*Please Note: The successful applicant will provide ownership of and be performing work in FedRAMP or IL-5 type environments, and therefore, must be a U.S. Person (i.e. U.S. citizen, U.S. national, lawful permanent resident, asylee, or refugee). This position may also perform work that the U.S. government has specified can only be performed by a U.S. citizen on U.S. soil.
In today's dynamic digital environment, security is everyone's job. At Cisco, the Security and Trust Organization (S&TO) is at the core of making infrastructure more secure. Your involvement in this strategic and result driven team will enable you to be part of one of Cisco's major objectives - to be the Number 1 Trusted Business partner to our customers. The S&TO reports to Cisco's Chief Security and Trust Officer and leads the innovation, training, and implementation of security and trust features and processes across all of Cisco's products.
What You’ll Do:
- Implementing security programs for industry standards such as ISO 27001, SOC 2, ISO 27017, PCI DSS, CIS, and NIST Frameworks.
- Strategize and drive security initiatives to ensure that cloud offers align with corporate policies, standards, and industry guidelines.
- Architect and implement cloud native security controls across domains such as IAM, secure CI/CD pipeline, Incident Management, Vulnerability Management, Cryptography.
- Strategize, design and architect security solutions for cloud infrastructure.
- Write detailed security solution specifications, security control narratives, test steps, logical diagrams, and reports.
- Continuously monitor the effectiveness of security controls through comprehensive assessments across domains such as IAM, secure CI/CD pipeline, Incident Management, Vulnerability Management, and Cryptography.
- Identify process improvements and efficiencies in existing processes to build robust processes and drive implementation of controls
- Continuously monitor the effectiveness of security through various comprehensive assessments.
- Collaborate with the controls automation team to evolve the automation footprint of security controls.
- Perform RCA by engaging with relevant engineering teams and track the remediation of deviation.
Who You Are:
Minimum Qualifications:
- Must have Bachelors + 3 years of proven experience or Masters + 1 years of demonstrated experience in Information Security or Information technology or Compliance engineering.
- Proven experience implementing security programs in public cloud environments such as AWS, Azure, or GCP.
- In-depth understanding of technology compliance frameworks such as ISO 27001, SOC 2, ISO 27017, PCI DSS, CIS, NIST Frameworks, and OWASP App Security Testing Guidelines..
Preferred Qualifications:
- Ability to research and implement security solutions involving various technologies across public cloud environments.
- In-depth understanding of domains such as IAM, secure CI/CD pipeline, Incident Management, Vulnerability Management, Cryptography.
- Excellent problem-solving and critical thinking skills.
- Capable of collaborating with cross-functional technical and business teams and varying levels of management.
- Excellent communication and reporting skills with ability to present to business and engineering teams with clarity.
Why Cisco
#WeAreCisco. We are all unique, but collectively we bring our talents to work as a team, to develop innovative technology and power a more inclusive, digital future for everyone. How do we do it? Well, for starters – with people like you!
Nearly every internet connection around the world touches Cisco. We’re the Internet’s optimists. Our technology makes sure the data traveling at light speed across connections does so securely, yet it’s not what we make but what we make happen which marks us out. We’re helping those who work in the health service to connect with patients and each other; schools, colleges, and universities to teach in even the most challenging of times. We’re helping businesses of all shapes and sizes to connect with their employees and customers in new ways, providing people with access to the digital skills they need and connecting the most remote parts of the world – whether through 5G, or otherwise.
We tackle whatever challenges come our way. We have each other’s backs, we recognize our accomplishments, and we grow together. We celebrate and support one another – from big and small things in life to big career moments. And giving back is in our DNA (we get 10 days off each year to do just that).
We know that powering an inclusive future starts with us. Because without diversity and a dedication to equality, there is no moving forward. Our 30 Inclusive Communities, that bring people together around commonalities or passions, are leading the way. Together we’re committed to learning, listening, caring for our communities, whilst supporting the most vulnerable with a collective effort to make this world a better place either with technology, or through our actions.
So, you have colorful hair? Don’t care. Tattoos? Show off your ink. Like polka dots? That’s cool. Pop culture geek? Many of us are. Passion for technology and world changing? Be you, with us!
#WeAreCisco
#STO24
