CASY-MSCCN Jobs

Job Description

At Oracle Cloud Infrastructure (OCI), we build the future of the cloud for Enterprises. We act with the speed and attitude of a start-up along with the scale and customer focus of the leading enterprise software company in the world.

About the team:

EES Security and Compliance team defines and measures baseline standards using existing internal policies and industry standards such as CIS and SANS. The team creates tools to proactively detect gaps with baseline compliance that improve security operations (scan failure, asset management gaps, configuration drift, etc.) and drive resolution. Technical liaisons for EES teams to analyze and prioritize vulnerabilities, compliance gaps, and security programs. Provides solution guidance to optimize remediation efforts, assist with exception requests, and resolve any process inefficiencies.

Ideally, the candidate will possess several of the following skills:

• Security Compliance and Auditing: Knowledge of regulatory compliance requirements (e.g., GDPR, HIPAA, PCI, DSS, NIST) and experience with security auditing frameworks and processes

• Cloud Security: Familiarity with cloud security principles and best practices, including securing cloud infrastructure, services, and applications in platforms, OCI is a plus

• Security Standards: Improve security posture by defining, enhancing, and maintaining security standards based on industry leading security framework.

• Forensics and Incident Response: Experience in conducting digital forensics investigations and leading incident response activities, including evidence collection, analysis, and containment

• Communication and Leadership: Strong leadership, interpersonal, and communication skills, with the ability to effectively communicate security-related concepts and findings to stakeholders at all levels of the organization

• Continuous Learning and Improvement: Commitment to continuous learning and professional development in the field of cybersecurity, staying updated with the latest threats, trends, and technologies

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field. Master's degree preferred

• 8+ years of experience in information systems, business operations, or related fields,

• 3+ years of experience in security operations, with a focus on incident detection, response, and vulnerability remediation

• Experience with at least 1 automation language or framework (Python, PowerShell, Terraform, etc.) or vulnerability scanning tool (Qualys, Nessus, etc.)

• Strong understanding of networking protocols, operating systems (Linux, Windows), MiddleTier, Database, and cloud computing environments

• Experience with security tools such as SIEM platforms, intrusion detection/prevention systems, and endpoint security solutions

• Relevant certifications such as CISSP, CISM, CISA, or GIAC certifications are preferred

• Excellent communication skills with the ability to effectively communicate technical concepts to both technical and non-technical stakeholders

• Proven leadership abilities with experience leading security projects and initiatives

• Ability to work independently and collaboratively in a fast-paced environment

• Strong analytical and problem-solving skills with a keen attention to detail

Responsibilities

Responsibilities:

• Manage and address security audits as directed and liaison with internal teams for evidence as a security and compliance SME

• Make recommendations and provide guidance/consultation regarding process improvements necessary for remediating internal control gaps. Engage with various teams, both internal and external, around data compliance efforts.

• Drive a security risk management program with forensics investigations and evidence collection as a security exemption approver.

• Responsible for service impact analysis (SIA) and maintaining service resilience compliance in partnership with business owner

• Build and publish security standards for commonly audited areas (endpoint, application, Network) to address gap areas and drive better compliance. Work with system administrators, engineers, and the Information System Security Manager (ISSM) to create or update system/site policies, procedures, and process guides.

• Build automation to detect configuration gaps that impact security operations. Collaborate with cross-functional teams to design and implement security controls and countermeasures.

• Develop and maintain cybersecurity documentation such as the System Security Plan (SSP), Privacy Impact Assessment (PIA), Configuration Management Plan (CMP), Plan of Action and Milestones (POA&M), and Standard Operating Procedures (SOP) as necessary.

• Define roles and responsibilities, process ownership, and operating model for all teams involved in security operations.

• Develop, implement, and maintain industry best practices and regulatory security policies, procedures, and system standards (servers, databases, endpoints, and application design)

• Engagement in cloud security technologies and protocols, including cloud security architecture, identity and access management, and data protection

• Write stakeholder reports using accessible language to explain the assessment, audit results, and recommendations. Create and provide metrics for cybersecurity leadership. Brief executive leadership on compliance matters

About Us

As a world leader in cloud solutions, Oracle uses tomorrow’s technology to tackle today’s problems. True innovation starts with diverse perspectives and various abilities and backgrounds.

When everyone’s voice is heard, we’re inspired to go beyond what’s been done before. It’s why we’re committed to expanding our inclusive workforce that promotes diverse insights and perspectives.

We’ve partnered with industry-leaders in almost every sector—and continue to thrive after 40+ years of change by operating with integrity.

Oracle careers open the door to global opportunities where work-life balance flourishes. We offer a highly competitive suite of employee benefits designed on the principles of parity and consistency. We put our people first with flexible medical, life insurance and retirement options. We also encourage employees to give back to their communities through our volunteer programs.

We’re committed to including people with disabilities at all stages of the employment process. If you require accessibility assistance or accommodation for a disability at any point, let us know by calling +1 888 404 2494, option one.

Disclaimer:

Oracle is an Equal Employment Opportunity Employer*. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans’ status, or any other characteristic protected by law. Oracle will consider for employment qualified applicants with arrest and conviction records pursuant to applicable law.

* Which includes being a United States Affirmative Action Employer