Total 10 Senior Executive legal public security job vacancies in deu bad homburg office ek3

Job Family:

Travel Required:

Clearance Required:

What You Will Do:

Our Security Access Management Technical Analyst - Amazon Web Services (AWS) is a member of a service team with upwards of four (5) personnel within the Information Security Compliance group that are focused on external federation and authentication services, privileged access management, non-privileged access management, identity access auditing, and multifactor authentication services. Effectively supports and executes multiple or more complex IT Security Access Management projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse Access Management security systems, maintaining, and protecting Guidehouse and Client data within AWS to the NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, and HITRUST standards, and managing Guidehouse and client information securely through all means of electronic transfer. Reports directly to the Security Access Management Manager.

Job Function:

• Understands and supports the IT Security Access Management initiatives that support overall IT Security Compliance goals and objectives
• Demonstrates effective written and verbal communication skills; delivered in a professional, respectful, and timely manner
• Manages AWS security services such as Identity and Access Management (IAM to safeguard against unauthorized access and threats
• Produces high quality work product leveraging existing templates, tools, and methodologies that align to applicable professional standards and best practices
• Clearly and concisely conveys more complex messages to IT Security Access Management team; effectively presenting facts and recommendations
• Designs and configures monitoring and alerts for identity and access management in accordance with Guidehouse Policies, Standards, and Procedures
• Assists in conducting risk assessments and security audits to identify vulnerabilities and recommending mitigations to enhance security posture
• Proactively asks questions, validates what is heard, and shares relevant informed point of view in meetings and client discussions
• Demonstrates the ability to sense and respond to verbal and non-verbal cues and adapt messages and approach based on the audience
• Demonstrates honest and professional behavior in all interactions
• Identifies risk issues (e.g., technical, client service, engagement, team, internal and external) and escalate them to IT Security supervisors and senior leaders
• Helps with issue resolution, risk mitigation and contingency planning in alignment with IT Security Access Management leader guidance and IT Security risk mitigation plans
• Uses critical thinking, analysis, expertise, and collaboration to develop technical solutions and solve problems
• Thinks innovatively to proactively identify opportunities for system and process enhancements and make recommendations to IT Security Access Management leadership
• Works in unstructured or unclear circumstances
• Mentors and/or trains IT Security Access Management team and/or IT Security, working with supervisor/leaders to position them for success, serving as a resource to peers
• Promotes the development of new technical knowledge and skills within IT Security Access Management team
• Conducts quality assurance reviews using established or establishing KPIs and self-audit work before showing work to more senior staff and/or clients, learning from mistakes
• Takes ownership of my tasks and the tasks I delegate, resolving issues and escalating as appropriate
• Presents themselves and the company in a manner that always promotes a positive lasting impression of high quality, promptness, and professional service
• Draws from experience to propose solutions to meet needs, focusing the team accordingly
• Builds a high level of trust with stakeholders by meeting and anticipating needs and expectations
• Demonstrates an advanced understanding within AWS and ability to apply technical or specialized knowledge specific to role, industry, business line, and/or functional area within AWS
• Stays current on AWS events, trends, and issues in the news relevant to IT Security
• Ensures prescribed IT Security policies, procedures, and standards are followed while identifying opportunities for system and process enhancements
• Communicates with parties within and outside of IT Security; May have responsibility for communicating with parties external to the organization (e.g., customers, vendors, etc.)
• Works independently on mid to large or complex projects and assignments, with minimal guidance and to influence parties within and outside the job function at an operational level regarding policies, best practices, and procedures
• Responsible for developing technical AWS solutions that may require collaboration with internal expertise and deep analysis of the technical system
• Problems and issues faced are difficult and may require understanding of broader set of issues. Problems typically involve consideration of multiple issues, job areas or specialties; Problems are typically solved through drawing from prior AWS experience and analysis of issues.
• Manages projects while delegating work to lower-level employees
• Ability to participate in cross- department discussions to influence job area processes
• Exhibits practical knowledge of project management
• Advanced understanding and ability to apply standards, principles, theories, and technical concepts obtained through advanced education combined with experience

What You Will Need:

