field_job_employment_type

job_industry

field_job_occupational_field_parents_all

job_organization_name

Senior Systems Analyst The Role This is an opportunity for a highly motivated Senior Systems Analyst to deliver the next generation of customer authorization solutions supporting Fidelity business applications. The ideal candidate brings expertise working as a Systems analyst with an interest in security-focused teams and application development teams.&nbsp; The candidate brings experience analyzing stakeholder needs and translating them into technical requirements for development teams and tracking them to completion.&nbsp; This role encourages new perspectives, creative thinking and rewards individuals who are passionate about technology and problem solving. We value the ability to closely partner with engineers, architects, and product teams across business units. This individual must possess strong communication skills and understands the need to be proactive in engaging teams throughout the development cycle – all while demonstrating a dedicated focus on protecting our customers’ digital experiences at Fidelity. The Expertise and Skills You Bring<ul><li>Excellent communication skills in spoken, written, and presentation form</li><li>Understanding the technology solution end to end. So a level of familiarity with that is needed</li><li>Skilled at communicating technical solutions, risks, and business value to both engineering and non-technical teams, product owners, and business partners</li><li>Ability to perform deep analysis on customer authorization policies for security and application teams</li><li>At least 5 years of experience working with business critical, enterprise-wide applications</li><li>Robust critical thinking skills coupled with a desire to grow, learn and engage with peers in technical and design discussions</li><li>Ability to dig into code and documentation artifacts to interpret business processes and system workflows</li><li>Ability to guide others about new &amp; complex technologies</li><li>Experience with Agile Methodology</li></ul>§ Preferred Experience<ul><li>Experience with coordination of large scale infrastructure deployments.</li><li>Understanding of web application architecture and HTTP servers.</li><li>Understanding of authentication and role-based authorization concepts.&nbsp;</li><li>Understanding of API consumer subscription processes.</li></ul>The Team The Workplace Security Services team is part of the Workplace Customer Protection Center of Excellence and supports protecting thousands of employers and millions of participants. The team develops client-facing cybersecurity applications that help us win and retain institutional clients, as well as Authorization, B2B Security and Single Sign-On infrastructure software components that are the backbone for many of Fidelity’s web business applications including NetBenefits and PlanSponsor WebStation. As a member of the Customer Protection Center of Excellence, you will be joining a culture that is defined by how our team members work. We: <ul><li>Are&nbsp;trusted, collaborative partners&nbsp;who are engaged and transparent</li><li>Are&nbsp;security subject matter experts&nbsp;and continuous learners that are passionate about protecting our customers</li><li>Take&nbsp;personal accountability for quality &amp; timely delivery&nbsp;of our services</li><li>Demonstrate&nbsp;inclusion and empathy&nbsp;where everyone feels safe to be their authentic selves</li><li>Foster&nbsp;associates’ well-being&nbsp;by supporting work-life balance and guilt-free time off</li></ul>Company Overview Fidelity Investments is a privately held company with a mission to strengthen the financial well-being of our clients. We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients’ money. Join Us At Fidelity, you’ll find endless opportunities to build a meaningful career that positively impacts peoples’ lives, including yours. You can take advantage of flexible benefits that support you through every stage of your career, empowering you to thrive at work and at home. Honored with a Glassdoor Employees’ Choice Award, we have been recognized by our employees as a Best Place to Work in 2023. And you don’t need a finance background to succeed at Fidelity—we offer a range of opportunities for learning so you can build the career you’ve always imagined. At Fidelity, our goal is for most people to work flexibly in a way that balances both personal and business needs with time onsite and offsite through what we’re calling “Dynamic Working.” We invite you to&nbsp;Find Your Fidelity&nbsp;at fidelitycareers.com. Fidelity Investments is an equal opportunity employer. We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging. &nbsp;<h4>Company Overview</h4>&nbsp; Fidelity TalentSource is the in-house temporary staffing provider for Fidelity Investments, one of the largest and most diversified global financial services firms in the industry. We welcome individuals from all backgrounds, including technology and customer service, to fill assignments across Fidelity’s U.S.-based regional and investor center locations. If you would like to experience Fidelity’s supportive and collaborative culture while expanding your skill set and developing your professional network, consider a role with Fidelity TalentSource. Apply today at FTSJobs.com(opens in a new tab). We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging. Fidelity TalentSource will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation, please contact our HR team at HR@ ftsjobs.com.<h4>Information about Fidelity Investments</h4>At Fidelity Investments, our customers are at the heart of everything we do. As a privately held company with a rich 75-year history, our mission has remained the same since our founding: to strengthen the financial well-being of our clients. We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients’ money. For information about working at Fidelity, visit FidelityCareers.com(opens in a new tab).Fidelity’s hybrid working model&nbsp;(opens in a new tab)blends the best of both onsite and offsite work experiences. Having the majority of our associates work onsite is important for our business strategy and our culture. We also value the benefits that working offsite offers associates. Most roles listed as Hybrid will require associates to work onsite all business days of every other week in a Fidelity office. This does not apply to roles listed as Remote or Onsite.Fidelity Investments and Fidelity TalentSource are equal opportunity employers.

