About Atos Group
Atos Group is a global leader in digital transformation with c. 56,000 employees and annual revenue of c. €7.2 billion (at the go-forward perimeter), operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is the brand under which Atos SE (Societas Europaea) operates. Atos SE listed on Euronext Paris.
The purpose of Atos Group is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellence. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.
Responsibilities
Direct Responsibilities
Technical Access Management / Privilege Access Management
o Manage and maintain technical/privilege access controls for production and development environments
o Ensure compliance with organizational technical access control security policies and procedures
o Collaborate with IT teams to implement least privilege access and resolve access-related non-compliance
o Review existing CyberArk password management policies and assess the effectiveness of the enforcement through password rotation
o Review technical access segregation between production and development environments with respective support teams
Data Leakage Prevention (DLP)
o Create, management and maintain DLP policies to detect and prevent data leaks
o Deploy and maintain DLP infrastructure
o Collaborate with IT teams to investigate and respond to data leak incidents
Identity and Access Management (IAM)
o Collaborate with IT teams to deploy and maintain data encryption solutions
o IAM team to ensure seamless integration with technical access management solutions
o Ensure compliance with organizational IAM policies and procedures
Data Encryption Deployment & Monitoring
o Collaborate with IT teams to deploy and maintain data encryption solutions
o Ensure compliance with organizational data encryption policies and procedures
Unstructured & Structured Data Discovery & Activity Monitoring
o Collaborate with IT teams to:
Deploy and maintain unstructured & structured data discovery and activity monitoring solution
Identify and classify sensitive data
Monitor and analyse restricted and sensitive database activities
Remediate any non-compliant finding reported
Infrastructure Vulnerability Management
o Responsible to identify, classify, prioritize and remediate vulnerabilities in organization infrastructure.
o Ensure the regular coverage of infrastructure assets in vulnerability assessment by service providers
o Collaborate with IT Dev and Prod teams to remediate identified vulnerabilities and ensure that all remediation efforts are tracked and documented.
o Provide regular reports to management on vulnerability management activities, including identified vulnerabilities, remediation efforts and compliance status.
o Collaborate with IT teams, management and other stakeholders to ensure that vulnerability management efforts are aligned with business objectives.
o Ensure that vulnerability assessment tools such as Rapid7 Nexpose, Tanium, Qualys are configured to meet the expected quality assessment and by fine-tuning the vulnerability assessment plugins.
Application Security
o Ensure the effective implementation of Secure SDL including the DevSecOps and Threat modelling practices.
o Identify and implement the latest security standards for internet facing and internal assets
o Improve the Vulnerability Management at the application level in terms of efficiency as well as effectiveness (including Static Acceptance Security Testing – SAST, Dynamic Acceptance Security Testing – DAST and Software Composition Analysis – SCA).
o Perform Security risk assessments and reviews to be presented to respective committees
o Ensure the adequate security level for all WM GAIM applications, whatever the IT project manager’s location and hosting provider
Cybersecurity
o Ensure the protection of WM business data with an adequate security level of WM assets based on review processes
o Ensure the coordination with other IT security or other actors in the region or globally
o Assist for a Risk Treatment for any APAC WM issue, based on the processes
o Identify the IT security risks in advance, record and follow-up them
o Define and contribute to processes from cybersecurity perspective
o Periodic reporting of security status to IT Security Domain Head
o Ensure the regular reporting for management follow-up
o Ensure to follow-up on the DLP, Incident Management topics with by investigating and following with handlers until the issue is clos
Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all.
Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria. Find out more on our CSR commitment.
Choose your future. Choose Atos.