• Citizenship: India
• Shall possess following certifications:
  • AWS Certified Cloud Practitioner Foundational
  • AWS Certified Security Specialty
• Must be able to work 10am – 7pm IST
• Experience working with Executive Leadership
• Experience supporting Microsoft Windows 10 operating system
• Working knowledge of NIST SP 800-171 and NIST SP 800-53
• Experience managing multi-geographic cloud resources while implementing controls compliant with NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Experience documenting processes and procedures to comply with required NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Significant demonstrated experience working with cloud first solutions that are implemented globally
• Extensive experience with AWS environments, access management, and information security principles
• Experience configuring and managing AWS security services such as Identity and Access Management (IAM) to safeguard against unauthorized access and threats
• Experience executing processes and procedures in compliance with required NIST and IT standards
• Extensive experience with AWS Security Hub
• Experience with AWS Control Tower
• Working knowledge of broad web application environment standards, implementation strategies, and best business practices
• Significant experience with the operational employment of as Identity and Access Management (IAM) within AWS
• Ability to work on many concurrent, and changing priorities
• Action-oriented and able to manage and meet aggressive timelines and deadlines.
• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Bachelor’s in computer-related OR cyber field with 4-6 years of experience; OR Master's with 6-8 years of experience (Relevant experience may be substituted for formal education or advanced degree)
• Shall possess one OR more of the following certifications OR equivalent:
  • AWS Certified Solutions Architect Associate
  • AWS Certified Solutions Architect Professional
  • AWS Certified DevOps Engineer Professional
  • AWS SysOps Administrator Associate
  • AWS Certified Data Engineer
  • AWS Machine Learning Specialty
  • (ISC)2 Certified Information Security Professional (CISSP)
  • ISACA Certified Information Security Manager (CISM)
  • ISACA Certified Information Systems Auditor (CISA)
  • ISO 27001 Certified Auditor
  • ISO 9001 Certified Auditor
  • Project Management Professional (PMP)
  • CompTIA Security+ (Plus)
• Experience with Threat Intelligence
• Experience working with identity and access management systems
• Working knowledge of Active Directory, Exchange, SharePoint, and Teams
• Demonstrated ability to learn and document new technologies/solutions
• Experience with ServiceNow is a plus
• Experience working in an ITIL environment

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Who are we?

Product Software, Platform Services

Equinix is a global leader in interconnection and data center services, empowering businesses to connect their digital infrastructure securely and reliably. With a presence in more than 50 markets worldwide, Equinix provides cutting-edge solutions that enable companies to accelerate their digital transformation and thrive in today's interconnected world.

As we continue to prioritize the security of our customers' data and infrastructure, we are seeking a talented and driven Software Security Engineer to join our passionate team of experts at Equinix and help us maintain the highest level of security for our platform services that serve all Equinix’s products and customers.

Job Summary

As a Software Security Engineer at Equinix, you will play a pivotal role in enhancing the security posture of our software systems and services. Your expertise will be instrumental in safeguarding critical data and ensuring the uninterrupted operation of our platform services. You will collaborate closely with product and information security teams, as well as platform services’ engineering teams, architects, and other DevSecOps professionals across the organization.

Together, you will implement robust security measures, address potential vulnerabilities identified by InfoSec stakeholders, and promote security best practices throughout the software development lifecycle. This is a technical, hands-on engineering role designed for security specialists familiar with Java/Spring Boot and microservices architecture. Experience with distributed, highly automated environments and a developer’s understanding of security, coupled with a willingness to learn new concepts, are essential for success in this role.

Responsibilities

• Collaborate with internal InfoSec stakeholders to address security requirements and enhance security awareness across the organization

• Collaborate with platform services’ engineering teams to implement security practices into the software development process, ensuring secure coding standards, design principles, and threat mitigation strategies are followed

• Monitor and analyze security events and incidents, providing timely resolution and implementing preventive measures to protect against future threats

• Adhere to the defined SLOs to address the security vulnerabilities

• Conduct security training and awareness programs for developers and other team members to promote a security-conscious culture within the organization

• Contribute to the development and maintenance of security policies, procedures, and guidelines that align with industry best practices and regulatory requirements

• Conduct comprehensive security assessments, including code reviews, penetration testing, SAST/DAST scanning, and threat modeling, to identify and address potential security risks in the services that the platform team owns

• Manage configurations of security tools for platform services in alignment with other products and InfoSec

• Adopt and improve cloud and infrastructure security controls

• Assess the security of authentication, authorization, and encryption mechanisms to safeguard sensitive data and ensure secure access control.

• Actively research and keep abreast of the latest security threats, vulnerabilities, and industry best practices, and apply this knowledge to continuously improve our security strategies

Qualifications

• Minimum 7 years of professional engineering experience in Software Security , or a related field

• Minimum 5+ years of full-stack expertise in application design & development with Java technologies, with knowledge of Spring, JPA/Hibernate, Message Queues & Workflow Engines in a microservices architecture

• Strong hands-on ability to fixing vulnerable libraries/packages in Java, Spring Boot, ReactJS, NodeJS, Go, Kotlin, Message Queue frameworks or workflow engines

• Strong understanding of software security principles, secure coding practices, and common security vulnerabilities (OWASP Top 10, CWE, etc.)

• Proven work experience as a Software Security Engineer or similar role with a focus on securing large-scale, distributed software systems including secure configuration of AWS, docker, K8s, service mesh, and NACL configuration management

• Hands-on experience with security tools and frameworks for code analysis, vulnerability scanning, and penetration testing in software & network systems

• Hands-on experience with cloud security best practices and technologies using AWS

• Solid knowledge of network protocols, web application security, and data protection mechanisms

• Understanding of compliance frameworks like ISO, GDPR and SOC

• Demonstrated ability to collaborate effectively with cross-functional teams and communicate complex security issues to both technical and non-technical stakeholders

• Strong analytical and problem-solving skills with a keen eye for detail

• Passion for staying up-to-date with the latest security trends and technologies to proactively address emerging threats

• Apply now and be a key player in shaping the future of the security of Equinix’s platform services

Equinix is committed to ensuring that our employment process is open to all individuals, including those with a disability. If you are a qualified candidate and need assistance or an accommodation, please let us know by completing this form.

