Technical Expert Level III: Risk Assessment at Massmart

Summary:

• The role will have the responsibility of ensuring the architecting and the deployment of technology in area of responsible. Its primary purpose is to securely ensure that security standards are developed and maintained on a frequent basis and according to industry best practices and security Frameworks. This will help to ensure that the solutions implemented within the organization comply with
• the global NIST framework practices, Walmart Global Tech Policy & Governance and the Walmart SSP (Solution Security Plan) process.
• The responsibilities include improvement to security levels through the identification of risks and implementation of mitigating strategies,
• Participate in a wider security awareness program, creating ideas and content, and providing orientation, educational programs, andon-going communication as required.

FUNCTIONS / RESPONSIBILITIES:

• Protection strategy
• Implementation of short, medium and long-term strategy in Information Security, with guidance from the InfoSec Senior Managers and Wal-Mart subject matter experts
• Evaluate third party vendors for identifying the most cost efficient and relevant offerings as and when needed
• Supporting the Architecture team during planning, design, development, Installation and troubleshooting processes
• Technical Expert planning & implementation
• Developing and Implementation of core security systems 
• Ensure that all classified data, including financial, personal, business and Intellectual Property, is safe
• Designing robust and as far as possible secure systems that are not vulnerable to penetration or hacking.
• Use various mathematical or statistical models in the quest to analyze and secure potential threats to their systems
• Provide an all-encompassing role, from the initial theoretical to the ultimate practical implementation of secure communications, processing and storage of data
• Responsible for documenting technical processes and procedures
• Perform trend analysis, identify top incidents and work with respective teams/individuals to minimize incidents and prepare weekly & monthly status reports
• Provide timely communication and actionable intelligence to support the protection of information assets and supporting infrastructure
• Prototyping of new security solutions using programming techniques that incorporate the most secure programming practices which may be required along with staff training 
• Assist with compliance, ensuring endpoint security tools are properly installed and fully functional across the organization
• Measuring performance of upgraded or newly installed systems
• Stakeholder management
• Maintain and build effective, professional relationships with third party vendors and service providers that result in timely delivery of requirements and the highest standards of quality and cost effectiveness
• Work with internal stakeholders to gather requirements and develop the most effective solutions
• Constant engagement with management to determine company’s current and future needs
• Identifying potential problems and notifying the relevant stakeholders in a timely manner
• Monitoring processes, users and methods, and developing plans for increased efficiency
• Coordinating with other teams and colleagues to ensure quality assurance of systems are maintained at best approved standards
• Performing quality control on all projects and making recommendations for improvement
• Project managing the design and implementation at times
• Provide business with design ideas and implementation schematics
• Training staff on system procedures
• Providing leadership with post-implementation feedback
• Knowledge Management
• Keep abreast with latest trends in the technical Stream for InfoSec
• Participate in seminars/conferences/forums to keep up-to-date with the industry best practices
• Engage in on-going development by training and enhancement of IT security

Requirements:

Minimum Academic, Professional Qualifications & Experience required for this position 

• Certification in Information Security (SSCP, CCSP, CISSP, CEH or CRISC)
• Pervious work experience in Technical Architecture
• Pervious work experience with NIST, PCI DSS, OWAPS and ISO 27001/2 Frameworks
• Bachelor’s degree in a related field such as Mathematics, Computer Engineering or Computer Science would be preferred
• 3-5 years’ experience on security projects for major organizations is desirable

Competencies:

• Strong knowledge of security principles, standards & techniques
• Critical Judgment & Decision Making
• Thorough InfoSec process knowledge
• Ability to work independently
• Ability to identify risks and flag those timely
• Detail oriented, with a strong focus on accuracy
• A good team-worker
• Good written and verbal communication skills
• An analytical mind with the ability to create source code.
• Up to date knowledge of IT Security hardware, software and solutions
• Practical experience using computer operating systems such as MS Windows, UNIX/Linux
• Project Management Skills
• Ability to see big picture designs from basic specifications
• Ability to problem solve complex IT Information Security Issues