Total 18 Others level Legal / Public / Security job vacancies in US - Huntsville, AL

• Serve as a senior technical consultant to OCIO management on the FBI's technical cybersecurity preparedness and as the primary liaison to internal and external stakeholders on the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) implementation; guiding system owners and IT project teams with integrating the RMF implementation into system development life cycle activities, and support project teams with designing and implementing security controls.
• Build and maintain relationships as the primary OCIO point of contact for the system owner (SO), program manager (PM), and Information System Security Officer (ISSO) of each assigned FBI IT system; ensuring the SO, PM and ISSO adhere to the FBI's cybersecurity program and policies, that security best practices are followed, and that baseline configurations are established for each system.
• Conduct cybersecurity assessment and authorization processing, compliance monitoring, and guide system owners and ISSOs through the security assessment and authorization process of RMF.
• Ensure appropriate levels of confidentiality, integrity, authentication, non-repudiation, and availability are in place to protect IT systems from natural and man-made threats.
• Partner with Subject Matter Experts and Senior Leaders to provide recommendations to OCIO leadership and the FBI's authorizing official (AO) regarding system authorization (ATO), appropriate security controls, and the overall security risk posture of each system.
• Work with ISSOs to conduct risk remediation actions based on the results of ongoing monitoring activities and outstanding items in the system Plan of Actions and Milestones (POA&M).
• Collaborate with the SO and ISSO on change and configuration management, including participation in Configuration Control Board (CCB) meetings, as required.

Title:

Job Title: Public Assist Public Relations Officer

Responsibilities:

1. Serve as the primary liaison between the company and government entities in Basra, Iraq.

2-follow up on the process for obtaining visas, security passes, and other assigned duties

3. Coordinate all public relations activities within the company's government-related department, ensuring alignment with organizational objectives.

4. Facilitate communication and collaboration between the company and government departments on matters such as project-related documents approvals.

Qualifications:

1. Bachelor's degree , business administration, or a related field;

2. Previous experience in public relations or government relations roles, preferably within the oil and gas industry or a related sector.

3. Excellent interpersonal and communication skills, with the ability to effectively engage with government officials and employees at all levels.

4. Strong organizational skills and the ability to manage multiple tasks simultaneously in a dynamic environment.

5. Understanding cultural sensitivities and protocols when working with government entities

Note: This job description outlines the responsibilities and qualifications for this position. It is subject to modification based on the specific needs and requirements of the hiring organization.

<br>

Job Description

<br>

Overview

CoStar Group (NASDAQ: CSGP) is a leading global provider of commercial and residential real estate information, analytics, and online marketplaces.  Included in the S&P 500 Index and the NASDAQ 100, CoStar Group is on a mission to digitize the world’s real estate, empowering all people to discover properties, insights and connections that improve their businesses and lives. 

We have been living and breathing the world of real estate information and online marketplaces for over 35 years, giving us the perspective to create truly unique and valuable offerings to our customers.  We’ve continually refined, transformed and perfected our approach to our business, creating a language that has become standard in our industry, for our customers, and even our competitors.  We continue that effort today and are always working to improve and drive innovation.  This is how we deliver for our customers, our employees, and investors.  By equipping the brightest minds with the best resources available, we provide an invaluable edge in real estate.   

CoStar builds and operates web applications related to real estate.  Web applications include Apartments.com, Homes.com, Lands.com CoStar.com, and 75 other web applications.  The backbone of our product security is our product platform security environment, which consists of commercial and custom developed security controls that run within the IDE, the CI/CD system, across cloud and Kubernetes platforms, and our product edge.  Our product platform security engineering group builds and operates centralized controls using infrastructure as code, scripting, and API integrations to scale security across all web applications in a consistent manner.

We're looking for a few more innovative, code driven security engineers to join our team and expand the features, functions, and flow of our product platform security suite.  Any level is an option - from associate to lead architect. 

This position is located in Washington, DC or Richmond, VA and offers a hybrid schedule of 3 days onsite, 2 days remote.

Responsibilities

Features (responsibilities and goals) of our product platform security suite: (AKA - what you will be building and evolving along a rockstar team that learns from and pushes each other to do great things!)

• Real-time vulnerability feedback in the IDE for insecure build patterns and artifacts (1P code, 3P code, containers, IAC, secrets)
• Gate environment builds to enforce vulnerability remediation SLAs
• Dynamic run-time scans of pre-prod to gate vulnerabilities from escaping into production
• Continual attack surface management pen testing and exploit validation
• Cloud security posture management and workload protection
• Cloud IAM security
• Kubernetes run-time security controls
• Cloud platform threat hunting
• API Security management
• WAF and Bot controls
• Integrated runtime/drift vulnerability feedback into respective product dev team's bug tracking system
• Federated cloud security hardening, detection and enforcement
• Data security posture management
• Hunting for secrets and sensitive data leakage in logs, code, and documentation

Basic Qualifications

• Bachelor’s Degree required from an accredited, not for profit university or college (preferably in Computer Science, Cybersecurity or a related field)
• A track record of commitment to prior employers 
• 2+ years solid experience and understanding of how to apply security at scale in one or more of: CI/CD system, Kubernetes platform, cloud environment, or CDN
• Demonstrated ability to author scripts or IAC from scratch in either Python, PowerShell, Ansible, CloudFormation, Terraform, or similar language
• Experience working in a software development environment with a mature CI/CD
• Passion for solving complex challenges, innovating, and engaging in your work

Preferred Qualifications and Skills

• Strong communication skills with both software development and software leadership audiences
• In-depth understanding of various assessment tools
• Knowledge of infrastructure operations across databases, network, and system administration
• Ability to communicate with different levels of leadership conveying risk and driving urgency for risk remediation.
• Ability to mentor and train team members to prioritize security efforts effectively.
• A self-starter who can advance the application security program and follow-through ideas to completion.
• Hands-on experience implementing security tools into CI/CD pipelines.
• Experience testing serverless cloud deployments

What’s in it for You

When you join CoStar Group, you’ll experience a collaborative and innovative culture working alongside the best and brightest to empower our people and customers to succeed.

We offer you generous compensation and performance-based incentives. CoStar Group also invests in your professional and academic growth with internal training, tuition reimbursement, and an inter-office exchange program.