Equinix is an Equal Employment Opportunity and, in the U.S., an Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to unlawful consideration of race, color, religion, creed, national or ethnic origin, ancestry, place of birth, citizenship, sex, pregnancy / childbirth or related medical conditions, sexual orientation, gender identity or expression, marital or domestic partnership status, age, veteran or military status, physical or mental disability, medical condition, genetic information, political / organizational affiliation, status as a victim or family member of a victim of crime or abuse, or any other status protected by applicable law.

Address:

MUST HAVE: Experience with SAST/DAST tools and relevant experience performing Application Security Testing; working as security consultant with application teams.

About the role:

The Application Security Testing Engineer reports to the Senior Manager and assists with the security testing activities for BMO based applications. The role will be responsible for the execution and coordination of Static and Dynamic Application Security Testing (SAST/DAST), provides information security consulting services (SAST/DAST Scanning) for BMO overall and businesses/groups. Liaises with stakeholders to understand problems and opportunities and enables BMO to meet its goals by understanding business vision, objectives and KPIs. Participates in the execution of information security strategy.

What will you do:

• Subject Matter Expertise - Provides technical leadership to business areas as a Security Testing subject matter expert. Assists with efforts on the execution of security testing operations to include pre-engagement (scoping), engagement (testing) and post-engagement activities (reporting).
• Secure Testing - Assists in delivery of security testing projects according to a structured process, to include writing test reports. This may include oversight and/or execution of the configuration and deployment of security testing software and application of results to security analysis.
• Information Security Risk Management - Works with leadership to mature security testing team capabilities including reporting and remediation guidance in alignment with local and global regulatory requirements. Identifies security gaps and deficiencies by conducting risk assessments; able to recommend corrective action of identified vulnerabilities and weaknesses. Assists with the execution of planning, testing, tracking, and advises on necessary risk acceptance for identified security risks. 
• Secure Application Development - Assists with the execution of highly technical/analytical security assessments of custom web applications, mid-tier application services, backend mainframe applications and databases, including manual, custom and industry known attack methods using a risk-based intelligence-led methodology. Identifies potential misuse scenarios. Advises on secure development practices.

What you need to succeed:

• Typically between 5 - 7 years of relevant experience and a post-secondary degree in Computer Science or Information Systems or a related field of study or an equivalent combination of education and experience.
• Experience in testing web applications, APIs, mobile applications to identify vulnerabilities and weaknesses.
• Hands-on experience with dynamic application security (DAST) tools such as Burp Suite, OWASP ZAP, etc. Hands-on experience with static source code analysis (SAST) tools.
• Knowledge of coding languages (e.g. C#, JAVA, JavaScript, TypeScript, Python etc.) and can code with little oversight
• Knowledge of different rapid development processes, e.g. Waterfall, Agile, etc.
• Knowledge of coding vulnerabilities, frameworks, patching processes, Information Security risk and industry best practices, defense concepts, risk-based assessment approach
• Knowledge of OWASP Top 10, and the OWASP Testing Guide or other secure coding frameworks, NIST Cyber Security Framework (CSF)
• Understands the principles of secure coding techniques and secure code reviews, code scanning software and vulnerability code scanning processes, network protocols and connectivity.
• Industry certification is an asset - CISSP, CISSLP, CCSK, GIAC etc.
• Experience working in an Agile development environment, and ability to work effectively with cross-functional teams.

The above represents BMO Financial Group’s pay range and type.

Salaries will vary based on factors such as location, skills, experience, education, and qualifications for the role, and may include a commission structure. Salaries for part-time roles will be pro-rated based on number of hours regularly worked. For commission roles, the salary listed above represents BMO Financial Group’s expected target for the first year in this position.

BMO Financial Group’s total compensation package will vary based on the pay type of the position and may include performance-based incentives, discretionary bonuses, as well as other perks and rewards. BMO also offers health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans. To view more details of our benefits, please visit: https://jobs.bmo.com/global/en/Total-Rewards

We’re here to help

At BMO we are driven by a shared Purpose: Boldly Grow the Good in business and life. It calls on us to create lasting, positive change for our customers, our communities and our people. By working together, innovating and pushing boundaries, we transform lives and businesses, and power economic growth around the world.

As a member of the BMO team you are valued, respected and heard, and you have more ways to grow and make an impact. We strive to help you make an impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth training and coaching, to manager support and network-building opportunities, we’ll help you gain valuable experience, and broaden your skillset.

To find out more visit us at https://jobs.bmo.com/ca/en.

BMO is committed to an inclusive, equitable and accessible workplace. By learning from each other’s differences, we gain strength through our people and our perspectives. Accommodations are available on request for candidates taking part in all aspects of the selection process. To request accommodation, please contact your recruiter.

Note to Recruiters: BMO does not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to BMO, directly or indirectly, will be considered BMO property. BMO will not pay a fee for any placement resulting from the receipt of an unsolicited resume. A recruiting agency must first have a valid, written and fully executed agency agreement contract for service to submit resumes.

