- Lead the database vulnerability management program, focusing on identifying, assessing, and remediating vulnerabilities across various database platforms, including but not limited to Oracle, Exadata, MS SQL Server, Sybase, Netezza, MySQL, Snowflake, and PostgreSQL.
- Conduct regular vulnerability assessments and penetration tests on database systems to identify potential security weaknesses and misconfigurations.
- Analyze vulnerability scan results and prioritize vulnerabilities based on severity, potential impact, and risk to the organization's data assets.
- Collaborate with database administrators, system administrators, and IT security teams to develop and implement remediation plans for identified vulnerabilities.
- Work closely with software development teams to address vulnerabilities in database-driven applications and ensure secure coding practices.
- Implement and maintain database security best practices, including access controls, encryption, and data masking, to mitigate the risk of exploitation.
- Monitor database patch management processes and ensure timely deployment of security patches and updates to address known vulnerabilities.
- Provide guidance and support to database administrators and other stakeholders on secure database configuration, hardening, and maintenance practices.
- Stay current on emerging threats, vulnerabilities, and best practices related to database security through industry sources, vendor advisories, and professional networks.
- Document processes, procedures, and findings related to database vulnerability management activities and contribute to the development of security policies and standards.
- Individual will play a direct role in vendor management, overseeing the scheduling and implementation of the patching activities across all platforms.
- Support and Drive remediation of cyber risks identified by Global Cyber Security, Corporate Audit, Technology Risk Management and Regulators.
- Participate in engineering and technical solutioning to strengthen controls and improve effectiveness of the Patching & Compliance Program.
- Participate in the continuous improvement of the existing and the development of new automation solutions to enhance effectiveness of the program.
- Ensure the Patching & Compliance Program satisfies all Internal & External Regulatory and Compliance standards
- Support Regulatory and Audit inquiries providing insight to the Patching & Compliance Program and detailed evidence when requested.
- Provide Information Technology risk management and compliance support to ensure effective identification, measurement, control and management of the relevant risks
- Identify and manage IT risk by maintaining effective internal controls and escalating as appropriate any deficiencies to management and/or applicable technology governance boards.
- Drive Continuous Service Improvement by looking at lesson learns and gap analysis and implement improvement plans to document, update and improve daily operation procedures
- Develop reports using data that is hosted in multiple sources/tools (e.g., spreadsheets, dashboards) and communicate clearly to leadership and other cyber security teams
- Engage with Application engineering leads and SRE/IT teams to coordinate vulnerability remediation from technical and policy compliance perspectives
- Track and monitor key milestones or after significant change in the environment to identify network, infrastructure, and configuration vulnerabilities
- Perform ad-hoc data remediation, clean-ups, and reporting using large complex data sets for high-priority security remediations
- Bachelor's degree in computer science, information technology, or a related field.
- 10+ years of Database Production Support
- Extensive experience in database administration, database security, or a related role, with a focus on vulnerability management.
- In-depth knowledge of database management systems, including their architecture, security features, and common vulnerabilities.
- Ability to effectively coordinate and communicate between technical teams and business stakeholders with varying technical proficiencies
- Proficiency in database vulnerability assessment tools and techniques, such as database scanners, SQL injection testing, and privilege escalation testing.
- Strong understanding of database security controls, including access control mechanisms, encryption, auditing, and authentication mechanisms.
- Experience with database patch management processes and tools, such as Oracle Enterprise Manager, Microsoft SQL Server Management Studio, or similar.
- Excellent analytical and problem-solving skills, with the ability to prioritize and address vulnerabilities effectively.
- Strong communication and collaboration skills, with the ability to work effectively with cross-functional teams.
- Relevant certifications, such as Oracle Certified Professional (OCP), Microsoft Certified: Azure Database Administrator Associate, or Certified Information Systems Security Professional (CISSP), are a plus.
- Ability to work independently and manage multiple projects simultaneously in a fast-paced environment.
-
Technical Patching Lead
2 weeks ago
State Street Corporation Princeton, United StatesWho We are Looking For: · This role will be member of the Global Infrastructure Operations Continuous Service Improvement (CSI) team as part of 24*7*365 Production Management organization. An organization that delivers highly secure, reliable, efficient infrastructure technology ...
-
Technical Patching Lead
1 week ago
State Street Corporation Princeton, United StatesWho We are Looking For: · This role will be member of the Global Infrastructure Operations Continuous Service Improvement (CSI) team as part of 24*7*365 Production Management organization. An organization that delivers highly secure, reliable, efficient infrastructure technology ...
-
Technical Patching Lead, VP
2 weeks ago
State Street Princeton, United States OTHERWho We are Looking For: · This role will be member of the Global Infrastructure Operations Continuous Service Improvement (CSI) team as part of 24*7*365 Production Management organization. An organization that delivers highly secure, reliable, efficient infrastructure technology ...
-
Technical Patching Lead, VP
2 weeks ago
State Street Bank & Trust Co. Princeton, United StatesWho We are Looking For: · This role will be member of the Global Infrastructure Operations Continuous Service Improvement (CSI) team as part of Production Management organization. An organization that delivers highly secure, reliable, efficient infrastructure technology operation ...
-
Technical Patching Lead, VP
3 weeks ago
State Street Corporation Princeton, United StatesTechnical Patching Lead, VP - Midrange/Mainframe · Technical Patching Lead, VP - Midrange/Mainframe · Who We are Looking For: · This role will be member of the Global Infrastructure Operations Continuous Service Improvement (CSI) team as part of 24*7*365 Production Management or ...
-
Technical Patching Lead, VP
1 week ago
State Street Bank & Trust Co. Princeton, United StatesWho We are Looking For: · This role will be member of the Global Infrastructure Operations Continuous Service Improvement (CSI) team as part of Production Management organization. An organization that delivers highly secure, reliable, efficient infrastructure technology operation ...
