IT Security Administrator

Confluence is a global technology solutions provider delivering innovative products to the worldwide money management industry, to meet asset managers and service providers performance, reporting, analytics, risk and data needs. With recent acquisitions, Confluence offers its clients a broader range of data-driven managed investment solutions including post-trade regulatory and shareholder reporting, performance and attribution, portfolio analytics, and asset data services and data management, delivering a full technology suite to the front, middle and back office. Headquartered in Pittsburgh, PA, Confluence services over 400 clients in 39 countries, with locations across Europe, North America, South Africa, Australia and Asia.

Our clients count on us to hire people who have the confidence to question the status-quo, the insight to find new approaches to old problems and the persistence to push ideas and transform solutions. Confluence is a global leader in data-driven managed investment solutions. Eight of the top 10 global service providers license Confluence products and all of the top 10 global asset managers have business processes automated using Confluence products. If you think differently about technology and are motivated by what others see as impossible, we want to meet you.

Purpose

As a member of the Confluence Information Technology Team, and working closely with the Information Security team, the IT Security Administrator is responsible for implementation, maintenance and operation of the IT security systems and controls in accordance with Information Security policies and compliance requirements. International travel may be a requirement of this role.

Essential Responsibilities

• Plan, implement, evaluate, and maintain systems and procedures to safeguard internal information systems, network, databases, and web-based security.
• Working effectively with IT, Development and Compliance to ensure information security and certification objectives are met for both internal and client facing systems/applications.
• Assist in the development, implementation, and maintenance of information security, including access management, vulnerability assessments, penetration testing, infrastructure, regulatory compliance, monitoring, auditing, and alerting/reporting for both internal and third-party hosted solutions.
• Identify and address security vulnerabilities within Confluence’s information assets, information processing systems and networking environment.
• Liaising directly with clients on technical information security questions and education
• Working with the IT and Information Security teams to ensure systems are audited, pen-tested and benchmarked properly in relation to information security policies and procedures.
• Working with Compliance to assist in the completion of internal and external policy, security, and compliance questionnaires and help maintain our standard information security response pack.
• Working with Compliance to report on security incidents, potential incidents, or other technical security risks.
• Assist in the reporting, investigating, and resolving security incidents, including alerts from information security tools and various security monitoring platforms.
• Analyse business needs, stay current with security trends/methods/techniques, and oversee security architecture, administration, and policy planning to pre-emptively eliminate the possibility of security breaches.
• Assist in the production and development of IT and Security-related policies and procedures ensuring critical systems documentation is maintained/reviewed at appropriate levels and at designated review times, and ultimately ensuring organizational understanding and adherence.
• Liaise with external security consultants and vendors.
• Assist with annual reporting activities concerning respective Confluence services.
• Aid in the development of regular metric/KPI reports

• Support in the implementation of new security tools and requirements.
• Educate and communicate security requirements and procedures to the rest of the team.

Qualifications

• Minimum of five years in similar Information Security or IT System Administration role with a security focus.
• Information security certifications such as CCNA, CompTIA+, CCSP, or GCIH are advantageous.

• Knowledge and experience of internal information security controls based on ISO/IEC 27001 and SOC1 Information Security standards.

Essential Skills

You will already be in a security administration role and will have experience in enterprise architecture as well as information security standards such as ISO27001 and SOC1. You should have a passion for IT security and best practice and be able to communicate at all levels to ensure your message is understood. Other essential skills include:

• Technical background in managing information security solutions.
• Experience implementing and/or managing the following technologies will be an asset:
  • SIEM and log aggregation systems
  • IPS/IDS and WAF solutions
  • Network Access Control solutions
  • DLP, CASB, NGFW solutions
  • E-mail and DNS Security (DNSSEC, SPF, DKIM, DMARC, etc.)
  • Public Cloud Infrastructure (Amazon AWS, Microsoft Azure)
  • SAML2 and Oauth2 authentication protocols
• Understanding of encryption and encryption key management.
• Understanding of security best practices in a mixed Windows/Linux SaaS environment
• Outstanding verbal and written communication skills with the ability to flex communication styles based on the audience, including internal and external stakeholders.
• Strong analytical and organisational skills with the ability to work independently, as well and as part of a wider team, with minimal supervision.
• Deadline driven with the ability to be flexible and adapt as required.
• Critical thinker with a demonstrated knack for understanding and addressing needs and issues across all levels of the enterprise.
• Understanding of the impact of risk, compliance and information security topics on business processes, technology infrastructure and software development.
• Able to negotiate and justify compromises between risk, business, and technology needs.
• Understanding of the technology landscape, including on-prem, off-site and hosted infrastructure/solutions.
• Ability to develop and maintain positive working relationships with a wide audience, from technical staff to management, clients and co-workers.
• Ability to multitask, strong attention to detail, self-motivated willingness to take initiative and ownership.
• Collaborative working style that values team success over personal accomplishments.
• Proficient with Microsoft Office Suite (e.g., Outlook, Word, Excel, PowerPoint).
• Demonstrated ability to work in a global, multicultural environment where diplomacy, professionalism and a passion for diversity are paramount.
• Act in accordance with and is an ambassador of our company values – Integrity, Imagination, Discipline and Service.
• Ability to commit to occasional international travel.

We are committed to providing equal opportunities regardless of age, gender, religion or ethnic origin and we give full and fair consideration to the employment and career development of disabled persons, commensurate with their aptitudes and abilities.

Confluence Privacy Statement

wSRU2AxMXM