Job Family:

Travel Required:

Clearance Required:

What You Will Do:

Our Security Information Protection Technical Analyst - Amazon Web Services (AWS) is a member of a service team with upwards of four (4) personnel within the Information Security Operations group that are focused on data loss prevention (DLP), data aggregation/sharing monitoring, sensitive information management, cryptographic services, and secure file transfer services. Effectively supports and executes multiple or more complex IT Security Information Protection projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions. Accountable for ensuring the day-to-day operations of Guidehouse Information Protection security systems, maintaining, and protecting Guidehouse and Client data within AWS to the NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, and HITRUST standards, and managing Guidehouse and client information securely through all means of electronic transfer. Reports directly to the Security Information Protection Manager.

Job Function:

• Understands and supports the IT Security Information Protection initiatives that support overall IT Security Operations goals and objectives
• Demonstrates effective written and verbal communication skills; delivered in a professional, respectful, and timely manner
• Manages AWS security services such as Identity and Access Management (IAM), Amazon Cognito, AWS Key Management Service (KMS), and AWS Shield to safeguard against unauthorized access and threats
• Manages AWS specialized data classifications and data protection mechanisms
• Produces high quality work product leveraging existing templates, tools, and methodologies that align to applicable professional standards and best practices
• Clearly and concisely conveys more complex messages to IT Security Information Protection team; effectively presenting facts and recommendations
• Designs and configures monitoring and alerts using AWS Security Hub in accordance with Guidehouse Policies, Standards, and Procedures
• Assists with the development of incident response strategies and efforts to address security incidents and breaches, minimizing impact on business operations
• Assists in conducting risk assessments and security audits to identify vulnerabilities and recommending mitigations to enhance security posture
• Proactively asks questions, validates what is heard, and shares relevant informed point of view in meetings and client discussions
• Demonstrates the ability to sense and respond to verbal and non-verbal cues and adapt messages and approach based on the audience
• Demonstrates honest and professional behavior in all interactions
• Identifies risk issues (e.g., technical, client service, engagement, team, internal and external) and escalate them to IT Security supervisors and senior leaders
• Helps with issue resolution, risk mitigation and contingency planning in alignment with IT Security Information Protection leader guidance and IT Security risk mitigation plans
• Uses critical thinking, analysis, expertise, and collaboration to develop technical solutions and solve problems
• Thinks innovatively to proactively identify opportunities for system and process enhancements and make recommendations to IT Security Information Protection leadership
• Works in unstructured or unclear circumstances
• Mentors and/or trains IT Security Information Protection team and/or IT Security, working with supervisor/leaders to position them for success, serving as a resource to peers
• Promotes the development of new technical knowledge and skills within IT Security Incident Management team
• Conducts quality assurance reviews using established or establishing KPIs and self-audit work before showing work to more senior staff and/or clients, learning from mistakes
• Takes ownership of my tasks and the tasks I delegate, resolving issues and escalating as appropriate
• Presents themselves and the company in a manner that always promotes a positive lasting impression of high quality, promptness, and professional service
• Draws from experience to propose solutions to meet needs, focusing the team accordingly
• Builds a high level of trust with stakeholders by meeting and anticipating needs and expectations
• Demonstrates an advanced understanding within AWS and ability to apply technical or specialized knowledge specific to role, industry, business line, and/or functional area within AWS
• Stays current on AWS events, trends, and issues in the news relevant to IT Security
• Ensures prescribed IT Security policies, procedures, and standards are followed while identifying opportunities for system and process enhancements
• Communicates with parties within and outside of IT Security; May have responsibility for communicating with parties external to the organization (e.g., customers, vendors, etc.)
• Works independently on mid to large or complex projects and assignments, with minimal guidance and to influence parties within and outside the job function at an operational level regarding policies, best practices, and procedures
• Responsible for developing technical AWS solutions that may require collaboration with internal expertise and deep analysis of the technical system
• Problems and issues faced are difficult and may require understanding of broader set of issues. Problems typically involve consideration of multiple issues, job areas or specialties; Problems are typically solved through drawing from prior AWS experience and analysis of issues.
• Manages projects while delegating work to lower-level employees
• Ability to participate in cross- department discussions to influence job area processes
• Exhibits practical knowledge of project management
• Advanced understanding and ability to apply standards, principles, theories, and technical concepts obtained through advanced education combined with experience

What You Will Need:

• Citizenship: India
• Shall possess following certifications:
  • AWS Certified Cloud Practitioner Foundational
  • AWS Certified Security Specialty
• Must be able to work 10am – 7pm IST
• Experience working with Executive Leadership
• Experience supporting Microsoft Windows 10 operating system

• Working knowledge of NIST SP 800-171 and NIST SP 800-53
• Experience managing multi-geographic cloud resources while implementing controls compliant with NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Experience documenting processes and procedures to comply with required NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, HITRUST, or GDRP
• Significant demonstrated experience working with cloud first solutions that are implemented globally
• Extensive experience with AWS environments, network security, and information security principles
• Experience configuring and managing AWS security services such as Identity and Access Management (IAM), Amazon Cognito, AWS Key Management Service (KMS), and AWS Shield to safeguard against unauthorized access and threats

