Jobs Career Advice Signup
X

Send this job to a friend

X

Did you notice an error or suspect this job is scam? Tell us.

  • Posted: May 13, 2022
    Deadline: Not specified
    • @gmail.com
    • @yahoo.com
    • @outlook.com
  • Never pay for any CBT, test or assessment as part of any recruitment process. When in doubt, contact us

    PATH is an international organization that drives transformative innovation to save lives and improve health, especially among women and children. We accelerate innovation across five platforms-vaccines, drugs, diagnostics, devices, and system and service innovations-that harness our entrepreneurial insight, scientific and public health expertise, and passio...
    Read more about this company

     

    Technical Security Architect, Digital Square

    Responsibilities:

    • In collaboration with CoDE leadership, develop the security strategy with regards to data, information and digital information systems and cyber security.
    • Lead in the development of policies, processes and guidelines on Data Privacy & Security, InfoSec, DevSecOps and CyberSec for all digital and information systems projects across the center and its initiatives and projects.
    • In collaboration with the CoDE global technical team, TAP, LL and D4A teams, ensure that proposed and existing systems’ code and architecture are in compliance with current policies.
    • Provide technical input and support to data and information systems during the design phase as well as for security assessments and audits (code, application, infrastructure) across implementation, project and software development life cycles.
    • Provide technical and capacity building support and contribute to the socialization of security best practices with implementing partners, communities, and other stakeholders.
    • Revisit and strengthen strategy, policies, processes and guidelines on a regular basis to address new threats or systems added or relevant industry best practices.
    • In collaboration with the partners, provide advice and assist in the detection and resolution of any security incidents or detected Common Vulnerabilities or Exposures (CVEs).
    • In collaboration with consortia of partners:
    • provide recommendations to host country governments, donors, and other stakeholders, on tools to use and/or implement for the various needs identified in alignment with the recommended security strategy and policies, e.g.:
      • Intrusion detection system (IDS)
      • Intrusion prevention system (IPS)
      • Data Loss prevention (DLP)
      • Static/Dynamic/Interactive Application Security Testing (SAST/ DAST/ IAST)
      • Software composition Analysis (SCA)
      • Penetration testing (PEN)
      • Anti-distributed denial of service (DDoS)
    • In collaboration with the digital health Global Goods technical team and upon request, review source code and architecture of the Global Goods and perform security assessments and audits.
    • Create guidance documents, toolkits, and/or webinars to support teams in conducting data security audits for countries, projects, and donor driven initiatives.
    • Model a data security audit and lead development of the implementation process for these as required.

    Required Experience

    • Advanced degree in data, information systems, cyber security health informatics or other related field.
    • At least 7 years of progressive experience as a security architect in a multi-national organization, preferably non-for-profit.
    • Demonstrated experience in developing best practice on systems security documents including guidelines, standard operating procedures, and security assessment reports.
    • 3-5 years of experience as a security engineer or analyst implementing security tools, performing assessments and audits of integrated information systems, including locally hosted, hybrid or cloud-based systems and managing incidents (including fixing issues, applying patches, tracking incidents, preparing reports, etc.).
    • Demonstrated experience designing, and implementing security strategy, policies, processes, and guidelines.
    • Experience with security-by-design principles applied to software development across the project and software lifecycle.
    • Ability and willingness to travel 20% of the time within the region and be available for international travel to participate in global and regional conferences and meetings as requested.

     Preferred skills and experience:

    • Previous engagement with senior level stakeholders such as donors and senior government staff (especially in the health domain) to discuss data security strategies, tools and approaches.
    • Previous experience in working with and in open-source communities and providing security guidance.
    • Certified CSSA or CISSP-ISSAP.
    • Knowledge of public health, social sciences, epidemiology, pediatric health, international development desired.

    Method of Application

    Interested and qualified? Go to PATH on path.silkroad.com to apply

    Build your CV for free. Download in different templates.

  • Send your application

    View All Vacancies at PATH Back To Home

Subscribe to Job Alert

 

Join our happy subscribers

 
 
Send your application through

GmailGmail YahoomailYahoomail