Fidelity TalentSource

Security Systems Analyst

You Lead the Way. We’ve Got Your Back.With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.Join Team Amex and let's lead the way together.As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers’ digital lives.Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems.American Express offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source.And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development.Find your place in technology on #TeamAmex. American Express is on an exciting third-party transformation led by a high-energy, delivery-focused team delivering third party security diligence oversight, contracting assistance, and monitoring capabilities. As part of Amex Technology Risk and Information Security (IS), Third Party Security is responsible for driving cyber risk reduction at Amex third parties to minimize exposure or disruption across the Amex enterprise and external partners. The team is responsible for creating, developing, and managing the American Express third-party cyber risk strategic initiatives to build a three-year roadmap. This leader will also closely partner with General Counsel key stakeholders to manage and mitigate risk associated with new and renewing third-party engagements. This team will also work closely with Executive Relationship Owners (ERO) Third Party Relationship Managers (TRM), and Business Unit leaders to assist with third party security related risks to reduce third party risk while increasing the visibility of the program and subsequent controls. Other key stakeholders include Technology Risk and Information Security functions (TRIS), Third Party Lifecycle Management (TLM), SSBE / Procurement, and Line of Defense functions.Responsibilities Include:<ul><li>Provide thought-leadership for all TRIS domains delivering an integrated view for the enterprise and partnering to deliver third-party security elements across the TLM lifecycle.</li><li>Partner with the General Counsel Organization (GCO) to assist across the contracting negotiations and product review lifecycles as needed, including by identifying mitigating controls, identifying potential control gaps across TRIS domains, and documenting processes.</li><li>Lead forums with key stakeholders to enhance third party security diligence oversight, contracting, documentation and risk memo processes. &nbsp;</li><li>Identify exciting opportunities for adopting new technologies to solve existing needs and predicting future challenges.</li><li>Evaluate emerging information security developments and help assess the impacts and relevance to American Express to stay ahead of new policies and regulations.</li><li>Partner with GCO to ensure up-to-date protections are in place for data protection and Information Security in third party contracts.</li><li>Assist in the strategic development and maturation of a robust third-party cyber risk operating model that enables the enterprise to develop and implement security solutions and capabilities that are clearly aligned with business, technology, and threat drivers.</li><li>Serve as the IS expert to assist key stakeholders, business unit leaders, and others in understanding the IS processes and requirements for third parties.</li></ul>Required Skills/Experience:<ul><li>Strong communications skills, in both written and verbal form. Highly articulate both verbally and in written form, able to interact at both strategic and tactical levels.</li><li>Strong understanding of IS risk and differences between Technology, IS, and other types of operational risk. Foster collaborative relationships across the enterprise to drive consensus during challenging initiatives.</li><li>Consulting mindset with a desire to educate and drive change to reduce IS risk at third parties is required. Familiarity with industry standard control frameworks, security assurance auditing standards, best practices guidelines, and third-party regulatory requirements, such as ISO27001, NIST CSF, SSAE16/18, CSA, CIS Top 20, OWASP Top 10, FFIEC, etc.</li><li>Ability to make decisions on control effectiveness and/or determine adequacy of compensating controls to mitigate third-party risk and close IS gaps.</li><li>Understanding on the importance and role that contracting plays in the lifecycle of our third parties.</li><li>Knowledge of network architecture, proxy infrastructure, and programs to support network access and enablement, specifically related to how Third Parties connect to the American Express Network and beyond.&nbsp;</li><li>2 years of experience with procurement, contracting, and negotiations processes.</li><li>2 years of Third-Party Lifecycle Management experience. This can include serving as a Third-Party Relationship Manager (TRM), onboarding new third-parties, procuring new engagements, and/or renewing existing contracts at American Express.</li><li>3 years of Control Management and/or Control Testing experience in a large organization.</li><li>4 years of experience in Information Security operational roles with increase of responsibilities and scope at American Express.</li></ul>Educational Requirements:<ul><li>Bachelor’s degree in computer science, computer engineering, or related field; or equivalent experience.</li><li>Information Security Certifications including but not limited to; CISSP; CISM; MCTS; MCP; CCNA.</li></ul>Salary Range: $110,000.00 to $190,000.00 annually + bonus + benefitsThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:<ul><li>Competitive base salaries&nbsp;</li><li>Bonus incentives&nbsp;</li><li>6% Company Match on retirement savings plan&nbsp;</li><li>Free financial coaching and financial well-being support&nbsp;</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits&nbsp;</li><li>Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need&nbsp;</li><li>20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy&nbsp;</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)&nbsp;</li><li>Free and confidential counseling support through our Healthy Minds program&nbsp;</li><li>Career development and training opportunities</li></ul>For a full list of Team Amex benefits, visit our Colleague Benefits Site.American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.US Job Seekers/Employees - Click here to view the “Know Your Rights” poster and the&nbsp;Pay Transparency Policy Statement.If the links do not work, please copy and paste the following URLs in a new browser window:&nbsp;<a href="https://www.dol.gov/agencies/ofccp/posters&nbsp;to" target="_blank">https://www.dol.gov/agencies/ofccp/posters&nbsp;to</a> access the three posters.Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.