Our benefits package includes (but is not limited to):

• Comprehensive healthcare coverage: Medical / Vision / Dental / Prescription Drug
• Life, legal, and supplementary insurance
• Virtual and in person mental health counseling services for individuals and family
• Commuter and parking benefits
• 401(K) retirement plan with matching contributions
• Employee stock purchase plan
• Paid time off
• Tuition reimbursement
• On-site fitness center and/or reimbursed fitness center membership costs (location dependent), with yoga studio, Pelotons, personal training, group exercise classes
• Access to CoStar Group’s Diversity, Equity, & Inclusion Employee Resource Groups
• Complimentary gourmet coffee, tea, hot chocolate, fresh fruit, and other healthy snacks

We welcome all qualified candidates who are currently eligible to work full-time in the United States to apply.  However, please note that CoStar Group is not able to provide visa sponsorship for this position.

#LI-Hybrid

#LI-CT5

<br>

CoStar Group is an Equal Employment Opportunity Employer; we maintain a drug-free workplace and perform pre-employment substance abuse testing

<br>

Job Description

<br>

Overview

CoStar Group (NASDAQ: CSGP) is a leading global provider of commercial and residential real estate information, analytics, and online marketplaces.  Included in the S&P 500 Index and the NASDAQ 100, CoStar Group is on a mission to digitize the world’s real estate, empowering all people to discover properties, insights and connections that improve their businesses and lives. 

We have been living and breathing the world of real estate information and online marketplaces for over 35 years, giving us the perspective to create truly unique and valuable offerings to our customers.  We’ve continually refined, transformed and perfected our approach to our business, creating a language that has become standard in our industry, for our customers, and even our competitors.  We continue that effort today and are always working to improve and drive innovation.  This is how we deliver for our customers, our employees, and investors.  By equipping the brightest minds with the best resources available, we provide an invaluable edge in real estate.   

CoStar builds and operates web applications related to real estate.  Web applications include Apartments.com, Homes.com, Lands.com, CoStar.com, and 75 other web applications.  CoStar has solid security tooling integrated into our hosting platform and CI/CD environments as a result of strong DevSecOps engineering.  We're looking to build out new product security roles and teams to drive greater security within our products - all by design. 

This position is located in Washington, DC or Richmond, VA and offers a hybrid schedule of 3 days onsite, 2 days remote.

Responsibilities

• Security minded experienced developer to author secure code guidelines, develop reusable secure code modules and templates, review sensitive code modules, and serve as a security SME consultant during product design and development. 

• Embedded security minded developer(s) to become an expert on how to consume all of our centralized security controls and apply them within a focused set of related web applications built by a common software development team.  These positions are matrixed between product security and product development.

• Threat modeling evangelist to refine our threat modeling process and tooling, train our engineering group on threat modeling, and lead threat modeling sessions for significant and sensitive headlining development projects

• Web application penetration testers join our in-house web pen testing team and pen test a wide range of web applications and their underlying cloud/web architectures and platforms. Operate and refine our automated, continual application and attack surface management pen testing systems.

Basic Qualifications

• Bachelor’s Degree required from an accredited, not for profit university or college (preferably in Computer Science, Cybersecurity or a related field)

• A track record of commitment to prior employers 

• Minimum 3 years total experience in a technical role such as software engineer or security engineer with at least 2 years as a software developer.

• Design, implementation, and operation of a secure software development lifecycle

• Experience with web application penetration testing and common attack vectors

• Experience with secure application development

• Experience with defense-in-depth strategies to help mitigate existing risk within applications

• Software development experience in a common programming language: C#, .NET Framework, Node, Web API

• Scripting experience - Python, PowerShell, GoLang, JavaScript, Terraform

• Security tooling automation in CI/CD pipelines and IDE interfaces

• Application security testing (DAST) through Metasploit, Burpsuite, OWASP ZAP, Acunetix, etc.

• Secure API development or management

Preferred Qualifications and Skills

• Strong communication skills with both software development and software leadership audiences

• In-depth understanding of various assessment tools

• Knowledge of infrastructure operations across databases, network, and system administration

• Ability to communicate with different levels of leadership conveying risk and driving urgency for risk remediation.

• Experience coordinating with application teams to drive security by design principles

• Ability to mentor and train team members to prioritize security efforts effectively

• A self-starter who can advance the application security program and follow-through ideas to completion.

• Hands-on experience implementing security tools into CI/CD pipelines.

• Experience testing serverless cloud deployments

What’s in it for You

When you join CoStar Group, you’ll experience a collaborative and innovative culture working alongside the best and brightest to empower our people and customers to succeed.

We offer you generous compensation and performance-based incentives. CoStar Group also invests in your professional and academic growth with internal training, tuition reimbursement, and an inter-office exchange program.

Our benefits package includes (but is not limited to):

• Comprehensive healthcare coverage: Medical / Vision / Dental / Prescription Drug

• Life, legal, and supplementary insurance

• Virtual and in person mental health counseling services for individuals and family

• Commuter and parking benefits

• 401(K) retirement plan with matching contributions

• Employee stock purchase plan

• Paid time off

• Tuition reimbursement

• On-site fitness center and/or reimbursed fitness center membership costs (location dependent), with yoga studio, Pelotons, personal training, group exercise classes

• Access to CoStar Group’s Diversity, Equity, & Inclusion Employee Resource Groups

• Complimentary gourmet coffee, tea, hot chocolate, fresh fruit, and other healthy snacks

We welcome all qualified candidates who are currently eligible to work full-time in the United States to apply.  However, please note that CoStar Group is not able to provide visa sponsorship for this position.

#LI-Hybrid

#LI-CT5

<br>

CoStar Group is an Equal Employment Opportunity Employer; we maintain a drug-free workplace and perform pre-employment substance abuse testing

Evotec is a leader in the discovery and development of novel small molecule drugs with operational sites in Europe, Asia and the US. The Company has built substantial drug discovery expertise and an industrialized platform that can drive new innovative small molecule compounds into the clinic. In addition, Evotec has built a deep internal knowledge base in the treatment of diseases related to neuroscience, pain, and inflammation. Leveraging these skills and expertise the Company intends to deliver superior science-driven discovery alliances with pharmaceutical and biotechnology companies.

We are looking for a full-time Senior Network and Security Engineer to join our team.  
 
Key responsibilities:
•    Responsible for the configuration, operation and fault clearance of the corporate WAN and LAN environment.
•    Design and Deployment of new sites and infrastructure.
•    Administration of the infrastructure of the central data centers and the Evotec sites and act as a contact for the network and security services used.
•    Provide 3rd tier support to local administration teams.
•    Plan, control, and implement changes to critical IT security and network infrastructures as part of a managed service.
•    Responsible for the documentation of the changes in the IT security and network environment.
•    Training of other administrators in the day to day functionality of the systems within their remit. 

