2 Contract Information Security Jobs in Yorkshire

IT Security and Compliance Analyst York - Hybrid (2-3 days per week on-site) 12 months Main Purpose: Provide Security & Compliance support to the NiM businesses and IT incl. relevant contribution to agreed IT support model, operational sustain incl. incident and request management, Market Security Compliance Indicator … MSCI) measure and Information Security Managment (ISMS) contribution. Key Outputs: Sustain the IT product portfolio, across all UKI NiM (Nestle in the Market) businesses, by providing first level support, incorporating the Service Portal and subject matter experts, to agreed targets and SLO, ensuring Compliance by following relevant GLOBE … Standards and Policies, incl. Nestlé IT Security Policy and Cyber Securirty Awareness Supporting the Security & Compliance Specialists with ownership or support of relevant MSCI measures and ISMS controls Providing support to the Market Role Coordinator for GLOBE SAP Security sustain and projects Supporting the application compliance process more »

with cloud services and their WAF controls, ideally including one or more of the following: AWS, Azure, and GCP * Strong understanding of Web Application security attack methods and mitigations * Proficiency in WAF tuning and configuration, coupled with a strong foundation in web security principles and practices. * Develop custom … WAF rules and features, addressing gaps and enhancing overall security measures * Capability to design and implement bespoke WAF processes and documentation, underpinned by a thorough understanding of web application security. * Analytical skills to review and align platforms with MVP and Baseline Configurations, leveraging a deep knowledge of WAF functionalities … Providing DevSecOps pipeline maintenance support for the automation works * Familiarity with IDAM protocols and access control measures for WAF management, informed by strong web security knowledge. * Understanding of HTTPS inspection, including Termination and Certificate management, grounded in robust web security practices. * Experience in rate limiting techniques and their more »