American Express

Information Security Manager-Third Party Security

You Lead the Way. We’ve Got Your Back.With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.Join Team Amex and let's lead the way together.As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers’ digital lives.Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems.American Express offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source.And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development.Find your place in technology on #TeamAmex. The Information Security Manager will be responsible for supporting the tracking all open findings, Management Action Plans (MAP), Matters Requiring Attention (MRA), and other regulatory or audit actions across Technology. The successful candidate will collaborate across lines of defense and organizations to manage, track, and report on open actions from audits, reviews, and/or exams to various stakeholders as well as provide consultative services on drafting MSIFs and findings remediation plans in collaboration with Technology SMEs. This position will report into the Director of Technology Findings Management of BISO Relations, Tech Exam, and Issue Management within the Technology Risk &amp; Information Security (TRIS) organization. Key responsibilities include:<ul><li>Collaborate with Internal Audit Group (3rd line of Defense) and Cybersecurity, Technology, &amp; Resiliency Risk Oversight (CTRRO) (2nd line of defense) partners to ingest data timely for report generation to aid in the creation of the mini BURs and Technology BURR materials.</li><li>Streamline the findings data collection and reporting process</li><li>Work across different teams to aggregate multiple systems into one consolidated report for senior leadership review and monthly reporting.</li><li>Develop, implement, and follow-through on the lifecycle components of MSIF and findings originating from 2nd line, 3rd line and external regulatory reviews.</li><li>Track and report status of open findings, Management Action Plans (MAPs), Matters Requiring Attention (MRAs) for Technology across Technology.</li><li>Provide understanding of results, findings, action plans, etc. to include plan activities, actions of coordination, priorities, steps, process, and timeline for monitoring.</li><li>Partner with Tech Risk and Information Security Business Lead (TRIBLs) for full Business Unit interactions.</li><li>Create and maintain an accurate flow of audit and exam information including schedules, results, and statuses.</li></ul>Minimum Qualifications:<ul><li>5+ years of Information Security or Technology Risk Management leadership experience.</li><li>Bachelor’s degree.</li><li>Experience working in highly regulated industries and with complex businesses and technologies.</li><li>Experience developing and reporting on project metrics to provide for various levels of an organization.</li><li>Leadership and team-building skills, with a consistent track record for successful delivery of projects.</li><li>Understanding of information security regulatory landscape.</li></ul>Preferred Qualifications:<ul><li>Security and risk certifications (risk and regulatory – CISA, CISM, CRISC)</li><li>Strong in risk management. Ability to link threats to risk tolerance and control effectiveness measurements.</li><li>Strong writing skills: the ability to frame messages for specific audiences and communicate information about complex issues to collaborators in a clear and easy to understand way.</li><li>Experience in information security disciplines with emphasis on vulnerability management, data protection, infrastructure security, application security, identity and access, incident management and data analytics.</li><li>Experience as an auditor in 2nd, 3rd, or regulatory spaces.</li><li>Experience working with a diverse audience, under tight deadlines, and negotiate successful outcomes to challenging problems.</li><li>Ability to work cross-functionally with Technology and Security teams.</li></ul>Salary Range: $110,000.00 to $190,000.00 annually + bonus + benefitsThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:<ul><li>Competitive base salaries&nbsp;</li><li>Bonus incentives&nbsp;</li><li>6% Company Match on retirement savings plan&nbsp;</li><li>Free financial coaching and financial well-being support&nbsp;</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits&nbsp;</li><li>Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need&nbsp;</li><li>20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy&nbsp;</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)&nbsp;</li><li>Free and confidential counseling support through our Healthy Minds program&nbsp;</li><li>Career development and training opportunities</li></ul>For a full list of Team Amex benefits, visit our Colleague Benefits Site.American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.US Job Seekers/Employees - Click here to view the “Know Your Rights” poster and the&nbsp;Pay Transparency Policy Statement.If the links do not work, please copy and paste the following URLs in a new browser window:&nbsp;<a href="https://www.dol.gov/agencies/ofccp/posters&nbsp;to" target="_blank">https://www.dol.gov/agencies/ofccp/posters&nbsp;to</a> access the three posters.Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.

