Security Services Manager

Skills required

Essential Skills

a.

Intermediate to expert level knowledge of Cloud Computing

b.

Knowledge of Oracle Linux such as basic navigation security patch analysis security best practice configuration etc.

c.

Knowledge of Windows server security such as common vulnerabilities configuration weaknesses & security best practices

d.

Possess deep level knowledge on Computer System Validation (CSV) GAMP 5 Guideline USFDA 21 CFR Part 11 GxP Regulations Validation Life Cycle V model Good Documentation Practices (GDP) Software Development Life Cycle (SDLC) and Deft Life Cycle Management

Prepare review and execute validation documentation like System Design Document (SDD) Installation Qualification (IQ) Plan/Protocol Test Cases and Summary Reports

Perform Quality Review and oversee the validation activities with respect to Good Documentation Practices (GDP) and 21 CFR Part 11 regulations

e.

Knowledge of Oracle Database security best practices Database Auditing etc

f.

Knowledge of Oracle Fusion Middleware security best practices API & web security OWASP Top 10 and associated controls etc.

g.

Knowledge of two or more industry best practice standards & framework such as CIS NIST STIG FedRAMP PCI DSS HIPAA & 21 Part 11

h.

Knowledge of scanning tools such as Nessus Qualys etc. or other such and ability to interpret scan data findings severity CVSS score etc.

i.

Exemplary customer management skills

Desirable Skills

a.

Able to write basic to intermediate Oracle Linux shell scripts

b.

Knowledge of Oracle Cloud Infrastructure security concepts ZTA and CSA Cloud Controls Matrix (CCM)

c.

Knowledge of Identity & Access management solutions SAML SCIM hybrid cloud identity source integrations federation roles & policies etc.

d.

Able to read and understand services contracts order documents and its associated entitlements & obligations.

e.

Excellent Project management skills

f.

Possess current Oracle Cloud Infrastructure certifications

Function to be performed:

Responsibilities include but not limited to

Act as an expert advisory contact and assist with deployment and ongoing management of a number of Enhanced Security Services for example (but not limited to):

a.

Threat & vulnerability management such as vulnerability scanning & penetration tests

b.

Database security solutions such as Encryption Vaulting and Auditing

c.

Data obfuscation solutions such as Data masking & Data Redaction

d.

Assess application layer security assessments and secure configuration best practices

e.

Implement & support Validation Support Services for healthcare industries

Chair & Participate in periodic security service review calls with customer and clearly demonstrate value proposition of delivered security services

Develop customer success metrics cultivate enduring relationships with customers from initial onboarding through their cloud transition journey fostering business growth; key success criteria

Create & maintain up to date customer & service status information pertaining to security services in relevant reporting portals applications etc. at all times

Analysis of the vulnerability scan and PenTest data and provide customer walkthrough using tailored & fitforpurpose deck; clearly articulating service value findings associated risks & remediations

Assist and be part of a center of excellence (CoE) team in presentation of security service value decks using effective metrics such as balance score card (BSC) to customer business team who could be nontechnical or higher management / Cxx level