporting and compliance program (including setting up of Key Performance Indicators)
Support secure coding and testing practices
Development of security testing protocols in collaboration with application development and network operations teams
Support secure deployment and hypercare of the team’s software
Support application security administration
Support secure configuration and change management process
Work with security industry standards (ISO 270xx, COBIT, OWASP, NIST, etc.).
Work with application development teams, network operations team and other stakeholders to implement controls to mitigate current security threats that are proportionate to the risk, feasible to implement, possible to measure, mapped to external requirements (e.g., laws/regulations), and of general applicability.
Keep up to date with information security technologies, trends, standards and best practices.
Write business and technical reports and develop presentations.
Support IT assurance activities (e.g. penetration testing)
Demonstrate knowledge in some areas of industry or functional specialty (i.e. SCADA, Critical Infrastructure).
Able to work flexible hours to enable contact with U.S.

Language courses
Technical courses, Certifications
Soft skills training
Purchasing of professional literature
Commercial partners discounts
Favourable terms for bank products
Home Office
Extra Vacation days
Sickness days
Ness Summer club – full-day summer program for children of our employees
Referral Fee - employee referral for onboarding a new employee
Diners club credit card
High-standard working conditions