Information Security Manager - Data Findings & Reporting

You Lead the Way. We’ve Got Your Back.With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.Join Team Amex and let's lead the way together.How we serve our customers is constantly evolving and is a challenge we gladly accept. Whether you’re finding new ways to prevent identity fraud or enabling customers to start a new business, you can work with one of the most valuable data sets in the world to identify insights and actions that can have a meaningful impact on our customers and our business. And, with opportunities to learn from leaders who have defined the course of our industry, you can grow your career and define your own path. Find your place in risk and analytics on #TeamAmex.About the OrganizationGlobal Risk, &amp; Compliance (GRC) group is the independent risk management (Second Line) organization within American Express and is headed by the Chief Risk Officer (CRO).GRC provides oversight as well as governance of risks and ensure the company operates in a safe and sound manner within global regulatory expectations.The Information Security Risk Director is a leadership position within GRC’s Cybersecurity, Technology, and Resiliency Risk Oversight (CTRRO) team. The Director will lead a team of colleagues who execute independent risk management activities for assigned cybersecurity processes as well as lead CTRRO’s data and automation capabilities. The role reports into the Vice President of CTRRO, who reports into the Head of CTRRO and Vendor Risk Oversight, who reports into the EVP of Enterprise Risk Management.Job Responsibilities<ul><li>Lead and nurture a global team of four to six direct reports and maintain performance management for assigned colleagues</li><li>Lead execution of risk assessments, monitoring, and reporting over assigned cybersecurity processes, such as vulnerability management</li><li>Identify and apply thought leadership, best practices, and emerging trends </li><li>Lead gap assessments per laws, regulations, and regulatory guidance as well as industry frameworks and company policies</li><li>Demonstrate high level of curiosity to learn and willingness to present an effective credible challenge</li><li>Identify issues for control failures or gaps and execute issue management until closure </li><li>Develop strong working relationships with all levels of the organization, handle and resolve conflict, to achieve results and enact wide-scale impact across the organization.</li><li>Lead CTRRO's data strategy, including analysis and creation risk metrics (KRIs/KPIs), direction of enhancement of the team's GRC modules and capabilities, query cyber data warehouses, and building risk dashboards and reporting.</li></ul>Job Qualifications<ul><li>BA or BS in Cybersecurity, Information Systems, Computer Science, Data Science, or related field is preferred&nbsp;</li><li>Must have relevant Cybersecurity, technology, or risk management certification (CISSP, CCSP, CEH, CISM, etc.)</li><li>Minimum eight years of experience in relevant fields such as technology audit, risk, cybersecurity, or information technology, with minimum of 3 years leading others&nbsp;</li><li>Prior experience in cybersecurity and information technology is preferred</li><li>Prior experience in creating or directing development of automation capabilities, GRC tools, big data platforms, KRIs/KPIs</li><li>Prior experience in applying cybersecurity concepts and countermeasures in public cloud environments</li><li>Demonstrated expertise in using regulatory and industry cybersecurity frameworks and guidance (CRI Sector Profile, NIST, FFIEC, MITRE ATT&amp;CK) to audit cybersecurity controls</li><li>Knowledge of current cybersecurity industry trends and events and experience in applying evolving trends to audits, assessments, or lessons learned</li><li>Demonstrated proficiency in translating cybersecurity concepts for public cloud environments</li><li>Proven ability to lead projects and initiatives that drive performance&nbsp;</li><li>Demonstrated track record of integrity, effective communication, innovation, and excellence&nbsp;</li><li>Strong written and verbal communication skills to deliver high quality, actionable feedback to client management on control issues and potential solutions to close gaps</li></ul>Salary Range: $170,000.00 to $255,000.00 annually + bonus + equity (if applicable) + benefitsThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:<ul><li>Competitive base salaries&nbsp;</li><li>Bonus incentives&nbsp;</li><li>6% Company Match on retirement savings plan&nbsp;</li><li>Free financial coaching and financial well-being support&nbsp;</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits&nbsp;</li><li>Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need&nbsp;</li><li>20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy&nbsp;</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)&nbsp;</li><li>Free and confidential counseling support through our Healthy Minds program&nbsp;</li><li>Career development and training opportunities</li></ul>For a full list of Team Amex benefits, visit our Colleague Benefits Site.At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.US Job Seekers/Employees - Click here to view the “Know Your Rights” poster and the&nbsp;Pay Transparency Policy Statement.If the links do not work, please copy and paste the following URLs in a new browser window:&nbsp;<a href="https://www.dol.gov/agencies/ofccp/posters&nbsp;to" target="_blank">https://www.dol.gov/agencies/ofccp/posters&nbsp;to</a> access the three posters.

