Cognizant is searching for a multifaceted information security professional who can lead information security initiatives as they relate to the engineering and maintenance of enterprise security solutions, systems, and applications.

This role will partner closely with, and interface a great deal with general IT, security architecture teams as well as the Cognizant Information Technology teams. This role will ultimately serve as a liaison between corporate delivery teams and Corporate Security management on security tools, security policies and compute that will be hosted and/or operated by Cognizant infrastructure resources.

This role will require day-to-day work with security operations teams and will be tasked with ensuring that teams adhere to Cognizant’s corporate information security policies, procedures, baselines and guidelines.

Candidate must possess the following:

3-5 years of progressive information security experience across various information security / information technology risk management domains such as but not limited to: network security, infrastructure security, identity and access management, vulnerability and cyber threat management, host/endpoint security, etc.
In depth knowledge of HIPAA regulatory requirements, PCI control standards, and HITRUST/NIST CSF.
Previous knowledge and expertise in implementation and upkeep for information technology and security controls across complex and diverse networks, applications and infrastructures
Technical aptitude and critical thinking skills while having the ability to think outside the box, demonstrated ability to solve complex information security problems, ability to observe security risks and weaknesses and provide security recommendations to respective project and delivery teams
Ability to translate technical risk issues and distill such issues to common IT business leaders and upper management
Ability to understand, build, and document complex information security designs as provided by architecture teams, as well as demonstrate the principals of CIA in a given design
Ability to incorporate security designs and technologies in new, legacy, and in environments undergoing general IT transitions / upgrades
Subject matter expert (SME) across the IT stack as well as diverse IT systems, networking and security components, applications, and operating systems. Solid understanding as to how to mitigate risks with common controls such as WAF’S, IDPS’s, MPS’s, AWL, etc.
Knowledge and demonstrated understanding of MFA (Multi-Factor Authentication) technologies.
Knowledge and demonstrated understanding of SIEM technologies
Knowledge and demonstrated understanding to monitor, manage and tune core security controls
Ability to think strategically with strong attention to detail and organization skills
Understanding of information risk management frameworks, regulations, data protection guidelines and standards
Experience with working on global teams across time zones, cultures and languages.
Must possess strong written and verbal communication skills
Bachelor’s Degree in Computer Science, Engineering or related field or equivalent work experience required
GIAC, CISSP, CISM, or other relevant information security industry recognized certification preferred