About Atos Group
Atos Group is a global leader in digital transformation with c. 56,000 employees and annual revenue of c. €7.2 billion at the go-forward perimeter, operating in 54 countries under two brands: Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries.
The purpose of Atos Group is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to scientific and technological excellence.
Responsibilities
Technical Access Management / Privilege Access Management
- Manage and maintain technical and privileged access controls for production and development environments.
- Ensure compliance with organizational technical access control security policies and procedures.
- Collaborate with IT teams to implement least privilege access and resolve access-related non-compliance.
- Review CyberArk password management policies and assess enforcement through password rotation.
- Review technical access segregation between production and development environments.
Data Leakage Prevention (DLP)
- Create, manage and maintain DLP policies to detect and prevent data leaks.
- Deploy and maintain DLP infrastructure.
- Collaborate with IT teams to investigate and respond to data leak incidents.
Identity and Access Management (IAM)
- Collaborate with IT teams to deploy and maintain data encryption solutions.
- Work with the IAM team to ensure seamless integration with technical access management solutions.
- Ensure compliance with organizational IAM policies and procedures.
Data Encryption Deployment and Monitoring
- Collaborate with IT teams to deploy and maintain data encryption solutions.
- Ensure compliance with organizational data encryption policies and procedures.
Unstructured and Structured Data Discovery and Activity Monitoring
- Deploy and maintain data discovery and activity monitoring solutions.
- Identify and classify sensitive data.
- Monitor and analyze restricted and sensitive database activities.
- Remediate non-compliant findings.
Infrastructure Vulnerability Management
- Identify, classify, prioritize and remediate vulnerabilities in organizational infrastructure.
- Ensure regular coverage of infrastructure assets in vulnerability assessments by service providers.
- Collaborate with IT development and production teams to remediate vulnerabilities and track remediation efforts.
- Provide regular management reports on vulnerabilities, remediation efforts and compliance status.
- Align vulnerability management efforts with business objectives.
- Configure and fine-tune vulnerability assessment tools such as Rapid7 Nexpose, Tanium and Qualys.
Application Security
- Ensure effective implementation of Secure SDL, including DevSecOps and threat modeling practices.
- Identify and implement current security standards for internet-facing and internal assets.
- Improve application-level vulnerability management, including SAST, DAST and SCA.
- Perform security risk assessments and reviews for presentation to relevant committees.
- Ensure an adequate security level for WM GAIM applications across projects and hosting providers.
Cybersecurity
- Protect WM business data and assets through appropriate security review processes.
- Coordinate with IT security teams and other stakeholders regionally and globally.
- Assist with risk treatment for APAC WM issues.
- Identify, record and follow up on IT security risks.
- Define and contribute to cybersecurity processes.
- Report security status periodically to the IT Security Domain Head and management.
- Follow up on DLP and incident management topics by investigating issues and coordinating with handlers.
Atos is committed to diversity and inclusion and promotes a fair work environment. The company is also recognized for its environmental, social and governance commitments.