PAM Specialist

Wipro•Denver, CO

3d•Hybrid

About The Position

Wipro Limited is seeking a PAM Specialist to conduct an IT Operations Privileged Access Management (PAM) Audit. This role will focus on access governance, operational controls, monitoring, and compliance. The specialist will be responsible for generating a report that includes key controls such as least privilege, MFA, privileged session monitoring, password vaulting, periodic access reviews, and audit logging. The role involves bringing best practices to the rollout for Governance & Policy, Privileged Account Inventory, Access Provisioning & Reviews, Authentication & Elevation Controls, Credential Vault & Secrets Management, Session Monitoring & Logging, Operational Controls, and Compliance & Reporting. This includes regular audits, compliance reviews, and remediation activities.

Requirements

CyberArk Privileged Access Manager
8-10 Years of experience
Experience in doing security assessment against NIST Frameworks, SANS, CIS, etc.
Experience around ITIL or Key process-oriented domains like incident management, configuration management, change management, problem management etc.
Ability to design and develop enterprise cyber security strategy and architecture.
Ability to understand security requirements by evaluating business strategies and conducting system security vulnerability and risk analyses.
Ability to identify risks associated with business processes, operations, information security programs and technology projects.
Ability to identify and communicate current and emerging security threats and design security architecture elements to mitigate threats as they emerge.
Ability to identify security design gaps in existing and proposed architectures and recommend changes or enhancements.
Ability to provide product best fit analysis to ensure end to end security covering different faucets of architecture e.g. Layered security, Zoning, Integration aspects, API, Endpoint security, Data security, Compliance and regulations.
Ability to provide support during technical deployment, configuration, integration and administration of security technologies.
Ability to provide assistance for disaster recovery in the event of any security breaches, attacks, intrusions and unusual, unauthorized or illegal activity.
Ability to provide solution of RFPs received from clients and ensure overall design assurance.
Ability to develop a direction to manage the portfolio of to-be-solutions including systems, shared infrastructure services, applications, hardware related to cyber risk security in order to better match business outcome objectives.
Ability to analyze technology environment, enterprise specifics, client requirements to set a collaboration design framework/ architecture.
Ability to create complete RFPs depending on the client’s need with particular standards and technology stacks.
Ability to provide technical leadership to the design, development and implementation of custom solutions through thoughtful use of modern technology.
Ability to define and understand current state solutions and identify improvements, options & tradeoffs to define target state solutions.
Ability to clearly articulate and sell architectural targets, recommendations and reusable patterns and accordingly propose investment roadmaps.
Ability to evaluate and recommend solutions to integrate with overall technology ecosystem.
Ability to track industry and application trends and relates these to planning current and future IT needs.
Ability to liaise with stakeholders in relation to cyber security issues and provide timely support and future recommendations.
Ability to provide assistance in maintaining an information security risk register and help with internal and external audits relating to information security.
Ability to support audit of security best practices and implementation of security principles across the organization, to meet business goals along with customer and regulatory requirements.
Ability to assist with the creation, maintenance and delivery of cyber security awareness training to team members and customers.
Ability to provide training to employees on issues such as spam and unwanted or malicious emails.

Responsibilities

Design and develop enterprise cyber security strategy and architecture, including understanding security requirements, conducting vulnerability and risk analyses, identifying risks associated with business processes, operations, and technology projects, and identifying and communicating security threats.
Design security architecture elements to mitigate emerging threats and identify security design gaps in existing and proposed architectures, recommending changes or enhancements.
Provide product best fit analysis to ensure end-to-end security covering different facets of architecture (e.g., Layered security, Zoning, Integration aspects, API, Endpoint security, Data security, Compliance and regulations).
Demonstrate experience in doing security assessment against NIST Frameworks, SANS, CIS, etc.
Provide support during technical deployment, configuration, integration, and administration of security technologies.
Demonstrate experience around ITIL or Key process-oriented domains like incident management, configuration management, change management, problem management etc.
Provide assistance for disaster recovery in the event of any security breaches, attacks, intrusions, and unusual, unauthorized, or illegal activity.
Provide solutions for RFPs received from clients and ensure overall design assurance.
Develop a direction to manage the portfolio of to-be-solutions including systems, shared infrastructure services, applications, and hardware related to cyber risk security to better match business outcome objectives.
Analyze technology environment, enterprise specifics, and client requirements to set a collaboration design framework/architecture.
Create complete RFPs depending on the client’s need with particular standards and technology stacks.
Provide technical leadership to the design, development, and implementation of custom solutions through thoughtful use of modern technology.
Define and understand current state solutions and identify improvements, options & tradeoffs to define target state solutions.
Clearly articulate and sell architectural targets, recommendations, and reusable patterns and accordingly propose investment roadmaps.
Evaluate and recommend solutions to integrate with the overall technology ecosystem.
Track industry and application trends and relate these to planning current and future IT needs.
Liaise with stakeholders in relation to cyber security issues and provide timely support and future recommendations.
Provide assistance in maintaining an information security risk register and help with internal and external audits relating to information security.
Support audit of security best practices and implementation of security principles across the organization, to meet business goals along with customer and regulatory requirements.
Assist with the creation, maintenance, and delivery of cyber security awareness training to team members and customers.
Provide training to employees on issues such as spam and unwanted or malicious emails.