-
Technical Patching Lead, VP
1 week ago
State Street Bank & Trust Co. Princeton, United StatesWho We are Looking For: · This role will be member of the Global Infrastructure Operations Continuous Service Improvement (CSI) team as part of Production Management organization. An organization that delivers highly secure, reliable, efficient infrastructure technology operation ...
-
Technical Patching Lead, VP
2 weeks ago
State Street Corporation Princeton, United StatesThe right person for this role will have a strong track record of program management experience, the demonstrated ability to deliver multiple high priority projects simultaneously, the ability to drive alignment across teams with competing priorities VP, Mainframe, Technical, Inf ...
-
Computer Scientist Linux Kernel
2 weeks ago
Eclipse Enterprises Heathcote, United StatesAbout the Company · We are Europe's leading platform for cloud services and hosting solutions. We successfully support our clients in their business development. Our company's success is driven by over 4000 employees in multiple countries worldwide, dedicated to fulfilling the ne ...
-
Patching Governance Officer
2 weeks ago
State Street Princeton, United States OTHERWho We are Looking For: · This role will be member of the Global Infrastructure Operations Continuous Service Improvement (CSI) team as part of 24*7*365 Production Management organization. An organization that delivers highly secure, reliable, efficient infrastructure technology ...
-
Project Manager
5 days ago
Rose Paving Old Bridge, United States**Rose Paving LLC**: · **Regional Construction Project Manager - Phoenix, AZ** · **About the Company** · Rose Paving LLC, a multi · - million · - dollar company, leads in providing complete parking lot management solutions to commercial and industrial properties nationwide. Servi ...
-
Senior HRIS Systems Administrator
2 weeks ago
Princeton University Princeton, United StatesOverview The HRIS Senior Systems Administrator works within the Office of Human Resources, HRIS department reporting to the Manager, HRIS. We are seeking a candidate who has broad experience with ERP cloud systems, leading implementations and migrating to cloud products. The role ...
-
Information System Security Officer
5 days ago
Lockheed Martin Moorestown, United States**Job ID**: 665276BR · **Date posted**: Apr. 22, 2024 · **Description**:Lockheed Martin is a Cyber Security pioneer, · partner, innovator and builder. Our amazing employees are on a mission to make a difference in the world and every single day we use our unique skills and experi ...
-
Information Systems Security Officer
2 weeks ago
Lockheed Martin Moorestown, United States**Job ID**: 666160BR · **Date posted**: May. 09, 2024 · **Description**:Lockheed Martin is a Cyber Security pioneer, · partner, innovator and builder. Our amazing employees are on a mission to make a difference in the world and every single day we use our unique skills and experi ...
-
MQ/Kafka Technical Lead
1 week ago
State Street Corporation Princeton, United States Full timeWho we are looking for · The State Street Middleware Application Infrastructure Team supports IBM MQ and Kafka suites across the Bank. The successful candidate will provide technical expertise and leadership to the Messaging Operations Team. The position requires effective commu ...
-
Senior Storage Engineer
1 week ago
Princeton University Princeton, United States· Overview · The Senior Storage and Data Engineer will play a crucial role within the Enterprise Infrastructure Services (EIS) department and is responsible for supporting an ecosystem of large-scale storage clusters shaping the backbone of the University's complex research ende ...
-
Senior HRIS Systems Administrator
2 weeks ago
Princeton University Princeton, NJ, United States· Overview · The HRIS Senior Systems Administrator works within the Office of Human Resources, HRIS department reporting to the Manager, HRIS. We are seeking a candidate who has broad experience with ERP cloud systems, leading implementations and migrating to cloud products. The ...
-
IT Network
1 week ago
NJ CURE Princeton, United StatesREGISTER - CURE Auto Insurance Careers ) · The IT Network & Security Team Lead takes a lead in the day-to-day activities and operations of the IT environment of the organization, ensuring that systems, services, and infrastructure work reliably and securely. The IT Network & Sec ...
-
Senior Windows Systems Administrator
2 weeks ago
SAIC Princeton, United States· SAIC is seeking a Senior Windows Administrator to join our program as a general technologist to support our NOAA GFDL · program in Princeton, NJ serving the NOAA GFDL lab in a highly scientific user and mission driven facility. This individual · would support both projects (60 ...
-
Senior HRIS Systems Administrator
2 weeks ago
Princeton University Princeton, United StatesJob Description · Overview · The HRIS Senior Systems Administrator works within the Office of Human Resources, HRIS department reporting to the Manager, HRIS. We are seeking a candidate who has broad experience with ERP cloud systems, leading implementations and migrating to clou ...
Technical Patching Lead, VP - Princeton, United States - State Street Corporation
Description
Who We are Looking For:This role will be member of the Global Infrastructure Operations Continuous Service Improvement (CSI) team as part of Production Management organization. An organization that delivers highly secure, reliable, efficient infrastructure technology operations services that are focused on the needs of all State Street business. Responsible for delivering continuous improvement across various infrastructure operations towers by supporting the ITIL framework to improve processes, which ultimately improve our business.
We are seeking a highly skilled and experienced individual to join our team as a Database Vulnerability Lead. In this role, you will be responsible for overseeing the identification, assessment, and remediation of vulnerabilities within our organization's database systems. Your expertise will be critical in ensuring the security and integrity of our databases, which are fundamental to our operations.
What you will be responsible for:
The right person for this role will have a strong track record of program management experience, the demonstrated ability to deliver multiple high priority projects simultaneously, the ability to drive alignment across teams with competing priorities and be a strong advocate for risk management.
Job Responsibilities
Salary Range:
$130,000 - $212,500 Annual
The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.