Qualifications:

•    Completed IT-technical training or university degree.
•    Experience with network and firewall components (e.g. Cisco, Fortinet, Broadcom, F5, HP, Aruba) as well as with Windows networking.
•    Knowledge and experience in operation and troubleshooting in the following areas: Firewalls, VPN, Reverse Proxy, Load Balancers, Cloud Security, Cloud Services.

Evotec (US) Inc. is an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, gender, age, disability, genetic information, gender expression, gender identity, national origin, religion, sexual orientation, or veteran status.

Evotec (US) Inc. is an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, gender, age, disability, genetic information, gender expression, gender identity, national origin, religion, sexual orientation, or veteran status.

The Opportunity:  

Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to government agencies. In all of this “cyber noise,” how can these organizations understand their risks and how to mitigate them? The answer is you—a lead information security risk specialist who can break down complex threats into manageable plans of action.  

As an information security risk specialist on our team, you’ll consult for the client, leading the discovery of their cyber risks, understanding policies, and developing a mitigation plan. You’ll oversee the analysis of technical, environmental, and system details from system owners, engineers, and system administrators as you review the entire threat landscape. Then, you’ll guide your client through a plan of action and milestones. Your client will rely on you to translate security concepts so they can make the best decisions to secure their mission-critical systems. This is your opportunity to take a leadership role in information security while sharing your skills in risk management, vulnerability management, and assessment and authorization with both your clients and your team. Work with us as we protect our client's missions and the Aerospace industry.  

Join us. The world can’t wait. 

You Have: 

• 14+ years of experience as an Information System Security Officer or in Cybersecurity

• Knowledge of Risk Management Framework and NIST 800-53

• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements

• Bachelor's degree

Nice If You Have: 

• Experience using the Risk Information Security Compliance System (RISCS)

• Ability to work as an individual contributor and lead teams of IT professionals

• Ability to monitor and track multiple tasks

• Master's degree

• Certified Information Systems Security Professional (CISSP), CompTIA Advanced Security Practitioner (CASP), or Certified Information Security Manager (CISM) Certification

Vetting:
Applicants selected will be subject to a government investigation and may need to meet eligibility requirements of the U.S. government client.

Create Your Career: 

Grow With Us 

Your growth matters to us—that’s why we offer a variety of ways for you to develop your career. With professional and leadership development opportunities like upskilling programs, tuition reimbursement, mentoring, and firm-sponsored networking, you can chart a unique and fulfilling career path on your own terms.  

A Place Where You Belong 

Diverse perspectives cultivate collective ingenuity. Booz Allen’s culture of respect, equity, and opportunity means that, here, you are free to bring your whole self to work. With an array of business resource groups and other opportunities for connection, you’ll build your community in no time. 

Support Your Well-Being 

Our comprehensive benefits package includes wellness programs with HSA contributions, paid holidays, paid parental leave, a generous 401(k) match, and more. With these benefits, plus the option for flexible schedules and remote and hybrid locations, we’ll support you as you pursue a balanced, fulfilling life—at work and at home.  

Your Candidate Journey 

At Booz Allen, we know our people are what propel us forward, and we value relationships most of all. Here, we’ve compiled a list of resources so you’ll know what to expect as we forge a connection with you during your journey as a candidate with us.  

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you’ll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you’ll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.

Be visionary

Teledyne Technologies Incorporated provides enabling technologies for industrial growth markets that require advanced technology and high reliability. These markets include aerospace and defense, factory automation, air and water quality environmental monitoring, electronics design and development, oceanographic research, deepwater oil and gas exploration and production, medical imaging and pharmaceutical research.​

We are looking for individuals who thrive on making an impact and want the excitement of being on a team that wins.

Job Description

Be Visionary

Teledyne FLIR has a simple but ambitious mission: to develop market-leading thermal and sensing technologies that enhance everyday life. From saving energy to saving lives, FLIR makes a real difference in our world.  Our products are used in many situations to rescue people in danger, detect criminals, conserve energy, navigate safely, provide global security, and protect our environment. 

We are looking to bolster our field sales team.  The Regional Sales Manager – Security position will deal directly with our Security partners, VARs and end users in the Western region of the US. Our Security business consists of hardware and software (i.e. thermal and visible cameras, Video Management Software, radar, etc). This position will report to the North American Director of Sales – Security.

Your contribution

As the Regional Sales Manager – Security you will be a critical part of the success of our business. 

• The RSM builds, expands, and maintains a network of relationships at all levels of each organization and coordinates the involvement of all Teledyne FLIR personnel and partners within the account. 
• Leverages account presence to up-sell / cross-sell, provides market intelligence, and works to educate, collaborate, and persuade customers to engage in deeper, sustainable relationships across multiple business imperatives.
• RSM will also collaborate with internal Teledyne FLIR teams to actively prospect for new opportunities and grow the Security base business in the entire territory.

• Establishes and maintains accurate sales pipeline and forecasts through CRM utilization.

• Develops and maintains a broad understanding of all Teledyne FLIR Security products, services, and solutions including their value proposition, target market applications and pricing structures and discounts.
• Conducts or coordinates product training and demonstrations as needed.

The job in plain text

• You will be responsible for our Security vertical sales for the Western Region of the US.  

To be ready to take on this role, we would love it if you have

• Excellent collaboration and communication skills 
• 5+ years’ experience in Security sales preferred
• Experience selling VMS, visible cameras, thermal cameras, radar preferred.
• Fluent in English, both verbal and written      
• Ability to work independently and highly self-motivated.
• Strong and persuasive communication skills
• Technically adept and able to make complicated presentations and briefings to convey simple messages to win key selling accounts – Computer proficient in Word, Excel, and PowerPoint
• Ability to develop professional briefing material and confidently present to customers and in industry forums.
• Expected travel - 60%

What Teledyne FLIR offers you

• To be a part of a market leader company with a 50-year track record
• Friendly culture with a focus on collaboration, problem-solving, and creativity
• Opportunity to develop your career with the world’s leading company in thermal and sensing technology
• At Teledyne FLIR, you get a unique opportunity to experience all facets of our business.

Interested?