Director-Information Security Risk

You Lead the Way. We’ve Got Your Back.With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.Join Team Amex and let's lead the way together.As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers’ digital lives.Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems.American Express offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source.And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development.Find your place in technology on #TeamAmex. The Amex Third Party Security Strategy &amp; Governance team is responsible for creating, developing, and managing the American Express third-party cyber risk strategic initiatives, third party security roadmap, and defining third party cyber risk requirements based on internal American Express information security standards and regulatory requirements.The team advises internal Business partners on third party cyber threats, works with General Counsel to ensure Information Security contractual rights with third parties, and drives key program initiatives through reporting and metrics.The team also partners with internal and external stakeholders to create innovative technologies that support third party cyber risk monitoring and processes automation.How Will you make an impact in this role?Reporting to the Director of Third-Party Security Strategy &amp; Governance, this role will lead strategic third party cyber risk initiatives, build &amp; maintain a robust third party cyber risk operating model, and drive overall program compliance through reporting on associated cyber risk metrics while providing consultancy services to internal stakeholders.Primary Job Responsibilities<ul><li>Identify and drive opportunities for maturing the Amex third party cyber risk program</li><li>Drive the evolution of key risk metrics to effectively measure third party cyber health across Business portfolios and thousands of Amex third parties </li><li>Manages an evolving reporting framework, generates metrics on third party cyber risk, and delivers meaningful reports to leadership across Business units and market areas, risk management committees, and other internal stakeholders.Evaluates third party adherence to program and identify opportunities and best practices to influence alignment with risk appetite</li><li>Partners with internal stakeholders to develop, improve, &amp; document processes, and ensure that Program meets global regulatory requirements for third party information security risk</li><li>Develops training materials, process flows, and communication plans for socializing efforts to support execution of the Program across the organization</li><li>Documents requirements as needed for the development and improvement of supporting technology products, tools, automation scripts, and internally developed applications</li><li>Assist in managing the third-party cyber risk strategic roadmap and portfolio</li><li>Provides subject matter expertise to internal Business stakeholders</li></ul>Qualifications<ul><li>Proven success at driving thought-provoking strategic initiatives from vision to execution</li><li>Must be able to identify proactive opportunities for improvement &amp; efficiencies and to articulate plans required to reach objectives</li><li>Experience with matrix organizations consisting of multi-functional teams and experience in driving complex, large-scale change efforts</li><li>Well-organized, action-oriented team player with the ability to prioritize daily work, work on multiple initiatives simultaneously, and deliver mature solutions</li><li>Must pay strong attention to detail and demonstrate a natural disposition to diagnose issues, mediate differing opinions, and converge on solutions</li></ul>Technical Skills &amp; Requirements<ul><li>3-5 years of experience in third party cyber risk management with demonstrable knowledge of related topics such as information security risk assessment, common due diligence requirements, and third-party oversight practices</li><li>Familiarity with treatment of third parties as it relates to cyber security oversight, risk ranking determination, and gap remediation processes</li><li>A proven record of accomplishment delivering data driven solutions with a customer-first mindset</li><li>Strong understanding of information security risks and threats, including concepts of vulnerability management, what information or assets are of value to threat actors, and how organizations and data are breached, including through relationships with external third parties</li><li>Familiarity with industry standard control frameworks, security assurance auditing standards, best practices guidelines, and third party regulatory requirements, such as ISO27001, NIST CSF, SSAE16/18, CSA, CIS Top 20, OWASP Top 10, FFIEC, etc.</li><li>Understanding of modern security controls including vulnerability scanning, penetration testing, encryption, anti-malware protection, network security, and DLP</li><li>Must have a good balance of risk management expertise, technical knowledge, and business acumen</li><li>Superior analytical skills – both quantitative and qualitative – coupled with an ability to assess a situation without always having the full picture</li><li>Ability to drive cross functional initiatives with a working knowledge of project management practices and governance</li><li>Must have excellent written and communications skills</li></ul>Salary Range: $85,000.00 to $150,000.00 annually + bonus + benefitsThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:<ul><li>Competitive base salaries&nbsp;</li><li>Bonus incentives&nbsp;</li><li>6% Company Match on retirement savings plan&nbsp;</li><li>Free financial coaching and financial well-being support&nbsp;</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits&nbsp;</li><li>Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need&nbsp;</li><li>20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy&nbsp;</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)&nbsp;</li><li>Free and confidential counseling support through our Healthy Minds program&nbsp;</li><li>Career development and training opportunities</li></ul>For a full list of Team Amex benefits, visit our Colleague Benefits Site.American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.US Job Seekers/Employees - Click here to view the “Know Your Rights” poster and the&nbsp;Pay Transparency Policy Statement.If the links do not work, please copy and paste the following URLs in a new browser window:&nbsp;<a href="https://www.dol.gov/agencies/ofccp/posters&nbsp;to" target="_blank">https://www.dol.gov/agencies/ofccp/posters&nbsp;to</a> access the three posters.Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.

Information Security Analyst-Third Party Security Strategy & Governance

You Lead the Way. We’ve Got Your Back.With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our&nbsp;company values&nbsp;and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.Join Team Amex and let's lead the way together.As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers’ digital lives.&nbsp; Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems.&nbsp; American Express offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source.&nbsp; And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development.&nbsp; Find your place in technology on #TeamAmex.How will you make an impact in this role?We are seeking a highly motivated individual to join Information Security’s - Merger and Acquisition Cyber Integration Team as an Information Security Analyst. In this role you will be supporting information security due diligence assessments, integration coordination, reporting, and other foundational work necessary as part of mergers, acquisitions, joint ventures, and ventures activities.<ul><li>Support M&amp;A Cyber Integration team programs diligence and integration activities</li><li>Communicate and coordinate with internal teams to ensure that project timelines and budgets are met</li><li>Maintain internal documentation library, ensuring processes and other documentation are regularly updated&nbsp;</li><li>Maintain records to allow for historical trending analysis</li><li>Utilize tools and documented processes to support consistency and optimization of M&amp;A Cyber Integration processes and support of efforts to measure and improve information security processes</li><li>Prepares reports on M&amp;A Cyber Integration programs to help develop, track, monitor and report on projects and initiatives</li><li>Maintains internal documentation library, ensuring that process and other documentation is regularly updated to reflect the latest operational processes and requirements</li><li>Assists in developing, implementing and monitoring compliance to AXP and Information security policies, standards and procedures, and other policies and standards as appropriate</li></ul>Minimum Qualifications • &nbsp; &nbsp;Bachelor’s degree in computer science, Information Systems, Business Administration, or other related field preferred (or equivalent work experience) • &nbsp; &nbsp;2+ years of Information Security/ Relevant experience • &nbsp; &nbsp;Strong analytical and problem-solving skills • &nbsp; &nbsp;Excellent organizational and time-management skills • &nbsp; &nbsp;Strong written and verbal communication skills • &nbsp; &nbsp;Experience with reporting&nbsp; Preferred Qualifications • &nbsp; &nbsp;Have CCSP, CISSP, or CSP certifications&nbsp; • &nbsp; &nbsp;Experience with low-code/no-code solutions (such as Qlik)Soft Skills Required • &nbsp; &nbsp;Experience preparing (even presenting) material for senior leadership • &nbsp; &nbsp;Highly driven, curious &amp; independent personality&nbsp;Salary Range: $85,000.00 to $150,000.00 annually + bonus + benefitsThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:<ul><li>Competitive base salaries&nbsp;</li><li>Bonus incentives&nbsp;</li><li>6% Company Match on retirement savings plan&nbsp;</li><li>Free financial coaching and financial well-being support&nbsp;</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits&nbsp;</li><li>Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need&nbsp;</li><li>20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy&nbsp;</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)&nbsp;</li><li>Free and confidential counseling support through our Healthy Minds program&nbsp;</li><li>Career development and training opportunities</li></ul>For a full list of Team Amex benefits, visit our Colleague Benefits Site.American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.US Job Seekers/Employees - Click here to view the “Know Your Rights” poster and the&nbsp;Pay Transparency Policy Statement.If the links do not work, please copy and paste the following URLs in a new browser window:&nbsp;<a href="https://www.dol.gov/agencies/ofccp/posters&nbsp;to" target="_blank">https://www.dol.gov/agencies/ofccp/posters&nbsp;to</a> access the three posters.Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.

