Cyber Security Expert

Description du poste:

CGI is looking for a Cyber Security Expert to join our team.

Fonctions et responsabilits:

APPLICATION SECURITY o Ensure the effective implementation of Secure SDL including the DevSecOps and Threat modelling practices. o Identify and implement the latest security standards for internet facing and internal assets o Improve the Vulnerability Management at the application level in terms of efficiency as well as effectiveness (including Static Acceptance Security Testing SAST, Dynamic Acceptance Security Testing DAST and Software Composition Analysis SCA). o Perform Security risk assessments and reviews to be presented to respective committees o Ensure the adequate security level for all WM GAIM applications, whatever the IT project managers location and hosting provider IT SECURITY COMPLIANCE o Ensure the alignment with the Group and WM GAIM security policies, for both project and production assets o Ensure the protection of WM business data with an adequate security level of WM assets, based on project assessment and production review processes o Ensure the compliance with regulatory bodies requirements, including for APAC (HKMA, MAS, FSC), EU (DORA), Switzerland (FINMA) o Leveraging on a deep knowledge of Security standards such as NIST, CIS, ISO2700x, ensure the compliance with the IT security requirements o Ensure the compliance with the Third-party Technology risks and Cloud security o Identify the process gaps and provide solutions CYBER SECURITY o Ensure the coordination with other IT security or other actors in the region or globally o Assist for a Risk Treatment for any WM issue, based on the processes o Identify the IT security risks in advance, record and follow-up them o Define and contribute to processes from cybersecurity perspective o Periodic reporting of security status to WM IT Domain Head and security champion o Ensure the regular reporting for management follow-up o Handle Cyber alerts & Incident by investigating and following with handlers until the issue is closed. o Ensure to onboard the Assets & Applications in SIEM and handling BAU, create / update relevant documents. PRODUCTION SECURITY o Ensure the effectiveness and success of vulnerability management process o Ensure the compliance level of the production environment and integrate to reporting

Qualits requises pour russir dans ce rle:

Certification (not mandatory but strongly recommended) : CISM, CCSP, CSK, CEH, CISSP Technical Skills: Application Security IT Security Compliance Cyber Security Incident Management Vulnerability Management Language Skills: English - Expert French - Notions Soft Skills: Ability to deliver / Results driven Ability to synthesize Communication Data Analytic Knowledge of Bank Sector

Comptences:

• Cyber

Ce que vous pouvez attendre de nous:

Together, as owners, lets turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, youll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. Thats why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our companys strategy and direction. Your work creates value. Youll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. Youll shape your career by joining a company built to grow and last. Youll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our teamone of the largest IT and business consulting services firms in the world.