Cyber Prevent Senior Expert - Privileged Access Management

Vodafone; Fatih; On-site; TRY 300,000 - 560,000; Full time

Job summary

Vodafone is seeking an experienced information security professional to design and implement Privileged Access Management and related security services in a high-availability environment. You will work with CyberArk PAM, Conjur and EPM, collaborating with Vodafone teams and external vendors to maintain PCI-DSS, ISO27001, COBIT and GDPR compliance.

You will lead security operations, ensure capacity planning, and provide expert Level-3 support while documenting processes for internal and customer

Qualifications

• University degree (BSc./MSc.) in Engineering discipline (Electrical-Electronics, Computer Science or similar).
• Fluent in English both written and spoken.
• At least 6 years of work experience in information security or IT security.
• Strong knowledge on IT security controls.
• Proven experience on PAM products and its components CyberArk (Vault, PVWA, PSM, PSMP), AIM & AAM integrations.
• Operational and integration experience for CyberArk Conjur (secret management for containerized platforms).
• Deployment and policy configuration experience for client administrative rights management with CyberArk EPM.
• Telecommunications industry experience is an advantage.
• Critical thinking with strong attention to details and follow up.
• Having low level security understanding but ability to present it in a high level.
• Strong analytical deduction.
• Being creative, problem solving and result oriented.
• Effective verbal and written communication skills and strong interpersonal skills, good in reporting.
• Demonstrated ability to work effectively with 3rd party suppliers and internal stakeholders.

Responsibilities

• Design and develop security-based services taking care of cost and performance criteria.
• Set up and maintain Privileged Access Management systems, infrastructure & equipment.
• Take necessary actions to prevent problems in Security systems core equipment.
• Solve problems that might occur on these systems working with vendors, outsource companies and Vodafone teams.
• Follow capacity of Security services equipment and adjust capacity as needed.
• Maintain CyberArk PAM, Conjur, and EPM components with security teams.
• Plan and attend operations on the equipment for fixing issues and updates.
• Prepare/support documentation of equipment and services per PCI-DSS, ISO standards, COBIT, KVKK, GDPR, SOX policies.
• Attend audits and provide evidence when required.
• Provide 7/24 Level 3 support for internal/external customers.
• Use management tools and self-developed scripts to monitor problems/capacity and report.
• Support CS Secure by Design and Cyber Defense teams for better security processes.
• Collaborate with 3rd party vendors for skills, products and pilots.
• Monitor redundancy scenarios to add value for the network.
• Prepare documentation, presentation and training for Vodafone teams and partners.
• Ensure BCM policies, procedures, plans and BCMS practices are implemented.

Skills

Fluent English

CyberArk PAM

CyberArk Conjur

CyberArk EPM

AIM & AAM integrations

IT security controls

Problem solving

Vendor coordination

Education

Engineering degree (BSc/MSc)

Job description

What You’ll Do

• Follow technology to design and develop new security-based services taking care of cost and performance criteria. Search for new security equipment’s & systems for better performance of security services with new features
• Design, setup and maintain Privileged Access Management systems, infrastructure & equipments
• Take necessary actions to prevent possible problems in Security systems core equipment
• Solve problems that might occur on these systems working in cooperation with vendors, outsource companies and other teams in Vodafone
• Follow capacity of Security services equipments and take necessary actions to increase/decrease capacity when required
• Maintain Privileged Access Management solutions like CyberArk PAM, CyberArk Conjur, CyberArk EPM and Centrify by working in cooperation with security related teams in Vodafone
• Plan and attend operations on the equipments for fixing issues and keeping updated with new features
• Prepare/supports documentation of equipments and services according to company PCI-DSS, ISO 27001, ISO 27701, COBIT, KVKK, GDPR, SOX etc. policies
• Attend internal and external audits and preparing evidence when required
• Provide 7/24 3rd level support internal/external customer needs
• Use management tools and self-developed scripts to follow and report problems/capacity on the infrastructure develop proactive and reactive problem solution methods
• Supporting CS Secure by Design and Cyber Defense teams for a better and more effective security process against evolving threats and requirements
• Collaborates with 3rd party vendors for sourcing of skills required
• Collaborates with 3rd party vendors for products and services provided, for production components as well as for pilots and prototypes
• Watching further redundancy scenario’s in line with the effort to add value for the network
• Prepare documentation, presentation and training about Security services to team members, other Vodafone teams, customers, partners and other 3rd parties when required
• Ensure that VFTR BCM policy /standard ,procedures ,plans implemented and works carried out
• Ensure that BCM risks are assessed and mitigated so far as is reasonably practicable in VFTR Business Continuity Management System (BCMS)
• Ensure VTR BCMS by planning, establishing, embedding, implementing, monitoring, reviewing, maintaining and improving within VFTR

Who You Are

• University degree (BSc./MSc.) in Engineering discipline (Electrical-Electronics, Computer Science or similar)
• Fluent in English both written and spoken
• At least 6 years of work experience in information security or IT security
• Strong knowledge on IT security controls
• Proven experience on PAM products and its components CyberArk (Vault, PVWA, PSM, PSMP), AIM & AAM integrations
• Opertaional and integration experience for CyberArk Conjur (secret management for containerized platforms)
• Deployment and policy configuration experience for client administrative rights management with CyberArk EPM.
• Telecommunications industry experience is an advantage
• Critical thinking with strong attention to details and follow up
• Having low level security understanding but ability to present it in a high level
• Strong analytical deduction
• Being creative, problem solving and result oriented
• Effective verbal and written communication skills and strong interpersonal skills, good in reporting
• Demonstrated ability to work effectively with 3rd party suppliers and internal stakeholders

If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.