Security Baseline Deviation Specialist 100% (f/m/d)

Baseline Deviation Specialist keeps the Security Baseline Configuration framework accurate and working end to end: from helping the technology teams to establish the baseline requirements, to ensuring the scan and reporting data is accurate and proves compliance, and then following-up on deviations. This is a general, long-term role.

About Julius Baer Technology

• At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth.
• Let’s shape the future of wealth management together.
• Is this not quite what you are looking for?

Responsibilities

• Initial scope starts with overseeing expansion to onboard new technologies to Hardening and Exposure Management initiatives, growing over-time to manage long-term planning.
• CHALLENGE • Work with technology owners to define and document security baseline requirements per technology, in a version-controlled, peer-reviewed repository. • Contribute to keeping baselines current: annual review, version changes, mapping to recognised hardening standards, and ensuring accurate and thorough documentation of applicability status. • Contribute to bringing new technologies into baseline scope. • Work with the technology and reporting warehouse teams to test that scan results reach the central reporting platform complete and accurate, and flag gaps or malformed records. • Support audit and regulatory evidence requests: policy history, exception trail, scan evidence. • Support the remediation of identified security configuration deviations within the Exposure Management initiative, including adjusting assignment rules and evaluating false-positive requests. • Track coverage and compliance deviations, follow up on remediation plans and exceptions with technology owners and IT service owners, and verify scan evidence. • Work with colleagues in Zurich and Madrid and share findings and general observations with colleagues across the team.

Requirements

• Reasoning about data flows and spotting missing or malformed records. • Verifying results against a defined standard: using automated tools or applying peer-review principles where manual review is necessary. • Experience working with auditable procedures and documentation. • Explaining requirements to engineering teams and following up on agreed actions. • Coordinating work across teams without direct authority. • Working with tickets, exceptions and findings in a workflow tool. • Working with structured data and documents under version control.
• Bachelor's degree in computer science, information security, or equivalent practical experience. • Three to Five years of experience in security-related technical role, such as configuration or hardening, governance, or data quality. • Practical experience with version control and data management (such as SQL or Splunk) systems. • Fluency in English We are looking forward to receiving your full job application through our online application tool.

• Further interesting job opportunities can be found on our Career site .
• Set up a job alert by creating a candidate account here .