• Working knowledge of the MITRE ATT&CK framework
• Experience working with Security Operation Centers, physically or virtually
• Experience executing processes and procedures in compliance with required NIST and IT standards
• Extensive experience with AWS Security Hub
• Experience with AWS Control Tower
• Experience using a SIEM, such as Splunk or Sentinel to do analysis of security anomalies and events
• Experience creating writing queries with Search Processing Language (SPL) or Kusto Query Language (KQL)
• Working knowledge of broad web application environment standards, implementation strategies, and best business practices
• Significant experience with the operational employment of data loss protection (DLP) and sensitive information management within AWS

• Experience in one or more of the following cryptographic capabilities:
  • S/MIME generation
  • Code signing certificates
  • HSM cryptographic key generation
  • Key encryption keys
  • Key material supersession procedures
  • NIST SP 800-88 cryptographic erasure procedures
  • Cryptographic Key Management

• Ability to work on many concurrent, and changing priorities
• Action-oriented and able to manage and meet aggressive timelines and deadlines.
• Must have excellent organizational and time management skills

What Would Be Nice To Have:

• Bachelor’s in computer-related OR cyber field with 4-6 years of experience; OR Master's with 6-8 years of experience (Relevant experience may be substituted for formal education or advanced degree)
• This position is open to candidates in India only, preference is within the Chennai or Trivandrum areas
• Shall possess one OR more of the following certifications OR equivalent:
  • AWS Certified Solutions Architect Associate
  • AWS Certified Solutions Architect Professional
  • AWS Certified DevOps Engineer Professional
  • AWS SysOps Administrator Associate
  • AWS Certified Data Engineer
  • AWS Machine Learning Specialty
  • (ISC)2 Certified Information Security Professional (CISSP)
  • ISACA Certified Information Security Manager (CISM)
  • SANs GIAC certification (e.g., GPEN or GW APT)
  • Offensive-Security Certified Professional (OSCP)
  • EC-Council Certified Ethical Hacker (CEH)
  • Microsoft Security (Operations Analyst/Engineer/Administrator) Associate
  • Microsoft Information Protection Administrator Associate
  • CompTIA Security+ (Plus)
• Experience working with firewalls/web application firewalls, secure file transfer systems, implementing changes, and monitoring status
• Experience with Threat Intelligence
• Experience conducting Incident Response and Security Investigations
• Experience working with secure file transfer systems, such as: Kiteworks, IBM Aspera, Globalscape EFT, WinSCP, or other Secure File Transfer tools
• Experience working with file share monitoring systems, such as: Varonis, SolarWinds, Atera, Netwrix, ManageEngine, or other file share monitoring tools
• Working knowledge of Active Directory, Exchange, SharePoint, and Teams
• Demonstrated ability to learn and document new technologies/solutions
• Experience with ServiceNow is a plus
• Experience working in an ITIL environment
• Experience with Kiteworks
• Experience with Varonis

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Job Summary

Job Description

• Experience Required: 5 to 10 years in either cyber security or information security.
• Experience Desired: Five years+ experience with open source security software and information security specific tools.
• Education Desired: Bachelors Degree preferred in IT/ CS.
• Certification or Licensing Desired: CISSP, GIAC, CISA
• Travel Required: Regional - Daily, Less than 10%

Job Responsibilities

• Design network and application vulnerability assessment programs and testing methodologies.
• Perform technical risk assessments for enterprise systems and report gaps and remediation actions. Analysis includes automated testing using standard tools as well as manual testing and interrogation of web-based applications.
• Design and configure Intrusion Prevention Systems and passive Intrusion Detection Systems. Create and test custom signatures based on emerging threats or business needs. Perform signature updates and reviews and tuning of sensors. Configure automated reporting and develop escalation procedures.
• Configure SIEM (Security Information and Event Management) platforms to include obtaining data from endpoints and network devices and generating reports. Create automated workflow to address security related incidents.
• Perform regulatory compliance audits including SOX, PCI and HIPAA. Report findings and advise on remediation efforts. Assist in preparing business application owners prior to external audits.
• Lead advisement and interpretation of emerging regulations and legal requirements. Research, monitor and advise on emerging security threats and developments that affect business systems or network infrastructure.
• Lead and advise on security related updates for endpoint applications and server applications, as well as vendor-supplied or proprietary security patches. Responsible for coordination with various teams to ensure patches are deployed in a timely manner based on risk assessment to the organization.
• Design and maintain various cryptographic solutions including x.509 based certificate cryptography, PGP/GPG PKI infrastructure, TLS/SSL tunneling solutions, endpoint encryption and other cryptographic solutions on multiple platforms, both at rest and in motion.
• Perform penetration testing on multiple platforms and network environments including wireless (RF), wired, physical, social and the like, following frameworks such as the OSSTMM and ISSAF.
• Review firewall rules and access control lists for appropriate access — this may include port and protocol analysis to best determine scope of access rules.
• Assist in creating and maintaining information security policies, including technical and administrative policies.
• Have availability for 24/7 rotational support.
• Conduct research on new security technologies and products, both open source and vendor proprietary.