If you liked what you just read and believe you are the person that will make us better, do not hesitate to apply. The selection process is ongoing, so don't wait.  When applying, make it easy for yourself. Add a resume and fill out the required fields, no need to add anything else at this point.

Applicants must be either a U.S. citizen, U.S. national, legal permanent resident, asylee, refugee or must be eligible to apply for and obtain the appropriate export control license from the U.S. Departments of State or Commerce.

Salary Range:

Pay Transparency

The anticipated salary range listed for this role is only an estimate. Actual compensation for successful candidates is carefully determined based on several factors including, but not limited to, location, education/training, work experience, key skills, and type of position.

Teledyne and all of our employees are committed to conducting business with the highest ethical standards. We require all employees to comply with all applicable laws, regulations, rules and regulatory orders. Our reputation for honesty, integrity and high ethics is as important to us as our reputation for making innovative sensing solutions.

Teledyne is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other characteristic or non-merit based factor made unlawful by federal, state, or local laws. ​

Thank you for your interest in a career at Regions. At Regions, we believe associates deserve more than just a job. We believe in offering performance-driven individuals a place where they can build a career --- a place to expect more opportunities. If you are focused on results, dedicated to quality, strength and integrity, and possess the drive to succeed, then we are your employer of choice.

Regions is dedicated to taking appropriate steps to safeguard and protect private and personally identifiable information you submit. The information that you submit will be collected and reviewed by associates, consultants, and vendors of Regions in order to evaluate your qualifications and experience for job opportunities and will not be used for marketing purposes, sold, or shared outside of Regions unless required by law. Such information will be stored in accordance with regulatory requirements and in conjunction with Regions’ Retention Schedule for a minimum of three years. You may review, modify, or update your information by visiting and logging into the careers section of the system.

Job Description:

At Regions, the Cybersecurity Cloud Security Engineer contributes to the advancement of Cybersecurity strategy. The primary focus of this role includes developing, communicating, and implementing robust and secure cloud continuous integration and continuous delivery pipelines. This role works closely with stakeholders to create fully automated pipelines which support current Cloud Security best practices.

Primary Responsibilities

• Partners with other security engineers and other Cybersecurity staff to oversee code releases.
• Automates operational activities and tasks.
• Articulates security needs and translate them into technology solutions.
• Works with Enterprise Architecture, Cloud CoE, Security Engineering to enable the organization to provide a secure and robust hybrid cloud environment.
• Designs and develops fully autonomous pipelines which facilitate Cybersecurity deployments which includes automation of all infrastructure, services and application build and deployment.
• Provides technical administration to include troubleshooting support, break-fix operations, patching, and other day-to-day activities required to maintain the health of servers and cloud application.
• Monitors and anticipates trends and investigates organizational objectives and needs
• Creates and maintains operational documentation and reports to support monthly trend analysis as well as project components.
• Assists in/with leading the research, evaluation, proof-of-concept, selection, and implementation of technology solutions.
• Promotes implementation of new technology, solutions, and methods to improve business processes, efficiency, effectiveness, and value delivered to customers.
• Analyzes quality reviews of current solutions and provides technical guidance to improve overall security.
• Participates in security incident response activities and post-event reviews of security incidents.
• Leads efforts to examine the technology vision, opportunities and challenges regarding security standards and the impact of the technology.
• Coordinates with internal teams to implement data loss prevention and cloud security solutions aligned with corporate business objectives and regulatory requirements.
• Implements Cloud Security initiatives focusing on multiple platforms.
• Produces security requirements and related playbooks.
• May provide advice and guidance to junior engineers.

This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay.

Requirements

• Bachelor's degree in Computer Science or in a related field and eight years (8) years of Information Technology/Cybersecurity experience to include some relevant Cloud Security experience.
• Or High School Diploma or GED and fourteen years (14) years of Information Technology experience to include at least four (4) years of relevant Cloud Security experience.

Preferences

• Bachelor’s degree in Information Security, Information Technology, Information Systems Management, Computer Science, Engineering, or related field with eight years (8) years of Information Technology/Cybersecurity experience and four (4) years of relevant Cloud Security experience.
• Base Technology or Security Certifications (e.g., CISSP, CompTIA Security+, CCENT, CCNA, MCSA, etc.).
• Experience with metadata management and data tagging as well as creating custom data analytics for data security.
• Knowledge of data classification solutions.
• Strong technical knowledge of cloud application and CASB architecture, system policies, and rules.
• Experience with AWS (e.g., KMS, Lambda, CloudTrail, CloudWatch, GuardDuty, EC2, S3, Amazon RDS).

Skills and Competencies

• Excellent knowledge of Hybrid Cloud Infrastructure – Compute – Amazon Elastic Compute Cloud (EC2), Virtual Machines (VM’s), SQL – Amazon Relational Database Service (AWS RDS) or Azure SQL, Security Groups, Subnets, firewalls etc.
• Advanced ability to adapt and apply information to new scenarios and technologies.
• Advanced ability to prioritize conflicting demands.
• Demonstrated leadership capabilities.
• Knowledge of common web technologies, cloud technologies, enterprise, and network architecture.
• Knowledge of data protection controls as well as modern security tools and controls.
• Knowledge of or demonstrated experience with defense in depth, trust levels, privileges, and permissions.
• Knowledge of AWS Identity & Access Management (IAM) capabilities.
• Knowledge of cloud native systems (e.g. Kubernetes, Docker, EKS, ECS).
• Strong verbal, written communication, and organizational skills.
• Understanding of modern, evolving security tools and controls.

This position must be within a reasonable driving distance to a Branch, Consumer Operations, or Professional Office Building with the primary location being for Birmingham, AL, Nashville, TN, Atlanta, GA or Charlotte, NC.  Regions will not provide relocation assistance for this position, and relocation would be at your expense. Exceptions to the geographic location requirement may be made for current Regions associates who work remotely.

Position Type

Compensation Details

Pay ranges are job specific and are provided as a point-of-market reference for compensation decisions. Other factors which directly impact pay for individual associates include: experience, skills, knowledge, contribution, job location and, most importantly, performance in the job role. As these factors vary by individuals, pay will also vary among individual associates within the same job.

The target information listed below is based on the Metropolitan Statistical Area Market Range for where the position is located and level of the position.

Job Range Target:

Minimum:

Median:

Incentive Pay Plans:

Benefits Information

Regions offers a benefits package that is flexible, comprehensive and recognizes that "one size does not fit all" for benefits-eligible associates. Listed below is a synopsis of the benefits offered by Regions for informational purposes, which is not intended to be a complete summary of plan terms and conditions.

