Security Baseline Deviation Specialist

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let’s shape the future of wealth management together.

Security Baseline Deviation Specialist keeps the Security Baseline Configuration
framework accurate and working end to end: from helping the technology teams
to establish the baseline requirements, to ensuring the scan and reporting data
is accurate and proves compliance, and then following-up on deviations. This is a
general, long-term role. Initial scope starts with overseeing expansion to
onboard new technologies to Hardening and Exposure Management initiatives,
growing over-time to manage long-term planning.

YOUR CHALLENGE

• Work with technology owners to define and document security baseline requirements per technology, in a version-controlled, peer-reviewed repository.

• Contribute to keeping baselines current: annual review, version changes, mapping to recognised hardening standards, and ensuring accurate and thorough documentation of applicability status.

• Contribute to bringing new technologies into baseline scope.

• Work with the technology and reporting warehouse teams to test that scan results reach the central reporting platform complete and accurate, and flag gaps or malformed records.

• Support audit and regulatory evidence requests: policy history, exception trail, scan evidence.

• Support the remediation of identified security configuration deviations within the Exposure Management initiative, including adjusting assignment rules and evaluating false-positive requests.

• Track coverage and compliance deviations, follow up on remediation plans and exceptions with technology owners and IT service owners, and verify scan evidence.

• Work with colleagues in Zurich and Madrid and share findings and general observations with colleagues across the team.

YOUR PROFILE

Competencies:

• Reasoning about data flows and spotting missing or malformed records.

• Verifying results against a defined standard: using automated tools or applying peer-review principles where manual review is necessary.

• Experience working with auditable procedures and documentation.

• Explaining requirements to engineering teams and following up on agreed actions.

• Coordinating work across teams without direct authority.

• Working with tickets, exceptions and findings in a workflow tool.

• Working with structured data and documents under version control.

Education and skills requirements:

• Bachelor's degree in computer science, information security, or equivalent practical experience.

• Three to Five years of experience in security-related technical role, such as configuration or hardening, governance, or data quality.

• Practical experience with version control and data management (such as SQL or Splunk) systems.

• Fluency in English

We are looking forward to receiving your full job application through our online application tool. Further interesting job opportunities can be found on our Career site.

Is this not quite what you are looking for? Set up a job alert by creating a candidate account here.