Job Family:

Travel Required:

Clearance Required:

** Please note that this job posting is for a proposal of a potential client and is not reflective of an awarded job. In addition, we are only collecting resumes and interviewing based off the skillset and qualifications listed.  ***

Senior Consultants In this role, the candidate will support the Security and Compliance team in its efforts to assist clients with cyber and physical security, grid reliability, risk management and/or utility wildfire mitigation. The candidate will be expected to immediately contribute to client program design, process improvement, regulatory compliance, project management, and the development of reports/spreadsheets/presentations deliverables. Senior Consultants work closely with, Managing Consultants, Associate Directors, and Directors to keep them abreast of project progress and important developments.

What You Will Do

• Supporting workstreams that enable the assessment, development, and enhancement of business strategies, operating plans, business processes, organizational structures, and supporting infrastructure for clients.

• Applying cybersecurity, process improvement, & risk management framework knowledge to support the design of client deliverables.

• Applying technical competencies “on the ground” with clients.

• Communicating solutions and new strategies to clients through reports and presentations.

• Performing data collection, analysis, statistical & risk analyses in support of project objectives.

• Providing detailed fact finding, research, and analysis to further support delivery.

We encourage career development and hiring for the long term. As a Senior Consultant, you will be able to design your career path and continue to develop your hard and soft skills. As you are ready drive strategic solutions across multiple complex workstreams and become more involved in business development, you will have the opportunity to progress to a Managing Consultant and beyond.

What You Will Need:
 

• Bachelor’s degree in a business, policy, engineering (esp. mechanical, electrical/power systems), economics, finance, science or related discipline

• Strong project management skills

• Strong communications skills, including both written and verbal

• Strong critical analysis and problem-solving skills

• Ability to manage multiple time-sensitive priorities without diminished effectiveness

• Ability to travel as required

• No sponsorship available for this position

• The successful candidate must not be subject to employment restrictions from a former employer (such as a non-compete) that would prevent the candidate from performing the job responsibilities as described.

• Authorization to work in Canada.

What Would Be Nice To Have

• Master’s or MBA degree in an engineering, science, business and/or economics discipline; Combinations of engineering and business ideal

• Previous experience as a consultant (external/Internal) or management consultant

• Working experience in a Reliability Compliance field for an electric utility, a Region, NERC, FERC, or equivalent

• Utility experience

• Regulatory experience

• Experience working for Provincial or local governments

• Specific working experience related to any of the following:

  • Cyber security especially working with Operations Technology (OT) or Industrial Control Systems (ICS)

  • Bulk Electric System (BES) and power systems

  • NERC/FERC Enforcement or Auditing

  • Critical Infrastructure Protection standards (CIP)

  • Physical Security

  • Utility wildfire mitigation

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Job Family:

Travel Required:

Clearance Required:

What You Will Do:

Our management consulting professionals help our clients to identify, evaluate, and solve some of their most complex challenges, assisting them in achieving their strategic goals and objectives to fulfill their mission. We help our clients transform their business processes, improve efficiency of operations, strengthen policies and controls, increase transparency and performance management, and comply with Federal laws and regulations. The nature of our projects can be fluid and requires self-motivated individuals that are willing to develop solutions on their own or in a team of highly skilled professionals. Project team members are provided the opportunity to interact with our clients’ senior management, as well as the opportunity to enhance their skills in the area of technical competency, business development, client service, leadership, project management, and people development.

This role will support Government agencies that are responsible for securing the nation’s transportation systems, preparing for and responding to disasters and emergencies, and other national security-related priorities. Individuals will be engaged in a diverse set of project-specific tasks covering a broad set of program and project management consulting capabilities, including:

• Assisting clients in designing, developing, launching, and improving new projects and programs that are focused on achieving their strategic goals, objectives, and mission
• Assisting clients to identify, develop, and implement performance metrics and measurement tools to monitor program performance and evaluate whether programs are achieving their goals
• Assist clients in analyzing projects and programs to identify risks and help develop, apply, and monitor mitigations
• Documenting and evaluating business processes and making recommendations for process improvements
• Applying a variety of analytical, problem-solving, and reporting skills and techniques
• Producing a variety of communications from informal email interactions with clients to formal memos, issue papers, presentations, executive briefings, and others
• Conducting research to investigate client problems and work collaboratively with your team to formulate and recommend solutions
• Support clients in collecting and analyzing data, producing models and visualizations, and draw conclusions from the data to improve decision-making
• Analyze and help develop and/or improve policies and procedures for a variety of programs and operational needs

In addition to client-facing responsibilities, this role will support important activities that contribute to the growth of our business, strengthen internal Guidehouse operations, and create a positive work environment for all Guidehouse employees.  Some of these activities include but are not limited to:

• Assisting in business development activities, such as identifying potential client needs and ways Guidehouse can assist, developing proposals and white papers, participating in client and internal account meetings, and more
• Participating in Guidehouse’s programs for coaching and mentoring staff
• Assisting in the development of learning and development materials, courses, and presentations to help Guidehouse employees expand and strengthen their skills
• Support Guidehouse programs and initiatives for recruiting top talent to the company

What You Will Need:

• Must be able to obtain and maintain a Public Trust, Secret, or higher level of federal/government security clearance. US Citizenship is required to obtain a federal security clearance.
• Three or more years’ relevant experience in a professional environment
• Completing a Bachelor’s or Master's degree (between fall 2023 and summer 2024) from an accredited United States college or university.