Information Security Analyst-M&A Project Management (including Reporting/Documentation)

You Lead the Way. We’ve Got Your Back.With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.Join Team Amex and let's lead the way together.As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers’ digital lives.Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems.American Express offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source.And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development.Find your place in technology on #TeamAmex. How will you make an impact in this role?Technology Risk is looking for a motivated, technologically savvy Technology Risk Analyst who will support the management and governance of technology risk. We are seeking a candidate with a solid grasp of information security, risk management, and technology controls.This position is strategically placed as a center point for the management of Information Technology and Information Security risk and will work closely with collaborators across the organization to ensure the security and compliance of our systems. The ideal candidate will be able to engage and educate our peer groups, internal customers, and senior leadership about substantial risk initiatives and updates. Key responsibilities include:<ul><li>Project leadership and risk resolution: Leads analytics to resolve identified program gaps and maintain or improve the risk and security posture of the company.</li><li>Technology risk assessments: Performs technology risk assessments to identify, evaluate, and aid in the prioritization of potential risks in the organization's technology systems and processes</li><li>Investment decision support: The Technology Risk Analyst is responsible for supporting the investment decision process by executing analytics, identifying trends from risk, threat, and regulatory input channels to determine new information security solutions using standard methodologies.</li><li>Risk management engagement: Collaborates with risk SMEs in the team to develop and implement risk management strategies.</li><li>Strategic recommendations and decision support: Delivers strategic recommendations and assisting decision makers with recommendations applying qualitative and quantitative risk management approaches.</li></ul>Minimum Qualifications<ul><li>Bachelor's degree in Information Security, Computer Science, or related field, or equivalent experience</li><li>A consistent track record in information security and risk management</li><li>Solid grasp of information security principles and methodologies</li><li>Excellent analytical and problem-solving skills</li><li>Outstanding ability to engage collaborators both verbally and visually</li><li>Ability to deliver under time constraints and handle various tasks and projects at the same time</li><li>Tried ability to build credible relationships with peers in a highly interactive working environment</li><li>Competence towards change and eagerness for continuous improvement</li></ul>Preferred Qualifications<ul><li>3 or more years of experience in Technology Risk with an Information Security focus</li><li>Experience in the financial services industry, particularly with large banks</li><li>Professional certifications such as CISSP, CISM, or CRISC</li></ul>Salary Range: $85,000.00 to $150,000.00 annually + bonus + benefitsThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:<ul><li>Competitive base salaries&nbsp;</li><li>Bonus incentives&nbsp;</li><li>6% Company Match on retirement savings plan&nbsp;</li><li>Free financial coaching and financial well-being support&nbsp;</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits&nbsp;</li><li>Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need&nbsp;</li><li>20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy&nbsp;</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)&nbsp;</li><li>Free and confidential counseling support through our Healthy Minds program&nbsp;</li><li>Career development and training opportunities</li></ul>For a full list of Team Amex benefits, visit our Colleague Benefits Site.American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.US Job Seekers/Employees - Click here to view the “Know Your Rights” poster and the&nbsp;Pay Transparency Policy Statement.If the links do not work, please copy and paste the following URLs in a new browser window:&nbsp;<a href="https://www.dol.gov/agencies/ofccp/posters&nbsp;to" target="_blank">https://www.dol.gov/agencies/ofccp/posters&nbsp;to</a> access the three posters.

Information Security Analyst-IS Risk Management

American Express Travel Related Services Company, Inc. seeks Information Security Managers to provide strategic leadership and subject matter expertise, enhancing growth of information security program for Joint Ventures. Lead Pre-Letter of Intent security analysis prior to purchase of a company. Manage pre-purchase investigation and due diligence of target company to be acquired. Leverage open-source intelligence sources, identifying potential integration risks and costs for senior leaders during pre-purchase investigation. Drive engagement with information security vendors to conduct penetration tests, compromise assessments, API security analysis, and information security mobile analysis. Manage remediation of identified security vulnerabilities post-purchase. Drive integration of code compliant with company policy and standards. Drive and collaborate with other technology and information security teams to enhance and mature M&amp;A Cyber Integration processes. Lead development of status reporting for executive leadership. Position requires a Master’s degree in Computer Science, Engineering, Information Systems, or a related STEM field, and 2 years of experience with data analysis, data profiling, and support monitoring and reporting on user access. Experience must include 1 year of experience with each of the following: information security concepts and technologies, including networking, network segmentation, firewalls, IPS\IDS, network analyzers, data loss prevention, security event management, encryption technologies, proxies, and cloud services; supporting infrastructure build out and configuration of performance and stress test support; debugging software components, including identifying, fixing, and verifying remediation of code defects; cybersecurity on public and private cloud security architecture; and Cisco Firewalls, Payment Card Industry (PCI) Data Security Standards, and WAN technologies and protocols. Telecommuting is available up to 2 days per week.Job Location: Phoenix, AZSalary Range:$139,152.00 - $190,000.00 annuallyWe back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:<ul><li>Competitive base salaries&nbsp;</li><li>Bonus incentives&nbsp;</li><li>6% Company Match on retirement savings plan&nbsp;</li><li>Free financial coaching and financial well-being support&nbsp;</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits&nbsp;</li><li>20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy&nbsp;</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)&nbsp;</li><li>Free and confidential counseling support through our Healthy Minds program&nbsp;</li><li>Career development and training opportunities</li></ul>For a full list of Team Amex benefits, visit our&nbsp;Colleague Benefits Site.American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.US Job Seekers/Employees -&nbsp;Click here&nbsp;to view the “Know Your Rights” poster and the&nbsp;Pay Transparency Policy Statement.If the links do not work, please copy and paste the following URLs in a new browser window:&nbsp;<a href="https://www.dol.gov/agencies/ofccp/posters&nbsp;to" target="_blank">https://www.dol.gov/agencies/ofccp/posters&nbsp;to</a> access the three posters.The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider a number of job-related factors, including experience and location.#LI-DNI