• Paid Vacation/Sick Time
• 401K with Company Match
• Medical, Dental and Vision Benefits
• Disability Benefits
• Health Savings Account
• Flexible Spending Account
• Life Insurance
• Parental Leave
• Employee Assistance Program
• Associate Volunteer Program

Please note, benefits and plans may be changed, amended, or terminated with respect to all or any class of associate at any time. To learn more about Regions’ benefits, please click or copy the link below to your browser.

https://www.regions.com/welcometour/benefits.rf

Location Details

Location:

Bring Your Whole Self to Work  

We have a passion for creating an inclusive environment that promotes and values diversity of race, color, national origin, religion, age, sexual orientation, gender identity, disability, veteran status, genetic information, sex, pregnancy, and many other primary and secondary dimensions that make each of us unique as individuals and provide valuable perspective that makes us a better company and employer. More importantly, we recognize that creating a workplace where everyone, regardless of background, can do their best work is the right thing to do.

OFCCP Disclosure: Equal Opportunity Employer/Disabled/Veterans

Job applications at Regions are accepted electronically through our career site for a minimum of five business days from the date of posting. Job postings for higher-volume positions may remain active for longer than the minimum period due to business need and may be closed at any time thereafter at the discretion of the company.

This role is for a Sr. Security Architect in our Information Security group focused on driving security strategy and improving the security posture of the organization.  The ideal candidate will possess a strong information security and project execution background. Accountabilities include:

• Drives development of enterprise security strategy aligned with NIST CSF1.1 with focus on People, Processes, and Technology
• Contributes to the creation of information security technology strategies and roadmaps based on business strategy, cybersecurity assessments, IT trends and the overall threat landscape.
• Contributes to the development of information security architectures that align with assessment remediation requirements, reference architectures, design patterns and technology standards
• Collaborates with Principal Architects to develop and document reference architectures and architectural patterns
• Collaborates with IT and Business partners to deliver security technology roadmaps
• Learns and masters innovative security technologies with focus on 1-3 year transformation of Cardinal Health
• Developes secure architectures that incorporate components from Identity and Access Management, DevSecOps, Networking, and Secrets ManagementProvides security architecture guidance on large-scale, complex projects
• Ensures project adherence to information security remediation efforts during solution build and implementation
• Participates in cybersecurity control assessments providing risk-based gap analysis and prioritized remediation recommendations
• Communicates the impact of cybersecurity gaps to diverse audiences
• Designs secure environments for cloud native services such as: Compute, Kubernetes, Container Registries, Databases, Pub/Sub, Infrastructure as Code, DevSecOps, CI/CD Pipelines, Cloud Consoles, Serverless Computing, APIs, and other applicable applications or services.
• Mentors and educates less experienced employees in the organization
• Designs security controls for emerging technologies (IoT, cloud technologies, automation, AI, etc.)

Qualifications

• Industry-specific certifications preferred, such as Security+, CISSP, AWS certifications, etc.
• Undergraduate degree in a technical field
• 7+ years of experience in Information Technology, with a preferred concentration on Information Security
• Advanced experience with information security principles, practices, technologies, programs and procedures, accompanied by an understanding of risk management methodologies
• Strategic thinker; translates strategy into actionable plan
• Strong technical design skills
• Excellent analytical, problem solving and decision making skills, applied with a solution-focused attitude
• Strong self-directed work habits, exhibiting initiative, drive, creativity, maturity, self-assurance and professionalism
• Team player
• Strong written and verbal communications skills
• Strong cloud technology experience is a plus (AWS, GCP, Azure)
• Strong understanding of IT domains and how solutions/applications are deployed and governed.
• Familiarity with information security standards and frameworks including ISO 27002, NIST, CIS Benchmarks, HIPAA, etc.

Anticipated salary range: $119,800 - $171,100

Bonus eligible: Yes

Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs

Application window anticipated to close: 3/15/2024 *if interested in opportunity, please submit application as soon as possible.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here

Thank you for your interest in a career at Regions. At Regions, we believe associates deserve more than just a job. We believe in offering performance-driven individuals a place where they can build a career --- a place to expect more opportunities. If you are focused on results, dedicated to quality, strength and integrity, and possess the drive to succeed, then we are your employer of choice.

Regions is dedicated to taking appropriate steps to safeguard and protect private and personally identifiable information you submit. The information that you submit will be collected and reviewed by associates, consultants, and vendors of Regions in order to evaluate your qualifications and experience for job opportunities and will not be used for marketing purposes, sold, or shared outside of Regions unless required by law. Such information will be stored in accordance with regulatory requirements and in conjunction with Regions’ Retention Schedule for a minimum of three years. You may review, modify, or update your information by visiting and logging into the careers section of the system.

Job Description:

At Regions, the Network Security Engineer is responsible for the day-to-day maintenance and operation of Information Security systems to ensure controls are adequate and effective. This engineer should be capable of analyzing scenarios, recommending solutions, and implementing controls to protect the environment, customers, and employees.

Primary Responsibilities

• Utilizes Subject Matter Expert knowledge in leading daily management and administration of network security controls such as firewalls, web application firewalls, DNS, routers, switches, VPN appliances, and load balancers
• Utilizes an advanced and broad range of skills to identify and troubleshoot different technical platforms including firewalls, servers, networks, Internet and Cloud
• Creates and maintains knowledge base to aid troubleshooting used by support teams
• Evaluates existing processes and policies and recommends enhancements to protect data and information from unauthorized access
• Investigates intrusion incidents, conducts forensic investigations, and mounts incident responses
• Proactively identifies and evaluates new technologies and processes that enhance security capabilities and makes recommendations to management
• Establishes plans and protocols to protect data and information systems against unauthorized access, modification, and/or destruction
• Delivers technical reports on activities to varying audiences
• Maintains knowledge with current emerging technologies and advancements within Information Security
• Takes initiative and responsibility for achieving desired results and influencing team success
• Participates in on-call rotation
• Works with management to ensure documentation procedures are in place for all changes on all equipment as required by Audit

This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay.