What Would Be Nice To Have:

• Degrees and backgrounds preferred: Public Policy, Government, International Studies, Accounting, Finance, Business, IT, Computer Science, Audit readiness, Data Science, Communications, STEM majors

• Active US Security Clearance:

  • SECRET

  • TOP SECRET

  • TOP SECRET/SCI

  • TS/SCI CI Poly

  • TS/SCI FS Poly  

• Direct experience supporting Federal Government, National Security, OR Department of Defense clients
• Knowledge and understanding of project management principles and the phases of project management (Initiation, Planning, Execution, Monitoring, Closure)
• Experience working in teams to produce high-impact work products, reports, and other deliverables in a fast-paced environment
• Heightened attention to detail, and the ability to create and edit technical and non-technical written work products and graphical presentations
• Ability to view problems from multiple angles and apply a variety of solutions to solving them
• Ability to participate in client-facing discussions and meetings
• Ability to synthesize information quickly and learn new skills
• Strong organizational and communication skills
• Possesses strong oral and written communication skills
• Interest in growing a career in consulting, preferably government/federal/DoD consulting
• Desire to support public sector clients with a national security mission
• Passionate about reinvesting in the company you work for and representing the company’s brand

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance

• Personal and Family Sick Time & Company Paid Holidays

• Position may be eligible for a discretionary variable incentive bonus

• Parental Leave and Adoption Assistance

• 401(k) Retirement Plan

• Basic Life & Supplemental Life

• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts

• Short-Term & Long-Term Disability

• Student Loan PayDown

• Tuition Reimbursement, Personal Development & Learning Opportunities

• Skills Development & Certifications

• Employee Referral Program

• Corporate Sponsored Events & Community Outreach

• Emergency Back-Up Childcare Program

• Mobility Stipend

About Guidehouse
Guidehouse is an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

Guidehouse will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of applicable law or ordinance including the Fair Chance Ordinance of Los Angeles and San Francisco.

If you have visited our website for information about employment opportunities, or to apply for a position, and you require an accommodation, please contact Guidehouse Recruiting at 1-571-633-1711 or via email at RecruitingAccommodation@guidehouse.com. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodation.

Guidehouse does not accept unsolicited resumes through or from search firms or staffing agencies. All unsolicited resumes will be considered the property of Guidehouse and Guidehouse will not be obligated to pay a placement fee.

Your Moneris Career - The Opportunity

Moneris is a proudly Canadian financial technology company and Canada’s leader in payment processing. Are you ready to build a rewarding career and transform the way Canadian businesses grow and operate in payments and beyond? We want to hear from you.

As Senior Legal Counsel at Moneris, you will join our dynamic and diverse Legal team of creative thinkers and problem solvers and you will provide strategic advice to senior management and different business units on a variety of legal risk associated with the operation of the company, taking into consideration the need to balance the economic objectives of Moneris as a whole.

Location: You will be based in our Toronto, ON office and will work in a hybrid work model.

Reporting Relationship: You will report to our VP, Legal.

Your Moneris Career - What you'll do

• Be a trusted legal advisor and partner to senior management and your other internal clients and provide high quality advice and support on a wide variety of matters.

• Provide consultation, guidance and legal advice relating to privacy, data management, AML, and other general regulatory and legal compliance.

• Train and provide guidance on privacy and other regulatory obligations, processes and the implementation of controls.

• Manage negotiations of customer, partner and vendor agreements.

• Development of precedent resources and references to support activities of the legal department.

• Coordinate with outside counsel on different matters and issues relating to the business.

• Support different projects within the legal department.

• Provide litigation file support.

• Protect and enhance Moneris' brand, and help manage all enterprise risks within appetite.

Your Moneris Career - What you bring

• Law Degree (Juris Doctor) and current membership with the Law Society of Ontario.

• 7+ years of legal experience, either with a top full-service law firm and/or in-house legal department.

• Experience with privacy, data protection, AML and other regulatory compliance.

• Demonstrated experience developing, implementing and managing a privacy program and an enterprise-wide regulatory compliance program.

• Excellent contract drafting, negotiation and analytical skills.

• Ability to work independently without supervision but within a culture that values teamwork and collaboration.

• Highly organized with the ability to work under pressure and meet tight deadlines.

• Strong interpersonal and communication skills.

• Fluent in English (reading, writing, and verbal).

Nice-to-have...

• Previous experience in the payment industry.

• Fluent in French (reading, writing, and verbal).

Your Moneris Career - What you get

• Comprehensive Total Rewards Program including bonuses, flexible benefits starting from day 1, and your choice of either a health spending account (HSA) or personal spending account (PSA)

• RRSP matching & defined contribution pension plan

• Learning & development programs and resources including unlimited free access to LinkedIn Learning, Coursera and an Educational Assistance Program

• Holistic approach to your well-being, with an Employee Assistance Program for you and your family, access to 24/7 virtual health care, wellness events and a supportive workplace culture

• A workplace committed to investing in Diversity, Equity and Inclusion (DEI) through various initiatives including, employee inclusion groups (EIGs), mentorship, DEI learning and workshops, educational events, and various resources including an internal DEI website and newsletter

• Company-wide paid year-end closure & personal time off (including religious, personal, and volunteer days)

Find out more about the work perks and benefits you get as a Moneris employee at Moneris.com/careers

Note: We welcome and encourage applications from Indigenous peoples, people of colour, people with disabilities, people of all genders, sexual orientation and intersectional identities.

