Information Security Engineer

Through our dedicated associates, Conduent delivers mission-critical services and solutions on behalf of Fortune 100 companies and over 500 governments – creating exceptional outcomes for our clients and the millions of people who count on them.

You have an opportunity to personally thrive, make a difference and be part of a culture where individuality is noticed and valued every day.

The ETS Regulatory Compliance team is seeking a Security & Remediation Manager who will ensure we provide the technology and business teams with world class governance, regulatory adherence and compliance with our security policies across all systems and environments. The ETS Regulatory Compliance team is charged with cultivating an organization that drives ongoing PCI certifications and attestations through IT security controls and policy compliance. This Security & Remediation Manager will partner and engage with our technology and business teams, build long-term relationships both internally and externally, and support large-scale compliance and certifications which align with our security posture.

What You’ll Do

• Be an integral part of a team of PCI Compliance experts.
• Be part of a team culture of continuous improvement, mentoring and learning, data driven decisions, and accountability for delivery of key metrics and deliverables.
• Partner and collaborate with business and technology teams to develop actionable solutions for security compliance, certifications, and governance.
• Play a key role in the creation, revisions and ongoing compliance processes which support our security policies and controls to meet Payment Card Industry Data Security Standard (PCI DSS) requirements.
• Coordinate/facilitate assigned technical resources to remediate PCI findings during an assessment including but not limited to Patching, Logging, Firewall reviews, IDS, Penetration Testing, End-of-Life, End-of-Support, Antivirus, File Integrity Management, and Vulnerability Management.
• Maintain detailed PCI remediation plans, schedules, resource plans, and reporting as required using Excel, SharePoint, and other Microsoft programs.
• Develop a thorough understanding of the assignment subject matter and demonstrate depth of business knowledge throughout the course of the review.
• Demonstrate a value-added approach to assurance by providing practical, relevant, and cost-effective recommendations which assist senior management in achieving primary business objectives.
• Maintain a flexible approach to ensure that scope alterations can be adopted when other high-risk areas are identified during the review.
• Provide training/guidance to new coworkers and other project team players on industry security best practices and PCI-DSS standards
• Expand into other security and compliance areas such as HIPAA, HITRUST, and SOC.

Who You Are

• Hands on experience with PCI Compliance (e.g. Data Security Standards, auditing, penetration and application testing, certifications, and attestations)
• Knowledge of current security controls and landscape including traditional data center and cloud computing platforms
• Knowledge of advanced excel skills
• Strong people skills to manage tasks through influence
• Project management skills including but not limited to any common project management frameworks (Agile, SAFe, SCRUM, Prince2, IPMA, PMI)
• Ability to effectively prioritize and execute tasks in a high-pressure environment
• Demonstrated strong interpersonal skills and an ability to work with a sense of urgency
• Self-motivated with a demonstrated ability to work autonomously and manage a wide variety of work streams simultaneously, under deadline
• Experience evaluating current compliance, identifying gaps, determining remediation efforts for assessments against the Payment Card Industry Data Security Standard (PCI DSS)
• Support business partners in evaluating alignment & maintaining compliance throughout the year
• The ability to identify security solutions and processes in support of PCI DSS compliance (e.g. vulnerability management, patching, SIEM, FIM)
• Knowledge of infrastructure security assessments (network devices/servers/databases) against industry accepted hardening standards (CIS, NIST)
• Experience recommending and designing technical solutions to security issues
• Experienced in, and able to formulate, the effectiveness and benefits of security compliance and certification initiatives in the context of overall business risk mitigation, security posture, and the company’s operational objectives
• Demonstrated knowledge of security industry standards, privacy regulations, compliance testing and leading practices (e.g. PCI, HIPAA, HITRUST, NIST, GDPR)
• Experience working in security and compliance teams, and ability to present to senior management and large groups
• Must be able to simplify security and technical concepts for laypersons within our business and technology teams
• Exposure to security systems and process with a background in Fintech, Transportation, Healthcare industries a plus
• Minimum five (5) years of information security experience, auditing and/or compliance in increasing responsible roles required
• Prior experience as a PCI certified QSA or ISA a plus
• Current Professional certification in information security or compliance (e.g., CISSP, CISM, or CISA) a plus

The Colorado Equal Pay for Equal Work Act requires employers to disclose the following information. If the successful applicant will be required to perform work from a physical site outside Colorado, the following information may not apply. Actual salaries will vary and may be above or below the range based on various factors including but not limited to location, experience, and performance. In addition to base pay, this position, based on business need, may be eligible for a bonus or incentive. In addition, Conduent provides a variety of benefits to employees including health insurance coverage, voluntary dental and vision programs, life and disability insurance, a retirement savings plan, paid holidays, and paid time off (PTO) or vacation or sick time. For Colorado considerations only the estimated salary range is $96.250 minimum - $ 125.0midpoint.

Conduent is an Equal Opportunity Employer and considers applicants for all positions without regard to race, color, creed, religion, ancestry, national origin, age, gender identity, gender expression, sex/gender, marital status, sexual orientation, physical or mental disability, medical condition, use of a guide dog or service animal, military/veteran status, citizenship status, basis of genetic information, or any other group protected by law.

People with disabilities who need a reasonable accommodation to apply for or compete for employment with Conduent may request such accommodation(s) by clicking on the following link, completing the accommodation request form, and submitting the request by using the "Submit" button at the bottom of the form. For those using Google Chrome or Mozilla Firefox please download the form first: click here to access or download the form. You may also click here to access Conduent’s ADAAA Accommodation Policy.

The Colorado Equal Pay for Equal Work Act requires employers to disclose the following information. If the successful applicant will be required to perform work from a physical site outside Colorado, the following information may not apply. Actual salaries will vary and may be above or below the range based on various factors including but not limited to location, experience, and performance. In addition to base pay, this position, based on business need, may be eligible for a bonus or incentive. In addition, Conduent provides a variety of benefits to employees including health insurance coverage, voluntary dental and vision programs, life and disability insurance, a retirement savings plan, paid holidays, and paid time off (PTO) or vacation or sick time.

At Conduent, we value the health and safety of our associates, their families and our community. Under our current protocols, we do not require vaccination against COVID for most of our US jobs, but may require you to provide your COVID vaccination status, where legally permissible.