Senior Third Party Risk Manager

Senior Third Party Risk Manager

Employer: SAP

Our company culture is focused on helping our employees enable innovation by building breakthroughs together. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from. Apply now!

Summary

As a Third Party Information Security Compliance Specialist on the Third Party Risk Management Team you will play an integral role in managing the ongoing enterprise program as well as working with stakeholders across SAP to enhance its maturity. The TPRM team’s function is to identify, assess, mitigate, monitor, and report on third party risks to SAP. The goal is to secure customer trust and protect SAP’s reputation by reducing the likelihood of a security incident, business disruption, or unethical actions taken by a third party.

Role

Managing the assessment process:

  • Support all Third-Party Risk Management (TPRM) activities to proactively identify, evaluate, and mitigate cyber security and operational risks.
  • Establish strong partnership with SAP stakeholders and support the facilitation and management of the security risk assessment process and monitoring of remediation plans in accordance with the TPRM standard.
  • Track and monitor the status of assessments and communicate the status with key stakeholders on a regular basis.
  • Participate in the preparation of third-party risk reports to effectively communicate current residual risk status to business stakeholders.
  • Assist in properly classifying the relevance and impact of technical issues identified through ongoing monitoring platforms, such as BitSight or SecurityScorecard.
  • Able to communicate the risk and remediation methods to SAP stakeholders and third parties.

Program reporting

  • Participate in the timely and accurate notification and escalation of actual or potential risks involving third parties.
  • Support the identification and maintenance an on-going list of all critical suppliers while providing status reporting to key stakeholders.
  • Support the delivery of reporting on all aspects of TPRM performance and effectiveness.

Program enhancement

  • Support the continuous assessment of any legal, regulatory, and external certification requirements relating to TPRM.
  • Identify opportunities to improve business resiliency through proactive management of TPRM.
  • Support the collaboration with the global purchasing organization to ensure security requirements are part of the onboarding process and continuously improved based on the ever-changing threat landscape.
  • Support the collaboration with the global legal organization to ensure contractual obligations are met from a security perspective.

Role Requirements

  • University Degree or equivalent (e.g. Risk Management, Cyber Security, Finance, Supply Chain, or Business Administration)
  • Certifications such as CRISC, CISSP, or CISA as well as technical certifications in Microsoft and Linux platforms, as well as networking such as CCNA, CCNP, or Networking+ are a plus.
  • Risk management experience, preferably within TPRM or cyber security profession.
  • Experience with utilizing ongoing Security Risk platforms.
  • Knowledge of TPRM threat scenarios, security controls, concepts, processes and tools.
  • Knowledge of the National Institute of Standards and Technology (NIST) frameworks and NIST controls applicable to supply chain risk management.
  • Excellent communication and presentation skills, both verbal and in writing and an ability to build a network and to collaborate with various teams globally.
  • Fluent in writing and speaking English. Ability to read German and/or Spanish a plus.

APPLY HERE

Senior Manager, Data Engineering

Senior Manager, Data Engineering

Employer: CVS Health

As the Sr. Manager of IT Systems, you will own and lead the Product/Application delivery for the PBM DW data and analytics solutions. The Sr. Manager will be accountable for delivering comprehensive solutions and products that meet business requirements and incrementally move the data warehouse to the future state. The position requires strong attention to detail, excellent communications skills, and exceptional follow through.

  • Planning, designing and developing cloud-based data warehousing applications. Managing cloud environments in accordance with company security guidelines.
  • Migrating data bases/data related application assets from On-prem oracle to GCP (google cloud platform)
  • Ability to solve issues by coordinating across cross-functional areas by interfacing between hardware and software, develop specifications and performance requirements, or resolve customer problems.
  • Collaborating with engineering and development teams to evaluate and identify optimal cloud solutions.
  • Modifying and improving existing systems.
  • Educating teams on the implementation of new cloud technologies and initiatives.
  • Designing, collaborating with the development team and deploying modular cloud-based systems.
  • Ensuring efficient functioning of data storage and processing functions in accordance with company security policies and best practices in cloud security.
  • Regularly reviewing existing systems and making recommendations for improvements.
  • Interacting with clients, providing cloud support, and making recommendations based on client needs.

Required Qualifications

  • 8+ years experience in Data Warehousing.
  • 4+ years experience in Project/Product owner role.
  • 8+ years of Teradata & Informatica experience or related application.
  • 8+ years experience working in a cross-functional environment.
  • 2+ years experience in Biq Query or cloud data warehousing
  • 2+ years experience in Oracle Golden Gate or other data replication tools

COVID Requirements
CVS Health requires its Colleagues to be fully vaccinated against COVID-19 (including any booster shots if required), where allowable under the law, unless they are approved for a reasonable accommodation based on disability, medical condition, or religious belief that prevents them from being vaccinated.

If you are vaccinated, you are required to have received at least one COVID-19 shot prior to your first day of employment and to provide proof of your vaccination status within the first 10 days of your employment. For the two COVID-19 shot regimen, you will be required to provide proof of your second COVID-19 shot within the first 45 days of your employment. In some states and roles, you may be required to provide proof of full vaccination before you can begin to actively work. Failure to provide timely proof of your COVID-19 vaccination status will result in the termination of your employment with CVS Health.

If you are unable to be fully vaccinated due to disability, medical condition, or religious belief, you will be required to apply for a reasonable accommodation within the first 10 days of your employment in order to remain employed with CVS Health. As a part of this process, you will be required to provide information or documentation about the reason you cannot be vaccinated. In some states and roles, you may be required to have an approved reasonable accommodation before you can begin to actively work. If your request for an accommodation is not approved, then your employment may be terminated.

