Job Description

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

Role and Responsibilities

• Develop and maintain security baselines configurations for systems, applications, and network devices.
• Ensure all baselines and process comply with industry standards, best practices, and regulatory requirements.
• Maintain accurate and comprehensive documentation of security baselines, policies, and procedures.
• Communicate material changes to internal standards to stakeholders, facilitate risk evaluations and exception handling to deviations from the policies, standards and regulatory requirements
• Work closely with metrics team ensuring compliance are accurately published on time.
• Work closely with Group Technology and other Business Units to ensure security baselines are implemented in timely manner.
• Participate in internal and external audits to verify compliance with security baselines and address any identified gaps.
• Process automation to improve and streamline end-to-end security configuration process from creation to assurance.

Qualifications

• 5 years technical experience in Vulnerability Management including and not limited to asset management, vulnerability tools such as Qualys, Tenable, Rapid7, with focus on security baseline development and compliance.
• Experience with common cybersecurity frameworks and standards such as NIST, ISO/IEC 27001, and CIS Controls.
• Experience in administration of baseline configuration scanning tools (Qualys, Rapid7, Nessus)
• Programming skills i.e. python.
• IT Security Operations Management experience would be an advantage
• Degree in Computer Science, Information Technology or Information Systems

Mandatory skills

• Define, implement and manage security baseline configurations
• Experience in Vulnerability Management tools

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.

Job Requirements