Requirements

• High School Diploma or GED and ten (10) years of related post-secondary education and/or experience in Information Security or Information Technology
• Subject Matter Expert (SME) in one or more security domains

Preferences

• Bachelor’s degree in Computer Science, Management Information Systems or related field
• Applicable industry certifications including those from Cisco, Palo Alto Networks, AWS, GIAC, etc.
• Experience with Cisco CCNP Data Center / Security
• Experience with Palo Alto Networks PCNSA / PCNSE / PCCSE
• Experience designing and administering an enterprise network that supports multiple physical and cloud data centers

Skills and Competencies

• Advanced ability to articulate complex technical concepts or scenarios to both technical and non-technical audiences
• Advanced research, analytical, and/or problem-solving skills for evaluating situations, making recommendations, and taking effective action
• Advanced verbal, written communication, and organizational skills

Below are additional responsibilities and experience needed for this position:

• Utilize subject matter expertise and extensive experience to effectively implement Cloud Security initiatives focusing on Amazon Web Services (AWS) and Microsoft Azure
• Seek opportunities to replace manual processes with automation and integrate into CI/CD pipelines with a mindset of DevSecOps
• Ability to write effective and scalable code using Terraform
• Experience in utilizing Terraform and Github to build, change and version cloud and on-perm resources 

This position must be within a reasonable driving distance to a Branch, Consumer Operations, or Professional Office Building with the primary location being for Birmingham, AL, Nashville, TN, Atlanta, GA or Charlotte, NC.  Regions will not provide relocation assistance for this position, and relocation would be at your expense. Exceptions to the geographic location requirement may be made for current Regions associates who work remotely.

Position Type

Compensation Details

Pay ranges are job specific and are provided as a point-of-market reference for compensation decisions. Other factors which directly impact pay for individual associates include: experience, skills, knowledge, contribution, job location and, most importantly, performance in the job role. As these factors vary by individuals, pay will also vary among individual associates within the same job.

The target information listed below is based on the Metropolitan Statistical Area Market Range for where the position is located and level of the position.

Job Range Target:

Minimum:

Median:

Incentive Pay Plans:

Benefits Information

Regions offers a benefits package that is flexible, comprehensive and recognizes that "one size does not fit all" for benefits-eligible associates. Listed below is a synopsis of the benefits offered by Regions for informational purposes, which is not intended to be a complete summary of plan terms and conditions.

• Paid Vacation/Sick Time
• 401K with Company Match
• Medical, Dental and Vision Benefits
• Disability Benefits
• Health Savings Account
• Flexible Spending Account
• Life Insurance
• Parental Leave
• Employee Assistance Program
• Associate Volunteer Program

Please note, benefits and plans may be changed, amended, or terminated with respect to all or any class of associate at any time. To learn more about Regions’ benefits, please click or copy the link below to your browser.

https://www.regions.com/welcometour/benefits.rf

Location Details

Location:

Bring Your Whole Self to Work  

We have a passion for creating an inclusive environment that promotes and values diversity of race, color, national origin, religion, age, sexual orientation, gender identity, disability, veteran status, genetic information, sex, pregnancy, and many other primary and secondary dimensions that make each of us unique as individuals and provide valuable perspective that makes us a better company and employer. More importantly, we recognize that creating a workplace where everyone, regardless of background, can do their best work is the right thing to do.

OFCCP Disclosure: Equal Opportunity Employer/Disabled/Veterans

Job applications at Regions are accepted electronically through our career site for a minimum of five business days from the date of posting. Job postings for higher-volume positions may remain active for longer than the minimum period due to business need and may be closed at any time thereafter at the discretion of the company.

Cardinal Health Overview:

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a distributor of pharmaceuticals, a global manufacturer and distributor of medical and laboratory products, and a provider of performance and data solutions for health care facilities.

We are a crucial link between the clinical and operational sides of care, working with more than 4,500 sourcing and manufacturing partners to deliver end-to-end solutions and data-driven insights that advance healthcare and improve lives every day. With deep partnerships, diverse perspectives and innovative digital solutions, we build connections across the continuum of care.

With 50 years of experience, approximately 44,000 employees and operations in more than 30 countries, Cardinal Health seizes the opportunity to address healthcare’s most complicated challenges — now, and in the future.

Department Overview:

Information Security and Risk Management (ISRM) at Cardinal Health enables Cardinal Health to securely deliver healthcare products and solutions that improve the lives of people every day by ensuring security and controls is embedded into Cardinal Health’s people, process and technology.

We currently have a career opening for a Sr. Engineer, Information Security and Risk, who will play an IT Privacy Compliance Program Run Lead role focused on driving IT Privacy Controls & Compliance for the organization.

Job Overview:

This role is a leader position within the team and requires having an in-depth understanding of local, national and international privacy and security regulations such as HIPAA (Health Insurance Portability and Accountability Act), GDPR (General Data Protection Regulation) and the CCPA (California Consumer Privacy Act) as well as relevant control frameworks to drive compliance to those regulatory requirements such as NIST, ISO, etc., while working with members of the Information Security and Risk Management team as well as privacy leaders in Legal, Ethics & Compliance and our various businesses throughout the Cardinal Health enterprise.  Senior Engineer will be responsible for managing operational activities (i.e., “Run”) of the IT Privacy Compliance Program, including confirming all assessments are completed, issue management and maintaining operational metrics. 

Daily Responsibilities:

• Leader over the “Run” activities of the IT Privacy Compliance Program as a Second Line of Defense (LOD) function.  Some of the key responsibilities include:
  • Create and manage calendar of IT Privacy Risk Assessments, while collaborating with appropriate risk functions to reduce redundancy of efforts, enhance reliance on Second LOD, and provide coverage across in-scope assets.
  • Lead management of all issues resulting from assessments to confirm appropriate stakeholder visibility and remediation recommendation, appropriate issue lead assignments, appropriate issue validation prior to closure, etc.
• Collaborate with IT Privacy Compliance Program Build Lead on driving overall success of the program.
• Build and implement metrics to report on effectiveness of the IT Privacy Compliance Program
• Partner with Legal counsel and Ethics & Compliance leaders to address regulatory or compliance requirements, issues, concerns or questions.
• Partner with IT and IT Security in the development of policies, procedures and practices in support of privacy and data protection compliance.
• Collaborate with IT and business leaders and team to provide guidance on doing privacy by design and remediating issues identified to enhance compliance to the regulatory requirements.
• Identify opportunities to automate various privacy and data protection compliance activities to reduce the overall cost of compliance.
• Mentor members of the team on how to effectively perform compliance assessments, complying to IT privacy regulation requirements, consultation on issue remediation recommendations and alternative solutions, etc.
• Effectively manage and implement change throughout the organization.

