What are the responsibilities and job description for the Cyber Security Analyst L2 position at capgemini?
Coordinate with the Studios applications, database, and infrastructure teams to develop appropriate remediation activities and associated timelines for resolution of compliance including Management Audit related gaps by:
- Developing appropriate remediation plans and related timelines for SCS?s review and approval.
- Driving the relevant remediation plans to completion.
- Monitoring and adjusting remediation plans throughout the remediation cycle so that established milestones are more likely to be met.
- Working with application, database, and infrastructure teams to gather evidence reasonably required for the completion of remediation plans.
- Tracking and communicating to management known open compliance and management audit gaps and action plans.
- Identifying issues warranting escalation to management and providing services to assist Studio Cybersecurity and Risk team to resolve such issues.
Support Third Party risk assessment processes by;
- Review intake requests to understand business use case and initial vendor impact
- Schedule kick-off meeting with business owner / requestor and vendor contact
- Send and review questionnaire responses and artifacts
- Analyze and identify any potential impact or deficiencies
- Communicate gaps and findings with stakeholders to identify any mitigating controls or remediation plans.
- Monitor for any necessary vendor reassessments
- Collaborate with SCS Application Security team for any testing and review applicable to vendor application / service.
Provide support in documenting control exceptions;
- Review and analyze the exception request and validate that it is in security scope
- Work with application owner(s) to understand context and mitigating controls
- Document and capture review and conclusions
- Share with SCS management for peer review and communication
- Inform SCS Risk team
Required Competencies
- Bachelor's degree in Computer Information Systems, computer science or an equivalent combination of education, training, and years of experience
- 3-5 years of cybersecurity and risk management experience and proven experience in supporting IT audit/compliance functions
- Thorough understanding of ITGC, NIST, CIS standards
- Highly organized and efficient.
- Interpersonal skills with the ability to work with teams cross-functionally
- Must be a strong communicator to technical and non-technical audiences including developers and tech operators
- Detail-oriented but able to understand the big picture
- Ability to navigate through ambiguity, manage and coordinate multiple project assignments simultaneously in a fast-paced, deadline-driven environment, accepting ownership and accountability of the process and deliver on commitments
- Experience and knowledge of GRC tools and systems
- JIRA
- Smartsheets
The pay range that the employer in good faith reasonably expects to pay for this position is $34.21/hour - $53.45/hour. Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.
Tundra Technical Solutions is among North America’s leading providers of Staffing and Consulting Services. Our success and our clients’ success are built on a foundation of service excellence. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: client provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and; maintain the confidentiality of client proprietary, confidential, or non-public information. In addition, job duties require access to secure and protected client information technology systems and related data security obligations.
Salary : $34 - $53