Information Security Managers

You Lead the Way. We’ve Got Your Back.With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, you’ll learn and grow as we help you create a career journey that’s unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.At American Express, you’ll be recognized for your contributions, leadership, and impact—every colleague has the opportunity to share in the company’s success. Together, we’ll win as a team, striving to uphold our company values and powerful backing promise to provide the world’s best customer experience every day. And we’ll do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.Join Team Amex and let's lead the way together.As part of our diverse tech team, you can architect, code and ship software that makes us an essential part of our customers’ digital lives.Here, you can work alongside talented engineers in an open, supportive, inclusive environment where your voice is valued, and you make your own decisions on what tech to use to solve challenging problems.American Express offers a range of opportunities to work with the latest technologies and encourages you to back the broader engineering community through open source.And because we understand the importance of keeping your skills fresh and relevant, we give you dedicated time to invest in your professional development.Find your place in technology on #TeamAmex. As part of Amex Technology Risk and Information Security, Third Party Security is responsible for driving cyber risk reduction at Amex third parties to minimize exposure or disruption across the Amex enterprise and external partners. Our organizational objective is to reduce third party risk while increasing the visibility of the program and subsequent controls.The Amex Third Party Security Overwatch and Executive Escalations &amp; Reporting Team is responsible for managing our third-party cyber health program across a large portfolio of third parties, as well as manage reporting and customer concerns to senior leaders across the Blue Box.Primary Job Responsibilities:<ul><li>Support an evolving reporting framework, generates metrics on third party cyber risk, and delivers meaningful reports to leadership across Business units and market areas, risk management committees, and other internal collaborators</li><li>Evaluates third party adherence to program and find opportunities and standard methodologies to influence alignment with risk appetite</li><li>Support development of training materials, process flows, and communication plans for socializing efforts to support execution of the Program across the organization</li><li>Support development of materials for executive audiences </li><li>Identify and drive opportunities for maturing the Amex third party cyber risk program</li><li>Support the evolution of key risk metrics to effectively evaluate third party cyber health across Business portfolios and thousands of Amex third parties </li><li>Support the Third-Party Security products including data management, validation, enhancement support, and support to collaborators</li><li>Advises leadership and business partners on technical cyber risk as it relates to third parties </li></ul>Qualifications &amp; Required Skills<ul><li>Demonstrated ability to analyze datasets and produce metrics and standardized reporting</li><li>Knowledge &amp; understanding of cyber security threats, risks, and vulnerabilities.</li><li>Understanding of what information or assets are of value to threat actors and how organizations are breached.</li><li>Known to work at driving thought-provoking central initiatives from vision to execution</li><li>Must be able to identify proactive opportunities for improvement &amp; efficiencies and to articulate plans required to reach objectives</li><li>Experience with matrix organizations consisting of multi-functional teams and experience in driving complex, large-scale change efforts</li><li>Must pay strong attention to detail and demonstrate a natural disposition to diagnose issues, mediate differing opinions, and converge on solutions</li><li>Must have strong verbal and written communication skills, interpersonal collaborative skills, and the ability to communicate security and risk-related concepts to technical and non-technical audiences across various levels including executive leadership</li><li>Proven problem solver with ability to provide in-depth analysis of complex problems, manage risk and make quick decisions.</li><li>Must possess the ability to multitask, prioritize, and manage time effectively.</li></ul>Preferred Skills<ul><li>Experience with Cyber Attack Surface Management solutions, specifically BitSight and Security Scorecard</li><li>Familiarity with industry standard control frameworks, security assurance auditing standards, guidelines, and third-party regulatory requirements, such as ISO27001, NIST CSF, SSAE16/18, CSA, CIS Top 20, OWASP Top 10, FFIEC, etc.</li></ul>Salary Range: $85,000.00 to $150,000.00 annually + bonus + benefitsThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we’ll consider your location, experience, and other job-related factors.We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:<ul><li>Competitive base salaries&nbsp;</li><li>Bonus incentives&nbsp;</li><li>6% Company Match on retirement savings plan&nbsp;</li><li>Free financial coaching and financial well-being support&nbsp;</li><li>Comprehensive medical, dental, vision, life insurance, and disability benefits&nbsp;</li><li>Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need&nbsp;</li><li>20+ weeks paid parental leave for all parents, regardless of gender, offered for pregnancy, adoption or surrogacy&nbsp;</li><li>Free access to global on-site wellness centers staffed with nurses and doctors (depending on location)&nbsp;</li><li>Free and confidential counseling support through our Healthy Minds program&nbsp;</li><li>Career development and training opportunities</li></ul>For a full list of Team Amex benefits, visit our Colleague Benefits Site.American Express is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability status, age, or any other status protected by law.We back our colleagues with the support they need to thrive, professionally and personally. That's why we have Amex Flex, our enterprise working model that provides greater flexibility to colleagues while ensuring we preserve the important aspects of our unique in-person culture. Depending on role and business needs, colleagues will either work onsite, in a hybrid model (combination of in-office and virtual days) or fully virtually.US Job Seekers/Employees - Click here to view the “Know Your Rights” poster and the&nbsp;Pay Transparency Policy Statement.If the links do not work, please copy and paste the following URLs in a new browser window:&nbsp;<a href="https://www.dol.gov/agencies/ofccp/posters&nbsp;to" target="_blank">https://www.dol.gov/agencies/ofccp/posters&nbsp;to</a> access the three posters.Employment eligibility to work with American Express in the U.S. is required as the company will not pursue visa sponsorship for these positions.

