Dell Sr Advisor, IT Security in Cyberjaya, Malaysia

"Do you have broad knowledge of the IT security arena? Make the most of your expertise at Dell Cybersecurity. We are looking for a Remediation Analyst to join us an as part of a Vulnerability Management and Remediation team within Cyber Assurance and Remediation organization. In collaboration with other Dell business units, the Remediation Analyst will lead driving remediation of the vulnerability and security findings. The Remediation Analysis will work with the Cybersecurity, IT Infrastructure and application teams to define and implement security measures required to remediate and/or mitigate vulnerabilities that impact Dell's business interests. The ideal candidate is a strong team player that succeeds in a fast-paced and challenging global environment. Candidates must be able to work proactively, independently and demonstrate exceptional organizational and time management skills. Exceptional communication skills are a must. Dell is a collective of customer-obsessed, industry-leading visionaries. At our core is a commitment to diversity, sustainability and our communities. We offer unparalleled growth and development opportunities for our team members. We believe that technology is essential for driving human progress, and we're committed to providing that technology to people and organizations everywhere, so they can transform the way they work and live. Primary duties and responsibilities:

  • Collaborates with product and service groups to drive remediation of identified vulnerabilities or security controls gaps in Dell applications, software or infrastructure

  • Leads and drives remediation efforts with business and end users for all high and critical severity issues reported.

  • Analyzes security issues, determine cause and impact and identify the corrective action needed to eliminate and prevent the event from happening in the future.

  • Helps integrate information security controls into an environment to identify risks and reduce their impact.

  • Reviews and follow-up on identified vulnerability remediation efforts, and validate successful implementation of the recommended mitigating controls

  • Recommends standards, policies, and/or procedures to correct deficiencies.

  • Escalates to vendors, Security Team, and IT and Engineering through standard escalation processes.

  • Research and communicate new/existing security vulnerabilities to the Security Organization, IT and appropriate business stakeholders.

  • Proactively evaluates information security solutions and processes to provide recommendations supporting Dell security standards.

  • Actively reviews public and private vulnerability notifications/disclosures, consume research findings and vulnerability scans to identify risk, utilize industry standard risk methodologies to rank and prioritize them and prioritize remediation and/or mitigation.

  • Participates in the creation, review and maintenance of current and proposed processes and procedures and related documentation within vulnerability management and remediation team.

  • Collaborates with IT Service Centers and Business units to determine reporting and metrics needs and share and present reporting and metrics to Cybersecurity and IT Leadership.

  • Relies on experience and judgment to plan and accomplish goals while performing a variety of tasks. A certain degree of creativity and latitude is expected

  • Completes tasks in a timely and accurate manner.

  • Establishes and achieves realistic goals.

  • Oversees all aspects of the remediation activities to ensure quality and initiates any quality improvement that may be necessary.

  • Bachelor's degree in Computer Science, MIS or a related field of study

  • Minimum of 4 years of information technology experience

  • Minimum of 4 years of information security experience

  • Knowledge IT and IT Security fundamentals and working knowledge of IT hosting services, firewalls, networking, servers, storage etc.

  • Hands on experience and knowledge of OWASP tools and methodologies and security attack vectors. Strong knowledge of current industry trends and latest technology in information security field. Minimum of 2 years of experience in business management, along with the following skills:

  • Ability to collaborate with business stakeholders to identify requirements and drive compliance with approved standards

  • The ability to work comfortably and successfully in a fast-paced environment with frequent changes in priorities

  • The ability to influence others or manage indirectly

  • Strong written (e.g., documentation) and verbal communication skills

  • Excellent problem solving skills with the ability to diagnose and troubleshoot technical issues.

  • Collaborative / Team Player and ability to work effectively with others globally.

  • Customer-oriented with a strong interest in customer satisfaction.

  • Good technical aptitude, problem solving and ability to quickly learn and master new topics and domains.

  • Working knowledge of one or more relevant industry standards, frameworks, and practices; such as IT Service Management, ISO 27001, ISO 27002, COBIT, Sarbanes-Oxley (SOX) etc.

  • Preferred Certifications:

  • Hold one or more industry certifications in Information Security and Risk Management: CISSP, CISA, CRISC, CISM GCIH, GCIA, CEH, Network , Security , or other industry-relevant cyber-security certifications

  • Benefits

  • Our people are the most critical component of our long-term success and their health and well being are our priority. You will enjoy a comprehensive, locally competitive benefits package."

Job: *IT Security

Organization: *Security

Title: Sr Advisor, IT Security

Location: AP-MY-Cyberjaya

Requisition ID: 17000LQ7