Qualifications:

• Bachelor’s Degree in related field or equivalent work experience
• 10+ years’ experience in related field
• Prior experience with key IT Privacy regulation compliance including HIPAA and GDPR compliance.
• Prior experience with control frameworks (e.g., NIST, HITRUST, COBIT, COSO, and ISO) to drive IT Privacy regulatory compliance.
• Prior experience working with Internal or External Audit functions are a plus.
• Experience with IT risk and controls identification and assessments including IT control design and effectiveness testing.
• Experience with GRC (Governance, Risk and Compliance)
• Experience in analyzing data and creating reports/dashboards/views to provide visibility into risk and control landscape.
• Ideal candidate will have excellent communication skills (both verbal and written) with leaders at all levels within the organization, an ability to work in a matrixed environment to drive results, and the ability to clearly define and execute repeatable processes.
• Ideal candidate will have an effective time management, active listening, meeting facilitation, and influencing skills.
• Ability to effectively navigate a variety of challenging environments, prioritize work and determine when to escalate to upper management.
• Security or risk certifications such as CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional) and/or CIPP (Certified Information Privacy Professional) certifications are a plus.

Anticipated salary range: $119,800 - $171,100

Bonus eligible: Yes

Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs

Application window anticipated to close: 3/11/2024 *if interested in opportunity, please submit application as soon as possible.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here

At Deckers Brands, Together, Every Step is a promise kept that every employee can bring their authentic self, is valued and supported, as a whole person, at work and beyond. Together, Every Step is how we continue to deliver exceptional business results, experience an amazing place to work, and have a positive impact on the communities and world around us. 

Job Title: Legal Intern

Reports to:  Sr. Paralegal

Location:  Goleta, CA

Interested applicants must reside in one of the following approved states: Arizona, California, Colorado, Indiana, Massachusetts, Minnesota, New York, Oregon, Pennsylvania, Texas, Utah, Washington

The Role

Summer Interns are offered the opportunity to experience corporate Legal Team Focus Areas and expertise while collaborating with team members through interviews, involvement in meetings, training, and assisting as appropriate. Over the course of the Internship, Intern will rotate through eight (8) Legal Focus Areas – each one building on the last and carrying through to the next. During each rotation, Intern will have time for an interview with the Focus Area leader, join relevant meetings, and assist with chosen tasks. Tasks may carry over from week to week to allow Intern to maximize experience and support of each Focus Area.

Approximate Dates of this Internship are May/June 2024 through August 2024.

Intern must provide own housing in the Goleta, CA area or work remote.

We celebrate diversity--of your background, your experiences and your unique identity. We are committed to ensuring an inclusive and equitable workplace where all of our employees can Come as They Are. We believe that when we bring our different perspectives to work, we are truly Better Together.

Your Impact
The Intern will assist a team of lawyers, paralegals, and professional support staff in providing support for the Company’s domestic and international business including UGG®, HOKA®, TEVA®, SANUK® and KOOLABURRA BY UGG®. Support activities may include: proof reading, drafting, reviewing, redlining, researching, creating, or maintaining systems of organization, etc.

Who You Are

We’re looking for a highly self-motivated and reliable individual who can work closely with our Legal Team as well as with other internal groups and will exercise the highest level of ethics and discretion.
 

We’d love to hear from people with

• Enthusiasm for learning and keen interest in the in-house legal environment
• Ability to successfully balance multiple tasks and effectively meet deadlines
• Excellent written and oral communication skills and interpersonal communication skills
• Excellent judgement and ability to handle sensitive and confidential information
• Basic understanding of contract law
• Excellent legal writing, legal research, and problem-solving skills
• Able to work independently with only occasional direction

Required Education

Currently enrolled in an accredited U.S. law school, with completion of first year (1L) by the start of the internship.

Internship Eligibility

• Must meet Education Requirement above​

• The approximate dates of this internship are May/June 2024 through August 2024

• Candidate must be available to work part time hours (approximately 30 hours per week)

• Internship may be on-site or remote. If on-site, Intern must provide own housing for the duration of internship program​ in the Goleta, CA area and must have reliable transportation to/from work​.

$24 per hour

The salary range posted reflects the minimum and maximum target for new hire salaries for this role in our Goleta, CA location. Individual pay will be determined by location and additional factors, including job related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary for your preferred location during the hiring process.

Equal Employment Opportunity
Diversity and inclusion are key to our success. We are proud to be an equal opportunity employer and our employees are people with different strengths, experiences and backgrounds who share a passion for our brands. We welcome qualified applicants regardless of their race, color, religion, sex, sexual orientation, gender identity, gender expression, national origin, age, military or veteran status, mental or physical disability, medical condition and all of the other beautiful parts of your identity.

#LI-FI

Overview & Responsibilities

PURPOSE OF THE JOB

This position installs, administers, and maintains Security related hardware, operating system, and application software.  This position is designed to assist in providing the information technology security infrastructure required to our security expectations.
run application software to support the computational and information needs of the company.  General functions of the job include:  installing and maintaining security hardware / applications; analyzing and monitoring systems, and taking action to resolve security issues as necessary;
Develop policies and processes for better security incident management; designing and configuring security provisions provided by hardware and software suppliers; assisting in the evaluation of  new hardware, operating systems, and data base management systems, and participating in making recommendations concerning the use and compatibility of new hardware and software with existing infrastructure; reviewing technical manuals, publications, and other materials to keep current on the state of security technology.

BACKGROUND and EXPERIENCE

• Bachelor’s degree in Computer Science, Information Technology, Cyber security, or a related field.
• Knowledge of basic programming languages (e.g., Python, Java) is preferred.
• Certifications like CompTIA Security+, CEH (Certified Ethical Hacker), or related credentials are a plus.
• Related Work Experience:  2 years of experience in a security related Information Technology department.
• Technical Skills:  Basic knowledge of internals of computer hardware, operating and data base management systems software.  
• Analytical and problem solving skills and willingness to use project management concepts and tools in the planning and execution of project work.  
• Basic knowledge of system and software quality assurance best practices and methodologies. 
• Understanding of the organization's goals and objectives.  
• Ability to write and speak clearly and concisely.  
• Willingness research technical and application functional issues and products.  
• Self-motivated and willing to take direction from more experienced team members and aptitude toward details.  
• Ability to work in a high-pressure environment.  
• Willingness to working in a teaming, collaborative environment.  
• Aware of applicable data privacy practices and laws.  
• Hands-on operating systems tuning and troubleshooting experience.  
   