Information Security Analyst-Third Party Security

Fidelity TalentSource is your destination for discovering your next temporary role at Fidelity Investments. We are currently sourcing for a Senior SaaS Security Specialist to work in&nbsp;Boston, Mass.The role of Principal SaaS Security specialist is to support key tools and data related activities as part of Vendor security platform. This role is within the Enterprise Cybersecurity’s Vendor Cybersecurity Team that is part of External Defense Product Area. This role offers significant exposure to Enterprise Systems &amp; Architecture (both on-prem &amp; cloud), opportunities to evaluate, implement &amp; manage best-in-class Third Party Risk Management tools and technologies. The role provides great exposure towards developing expertise into Cyber Systems &amp; Software engineering and industry-leading Cybersecurity practices.<h4>The Team</h4>Enterprise Cybersecurity (ECS) sets Fidelity’s strategy, policy, and standards for the security of the enterprise cyberspace. We focus on threat reduction, vulnerability elimination, deterrence, international engagement, incident response, resiliency, and recovery policies and activities.<h4>The Expertise You Have</h4><ul><li>Bachelor's degree in computer science or equivalent technology field. </li><li>5+ years’ experience on Cloud &amp; SaaS Security is required </li><li>Expertise in Cybersecurity tools and processes in one or more of the following areas: Data Security, IAM and Application Security is required </li><li>Exposure to Security Posture Management on SaaS/Cloud/Data/Applications is highly desired. </li><li>Background in DevOps processes, API integration etc. is highly desired. </li><li>Knowledge of third-party governance, risk &amp; compliance tools, processes and systems is highly desired. </li></ul><h4>The Skills You Bring</h4><ul><li>Programming knowledge in Python, or equivalent scripting </li><li>Experience with DevOps is a plus </li><li>Experience with creating and maintaining Data Pipelines </li><li>Experience with cloud computing (AWS / Azure) </li><li>Experience using and development Business Intelligence is desired </li></ul><h4>The Value You Deliver</h4>Daily news stories describe cyber breaches and the ways that companies and individuals are victimized. To protect our customers and Fidelity's reputation, it is imperative that the firm and all associates take protective steps. The Software engineering chapter within Enterprise Cybersecurity does just that – working every day to ensure that Fidelity and our customers stay safe.The hourly pay rate range for this position is $70-75&nbsp;per hour. &nbsp; Placement in the range will vary based on job responsibilities and scope, geographic location, candidate’s relevant experience, and other factors.<h4>Company Overview</h4>Fidelity TalentSource is the in-house temporary staffing provider for Fidelity Investments, one of the largest and most diversified global financial services firms in the industry. We welcome individuals from all backgrounds, including technology and customer service, to fill assignments across Fidelity’s U.S.-based regional and investor center locations. If you would like to experience Fidelity’s supportive and collaborative culture while expanding your skill set and developing your professional network, consider a role with Fidelity TalentSource. Apply today at&nbsp;FTSJobs.com.We believe that the most effective way to attract, develop and retain a diverse workforce is to build an enduring culture of inclusion and belonging. Fidelity TalentSource will reasonably accommodate applicants with disabilities who need adjustments to participate in the application or interview process. To initiate a request for an accommodation, please contact our HR team at HR@ ftsjobs.com.<h4>Information about Fidelity investments</h4>At Fidelity Investments, our customers are at the heart of everything we do. As a privately held company with a rich 75-year history, our mission has remained the same since our founding: to strengthen the financial well-being of our clients. We help people invest and plan for their future. We assist companies and non-profit organizations in delivering benefits to their employees. And we provide institutions and independent advisors with investment and technology solutions to help invest their own clients’ money. For information about working at Fidelity, visit FidelityCareers.com.Fidelity TalentSource’s working model blends the best of working offsite with maximizing time together in person to meet associate and business needs. Currently, most hybrid roles require associates to work onsite all business days of one assigned week per four-week period (beginning in September 2024, the requirement will be two full assigned weeks).Fidelity Investments and Fidelity TalentSource are equal opportunity employers.

19 Public Services Full Time Jobs