We acknowledge that people from equity-deserving groups (including racialized individuals, women, gender diverse individuals, individuals with disabilities, neurodivergent individuals, members of 2SLGBTQIA+ communities and those born outside of Canada) are less likely to apply for jobs unless they feel they meet all the requirements posted. At Moneris, we believe candidates bring experience to their work in many ways. We encourage you to apply and share, in the application form, the transferrable experience you bring, and how this will support your success in this role.

Join Our Team

In 2022, the Atlanta Journal-Constitution named Primerica one of the best places to work for the ninth consecutive year. Also in 2022, Primerica was named one of the Best Employers for Diversity by Forbes for the second consecutive year. Forbes also named Primerica as one of America’s best Insurance companies for 2022. Primerica ranks 6th among 25 companies included in the Term Life Insurance category. Over the past seven years Primerica has consistently been voted Best Employer by Gwinnett Magazine in its special "Best of Gwinnett" winner editions. Primerica is a great place to work! Join our team to experience what it’s like to work at “one of the best places to work in the metro Atlanta”.

About this Position

Responsibilities & Qualifications

Responsibilities & Qualifications

DUTIES

• Comprehend complex issues and be adept at analyzing information and recommending viable solutions; must possess a willingness to work collaboratively with team members and business counterparts to identify thoughtful and creative solutions to legal issues that arise.
• Review advertising materials for compliance with applicable laws and brand requirements; provide legal advice on content; and advise on disclosure requirements and guidelines, with potential focus on digital and internet communications, including websites, email and social media posts.
• Facilitate compliance with broker-dealer and investment advisor marketing materials, and also related agent requests for advertising, speaking engagements, and Cash/Non-Cash compensation, to ensure compliance with related regulations including Financial Industry Regulatory Authority (FINRA), Securities and Exchange Commission (SEC), and State Securities and Insurance laws.
• Interface with members of the sales force to ensure proper adoption of company policies and procedures related to advertising and marketing rules and guidelines.

KNOWLEDGE, SKILLS AND ABILITIES:

• Juris Doctorate Degree and current member in good standing of any state bar
• 1-3 years of legal experience preferred
• SIE, Series 6 and 26 securities registrations (or equivalents) required OR must obtain within 120 days of hire
• Previous experience in the financial services industry preferred but not required
• Strong analytical, legal research and communication (both written and verbal) skills, including the ability to proactively reach out to sales force representatives and to internal departments
• Strong interpersonal and self-motivation skills and ability to work in a fast-paced environment, both alone and as part of a team

FLSA status:
This position is exempt (not eligible for overtime pay):

Our Benefits:

• Day one health, dental, and vision insurance

• 401(k) Plan with competitive employer match

• Vacation, sick, holiday and volunteer time off

• Life and disability insurance

• Flexible Spending Account & Health Savings Account

• Professional development

• Tuition reimbursement

• Company-sponsored social and philanthropy events

It has been and will continue to be the policy of Primerica, Inc., and its subsidiaries to be an Equal Opportunity Employer. We provide equal opportunity to all qualified individuals regardless of race, sex, color, religious creed, religion, national origin, citizenship status, age, disability, pregnancy, ancestry, military service or veteran status, genetic or carrier status, marital status, sexual orientation, or any classification protected by applicable federal, state or local laws.

At Primerica, we believe that diversity and inclusion are critical to our future and our mission – creating a foundation for a creative workplace that leads to innovation, growth, and profitability. Through a variety of programs and initiatives, we invest in each employee, seeking to ensure that our people are not only respected as individuals, but also truly valued for their unique perspectives.

YOUR MISSION

Position Summary & Key Objectives

• Reporting to Head of Legal Affairs and to provide advisory, legal knowledge, guidance on transaction pertaining to commercial agreements, endorsement agreement involving IP and technology related laws, Data Privacy, TMT agreements and laws and other related issues (Including IT and IP) .
• Ensuring completion of commercial agreements on time.
• Ensuring compliance under agreements.
• To ensure and maintain adequate legal safeguards for PUMA to ensure that PUMA interest are protected.
• Ensuing all agreements and transactions are lawfully recorded. Points of law are taken into considerations and ensuring the necessary guidance to the team

YOUR TALENT

Qualifications and Functional Competencies

• LLB with around 10 years of experience Good Understanding of contract laws, Sale of goods act, Information Technology and IP related laws.
• Results orientated and self-starter with “can do” attitude and an attitude of not treating “familiarity as knowledge”.
• Ability to research, learn and rely on legal points. Stick together and work as a team member, both within the legal team and cross - functionally
• Attitude of being “Patient”
• Strong communication both verbal and non-verbal and ability to interact globally.
• Organization and prioritization skills, Effective time management, detail and accuracy