Job Classification:

Technology - Information Security

CSOC Threat & Vulnerability Management Team is seeking a Cyber Security Operations Specialist in Policy Compliance with subject matter expertise in Server operating systems. Minimum 2-5 years of experience with exposure to CIS Benchmarks and National Institute of Standards and Technology (NIST) cybersecurity configuration standards. Strong knowledge of industry standards and experience with Qualys Policy Compliance or a comparable platform, is a strong plus for position.

Role will provide technical expertise primarily on Server operating systems and working with Server Operation Teams to maintain or develop new secure configuration standards. Knowledge of Web Server configuration is also plus.

Role requires strong knowledge of Linux or Windows server operating systems while taking ownership of tasks and workstreams for Policy Compliance implementations in Qualys for new OSs, updates to existing policies and analysis and diagnosis of issues related to ISO requirements for configuration. Role will be an active contributor to building and developing our program.

Requirements:

• Subject Matter Expert in Linux or Windows Operating systems to understand and conduct baseline compliance checks.

• Provide Subject Matter Expert (SME) guidance to technical and non-technical teams in support of NIST standards and CIS benchmarks.

• Demonstrated understanding of operating systems, configurations, and OS defaults.

• Work with technical teams to develop new policy standards and enhance existing policies. Continually review and enhance security policies and procedures.

• Maintain IT control artifacts and exceptions or suppressions following change control processes.

• Implement security improvements by assessing current situation, evaluating trends, and anticipating requirements.

• Develop technical and non-technical solutions to help mitigate security vulnerabilities.

• Development, maintenance, and continual improvement of the vulnerability management platform, processes, and technical assessment support. Revise processes and procedures, metrics, and documentation that continue to improve the vulnerability management capability.

• Operational and administrative support of the compliance solution ensuring data integrity and accuracy.

• Experience with Compliance Frameworks such as SOX, SOC, ISO, PCI, NIST, CIS and industry best practices.

• Supporting various compliance audits including, SOC, SOX, and ISO.

Additional Skills and Abilities

• Managing and supporting vulnerability and compliance solutions.

• Experience with infrastructure systems and security assessments.

• Experience in information security, compliance, and risk management.

• Ability to identifies opportunities for process and technical security improvements in the environment.

• Excellent communication, presentation, writing and documentation skills.

• Manage internal documentation and process activities.

• Follow-up and attention to detail.

• Good deductive reasoning skills, creative thinker.

• Analytical and detail-oriented individuals must have a passion for information security, creativity to identify gaps and initiative to find the appropriate solutions to fill needs.

Note: Prudential is required by state specific laws to include the salary range for this role when hiring a resident in applicable locations. The salary range for this role is from $93,200.00 to $138,600.00. Specific pricing for the role may vary within the above range based on many factors including geographic location, candidate experience, and skills. Roles may also be eligible for additional compensation and/or benefits. Eligibility to participate in a discretionary annual incentive program is subject to the rules governing the program, whereby an award, if any, depends on various factors including, without limitation, individual and organizational performance. In addition, employees are eligible for standard benefits package including paid time off, medical, dental and retirement.