Lead and manage the organization’s security initiatives, focusing on secure software development lifecycle, vulnerability management, and strategic leadership.
Responsibilities
Strategically lead and manage vulnerability management and application security programs
Oversee integration of security practices within the SDLC
Plan and coordinate annual penetration testing activities
Lead and mentor a team of security professionals
Conduct IT compliance assessments and reviews
Requirements
Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, or a related field
Nice to have: Banking or financial services sector experience
Nice to have: Cloud security architectures and services
Highly technical role responsible for improving the security of UDX applications and platforms through secure architecture, software engineering, and emerging security tooling.
Compensation
Your talent, skills and experience will be rewarded with a competitive compensation package.
Responsibilities
Assess existing and proposed solutions, identify and validate security weaknesses, define secure architectural designs, patterns and reference architectures.
Provide architecture expertise and guidance to delivery teams through implementation in partnership with NBC Cyber.
Embed security into development practices, code review, testing, and CI/CD.
Work directly with development teams on findings, proofs of concept, remediation approaches, and automated controls.
Translate NBC Cyber requirements and recognized industry standards into practical UDX implementation patterns, reference designs, standards, and methods.
Design, build, and operate secure, scalable products that power our Compensation Collection, Shadow Payroll, and Equity offerings for the world’s most complex multinational employers.
Responsibilities
Build and evolve modern web experiences for Compensation Collection, Shadow Payroll, and Equity products using Next.js, React, and TypeScript
Design and implement backend services and APIs using C#, .NET, and WebAPI
Deliver Azure-native implementations of shadow payroll calculation engines, compensation aggregation pipelines, and equity tax event workflows
Contribute to system architecture and technical design for multi-country payroll, compensation, and equity domains
Own production readiness for your work including logging, monitoring and alerting, reconciliation tooling, incident response support, and operational documentation
Requirements
Bachelor’s degree in computer science, Engineering, or related field required
Lead threat modeling and security design reviews for new services and features, architect and own SAST, SCA, secrets-scanning gates in CI/CD pipelines, own DAST program, run product vulnerability management, define secure SDLC standards, scope and coordinate penetration tests, define security requirements for customer-facing features and integrations.
Responsibilities
Lead threat modeling and security design reviews for new services and features
Architect and own SAST, SCA, and secrets-scanning gates in our CI/CD pipelines
Own our DAST program, from tool selection and coverage through triage of findings
Run product vulnerability management, including the CVE remediation workflow and SLAs
Define secure SDLC standards and enable developers with guidance, tooling, and examples
We’re looking for Seniors with expertise in Third-Party Risk Management to join the leadership group of our MS- RSS Team.
Responsibilities
Lead end-to-end delivery of Third-Party Risk Management (TPRM) engagements.
Lead the design and implementation of TPRM operating models, identifying, evaluating, and providing solutions to evaluate complex business and technology risks.
Follow policies and procedures that support the successful implementation of TPRM operating models.
Facilitate process walkthrough discussions to document end-to-end business processes and functional requirements.
Assess the application of legal and regulatory requirements to clients TPRM practices.