Company Brief
Telefonaktiebolaget LM Ericsson, doing business as Ericsson, is a Swedish multinational networking and telecommunications company headquartered in Stockholm.
The company offers services, software and infrastructure in information and communications technology for telecommunications operators, traditional telecommunications and Internet Protocol (IP) networking equipment, mobile and fixed broadband, operations and business support services, cable television, IPTV, video systems, and an extensive services operation.
Job Description
The Ericsson Wallet Platform (EWP) is a product that enables our customers to provide mobile financial services. Customers are operators and banks, both of whom have very high expectations on the level of security which this financial solution provides and the manner in which the solution is operated, integrated and customized.
The company is hiring well educated and an experienced individual for this job.
Listed below is all there is to know bout the job
Responsibilities
- Contracts with customers including security SLAs and mandatory compliance levels against customer and Ericsson security policies, security standards and benchmarks such as PCI DSS, ISO27001, Center for Internet Security benchmarks, OWASP, etc. They also include compliance obligations against regulation on financial services, information security, data protection, and related areas.
- The primary responsibility is to ensure the security of Ericsson Wallet Platform deliveries within MS (Managed Services), ADM (Application development management) and CSI (consulting and solution integration) and compliance against contractual obligations.
- Secondary responsibility involves acting as a coach to all staff involved and handle the security relationship with the customer and third parties.
These can be achieved through the following activities:
- Analyze policies, standards, benchmarks, and other documentation, as well as compliance tool reports and ensure the EWP product and solution are configured in a compliant manner. Also ensure that solution addition or changes are specified, designed, tested and implemented in a compliant manner. This involves document research, workshops, gap analyses, configuration and WoW specifications, etc.
- Ensure security quality assurance by reviewing deliverables from CSI and ADM teams such as solution description documents, requirements lists, custom software solutions and system configuration, etc. and provide approval for these. Provide guidance on how such deliverables need to be changed in order to be more secure and compliant.
- Answer questions on security by customers, CSI and ADM team members and others and actively engage them to increase security awareness and understanding of how to achieve compliance. Ensure both customer and Ericsson risks are well managed and escalations avoided. Identify gaps and define appropriate solutions for them. Provide best practice and compliant solutions that are simple, elegant, effective, cost-conscious and secure. Assist the CSI and ADM team members in configuring security features and securely configuring non-security features. Actively avoid a silo-ization of security, since secure behavior and security knowledge should exist in all team members.
- You work very closely with the security teams in the Ericsson M-Commerce and in coordination with them execute projects to increase compliance, improve security, simplify and reduce cost.
Qualifications
- Minimum 5 years experience as an information security architect, consultant or line function
- Demonstrable experience with security compliance
- Proven ability with taking risk-based security decisions, and weighing the interest of multiple stakeholders and risk profiles against each other
- Proven ability to take in a large volume of information, such as polices, and determine their impact in a particular situation, e.g. whether a change request is compliant
- Proven consultancy skills
- CISSP or similar certification
- Experience with information security in mobile financial services and/or financial services is preferred
- Experience with implementing security certifications such as PCI DSS and ISO27001 is preferred
Additional Requirement
- High level of integrity
- Highly analytical and structured approach
- Demonstrable ability to multitask and handle multiple complex tasks simultaneously under time pressure; ability to prioritize
- Good interpersonal skills, easy to talk to, outgoing
- Self-going
- Sensitive to political aspects of vendor-customer relationships
- Ability to achieve short term results while seeking for long term goals
- You understand the compliance is not necessarily the same as security and know-how to reason, argument and deliver secure and user-friendly solutions which also are compliant.
- Excellent skills in interacting with staff at all levels in a professional way
Application deadline
There is no deadline set for this job position at the time of publishing but be sure to get in touch with the business for further details.
How To Apply
To apply for this position send your CV and application letter to the official website. Visit here to apply