SPECIFIC JOB RESPONSIBILITIES/COMPETENCIES

• Assist in developing and maintaining application security policies and procedures.
• Responsible for ensuring the security of software applications.
• Work with the IT team to implement security solutions for applications.
• Monitor application security measures and logs to detect any suspicious activities or breaches.
• Perform regular security audits and vulnerability assessments on applications.
• Help in identifying and resolving security vulnerabilities within the software.
• Collaborate with developers to integrate security measures into the application development lifecycle.
• Provide technical support for application security issues.
• Participate in security training and awareness programs.
• Ensure applications are compliant with industry security standards and best practices.
• Assist in responding to and investigating security incidents.
• Prepares and delivers activity and progress reports for presentation to the IT Leadership Team and occasionally the executive management team.
• Liaises with network administrators and software engineers to assist with design specifications, program logic, and data conversions.
• Provides input to assessments and planning processes aimed at developing long-term strategic goals for security system software in conjunction with system owners and department managers.
• Works with application development staff to develop database architectures, coding standards, and quality assurance policies and procedures.
• Participates in operating and database management systems software security audits.
• Implements end-user access control levels to operating and database management systems software.
• Provides guidance to more junior members of the team, as needed.
• Work evenings and weekends occasionally to meet deadlines.
• Sit for extended periods of time.
• Participate in training sessions, presentations, and meetings.
• Travel as required for the purpose of off-site installations and configuration.
• Demonstrate dexterity of hands and fingers to operate a computer keyboard, mouse, power tools, and to handle other computer components.
• Lift and transport moderately heavy objects, such as computers and peripherals.
   

Equal Employment Opportunity

Elliott is an equal employment opportunity/affirmative action employer and does not discriminate on the basis of race, color, religion, sex, national origin, age, marital status, genetic information, disability, veteran status, or any other characteristic protected by the federal, state or local laws of the United States. Applicants and employees are protected under U.S. federal law from discrimination. To learn more, click here.

Pay Transparency Nondiscrimination Provision
Elliott follows Executive Order 11246, including the Pay Transparency Nondiscrimination Provision. To learn more, click here.

To learn more about our Job Applicant Privacy Notice, please click here.

No agency submissions please. NOTE: Resumes submitted to any Elliott Group employee without a current, signed and valid contract in place with the Elliott Group recruiting team will become the property of Elliott Group and no search fees will be paid. 

Johnson Controls International plc. is an equal employment opportunity and affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, genetic information, sexual orientation, gender identity, status as a qualified individual with a disability or any other characteristic protected by law. To view more information about your equal opportunity and non-discrimination rights as a candidate, visit EEO is the Law. If you are an individual with a disability and you require an accommodation during the application process, please visit here.

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 50,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500.

Cardinal Health’s Information Security team aims to be a world-class cybersecurity and risk management organization that enables Cardinal Health to be healthcare’s most trusted partner. We are a remote-first team and are excited to offer full-time remote opportunities. We currently have a full-time career opening for an Information Security and Risk Engineer role within the Information Security Organization. This role will report to the manager of IT control compliance council within our Information Security Team and will serve as the first line of defense role responsible for defining, implementing, and evaluating the effectiveness of IT controls.

Qualifications:

• Bachelor’s Degree in related field or equivalent work experience
• 4+ years’ experience in related field preferred, such as IT audit, IT compliance function
• Strong understanding and experience with SOX and/or other regulatory compliance processes
• Team Player and Collaborative – Ability to work well with team members to achieve the desired results
• Willing to independently navigate through complex scenarios and uncharted compliance topics
• Ability to multi-task with organization, efficiency, accountability, and attention to detail
• Driven and self-motivated to learn new technologies and achieve objectives
• A great & effective verbal and written communicator
• Professional certification preferred: CISA, CISSP, CISM, CRISC

Essential Duties and Responsibilities:

• Perform IT risk assessment for pilot areas and identify control gap
• Work with IT stakeholders to design effective IT controls and monitor the execution to manage risk and ensure compliance with regulations (e.g., SOX, HIPAA, GDPR)
• Design IT controls that increase operational efficiency and reduces the likelihood of control failure (e.g., automated and preventative controls vs. manual and detective)
• Challenge status quo - recommend new or improved controls to keep IT applications current with industry standards and compliance requirements.
• Carry out analysis on third party audit reports, such as SOC 1/2, to identify potential control issues.
• Track and drive remediation of IT control issues within our IT risk governance process Strong in educating/influencing of IT stakeholders to raise awareness and promote a mindset focused on IT controls and compliance
• Oversee information security compliance activities, including daily, weekly, quarterly and/or annual security risk assessments – both performing internal assessments and responding to external assessments.
• Collaborate cross-functionally within the information security and risk management department to ensure alignment with existing compliance, risk management and information security activities
• Research new security compliance requirements and assist in the evaluation of compliance control requirements.
• Any other duties that may be required as assigned

Experiences:

• Experience participating in external control audits; SOX and/or SOC1/2 Type II audit experiences are preferred
• Solid working knowledge of governance frameworks including NIST, ISO27000, FedRAMP
• Experience with Corrective Action Plans (CAP) to remediate deficiencies identified through monitoring, auditing, or a Compliance Issue Report (CIR). These activities should consist of improvements to health plan processes or vendor processes taken to eliminate causes of non-compliance or other issues
• Strong personality, ability, and credibility to influence key decision-makers, and highly technical resources.
• Strong Knowledge/experience of IT controls for mainstream ERPs, such as SAP, is a plus
• Strong in root cause analysis and problem solving
• Strong flowcharting skill is a plus
• Experience with IT risk governance software (i.e. Archer, AuditBoard, ServiceNow GRC) is a plus

Anticipated salary range: $92,100 - $131,600

Bonus eligible: No

Benefits: Cardinal Health offers a wide variety of benefits and programs to support health and well-being.

• Medical, dental and vision coverage
• Paid time off plan
• Health savings account (HSA)
• 401k savings plan
• Access to wages before pay day with myFlexPay
• Flexible spending accounts (FSAs)
• Short- and long-term disability coverage
• Work-Life resources
• Paid parental leave
• Healthy lifestyle programs

Application window anticipated to close: 3/11/2024 *if interested in opportunity, please submit application as soon as possible.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here