Preferred Qualifications

  • PBM experience.
  • Healthcare experience.

Education

  • Bachelor s degree

APPLY HERE

Technical Writer, Cloud

Technical Writer, Cloud

Employer: MongoDB

The database market is massive (IDC estimates it to be $121B+ by 2025!) and MongoDB is at the head of its disruption. At MongoDB we are transforming industries and empowering developers to build amazing apps that people use every day. We are the leading modern data platform and the first database provider to IPO in over 20 years. Join our team and be at the forefront of innovation and creativity.

The MongoDB Documentation team is a diverse and highly technical group of engineers who develop and maintain the documentation for the MongoDB product family. Our mission is to help developers and administrators successfully use MongoDB products by providing outstanding documentation. The MongoDB Documentation team is a part of the MongoDB Engineering organization and is tightly integrated with the engineering teams responsible for each product.

The Cloud documentation team is responsible for the following industry-leading MongoDB products and services:

  • MongoDB Atlas, the cloud-hosted, fully managed database as a service
  • MongoDB Atlas Search, embedded full-text search in MongoDB Atlas
  • MongoDB Atlas Data Lake, natively query, transform, and move data across source clusters and formats
  • MongoDB Cloud Manager, the cloud-hosted database management service
  • MongoDB Ops Manager, the on premises database management service
  • MongoDB Kubernetes Operator, orchestrate MongoDB pods and their Cloud or Ops Manager configuration
  • MongoDB BI Connector, the SQL proxy for MongoDB
  • MongoDB Charts, create visualizations for data in MongoDB

We take a hands-on approach to learning complex technical topics and building engineer-focused content on:

  • Distributed systems in the cloud
  • REST APIs
  • Full-text search
  • Backup and restoration
  • Creating and modifying database deployments
  • Enterprise-grade security
  • Performance
  • Managing high availability and scalability in MongoDB clusters

Your work will empower a global community of millions of engineers ranging from experienced MongoDB users to those new to MongoDB.

This role will be based remotely in North America.

Candidate Profile

Candidates must have 5+ years of combined experience across any of the following roles: technical writer, developer advocate, software engineer, and/or product management. Beyond industry experience, we are looking for someone who is:

  • Experienced helping engineers understand product concepts, perform procedures, and use REST APIs
  • A critical reader and an excellent writer
  • Experienced deploying and troubleshooting instances of software management tools locally and on one or more of the major cloud providers (AWS, GCP, Azure)
  • Confident reading application code to understand product functionality, especially code written in Java, JavaScript, or Go
  • Experienced testing and troubleshooting new product software
  • Experience with Apache Lucene or full-text search is a plus

Position Expectations

  • Work with technical and non-technical teams to meet the documentation needs of our readers
  • Research product features and validate with diligent testing
  • Produce technically accurate documentation that users value
  • Contribute feedback to the team, through copy review and planning discussions

Success Measures

In 3 months:

  • You are comfortable with our toolchain and writing style
  • You can complete small to medium complexity writing assignments
  • You are getting to know our Cloud and Enterprise Tools engineers and are getting comfortable with participating in intra- and inter-team discussions
  • You completed the required technical training and courses required of MongoDB Engineering

In 6 months:

  • You create or update documentation for features and write tutorials
  • You possess a working knowledge of the products and know who to follow up with when you need to learn more
  • You have adapted to our style of writing and your work has minimal grammar, syntax, or spelling errors
  • You can review the work of your peers without reservation and can learn from what they have written

In 12 months:

  • You actively take on documenting entire feature sets, complex tutorials, and high level concepts
  • You know how much work you can manage and are contributing at a healthy pace
  • You provide quality copy and technical reviews for your team members
  • You and your manager have discussed your career trajectory and growth opportunities

To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!

MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.

MongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type and makes all hiring decisions without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

APPLY HERE

DevOps Engineer

DevOps Engineer

Employer: Gremlin

Gremlin’s mission is to make the Internet more reliable. We’re leading the way in the exciting, growing practice of Chaos Engineering, for enterprises like Target, Twilio and JP Morgan Chase that are building complex, distributed SaaS applications whose success depends on uptime. The Gremlin platform uncovers risks and weaknesses that aren’t addressed by traditional DevOps and IT operations processes and best practices. If paving a new path forward at the leading edge of technology sounds exciting to you, we should talk.

About the Role of the DevOps Engineer

As a DevOps Engineer, you will do Everything from optimizing Docker containers and Kubernetes, to making our deployment faster and more reliable, to improving and extending the tools we use everyday. You’ll be finding all of the things that can be automated and doing it so that we can scale our small team and outperform the competition.

In this role you’ll get to:

  • Support and extend existing automated Continuous Improvement (CI) and Continuous Delivery (CD) pipelines for cloud-based digital applications.
  • Guide the organization towards self-service DevOps model with aspiration for fully automated, zero downtime deployments.
  • Contribute and enhance the implementation of a cloud-based development environment.
  • Engage with development and quality assurance teams to adopt and continuously improve best practices for software delivery.
  • Participate in the development, evaluation and recommendation of tools, processes, and best practices to improve quality, consistency, and velocity of solution delivery.
  • Implement and support automation and scripting with Infrastructure as Code (IaC).
  • Configure and maintain software development tools spanning source control, continuous integration/delivery, testing, code review, etc.
  • Provide consultation and training on CI/CD tooling and processes to development to the organization.

Key Skills and Attributes

*If you don’t think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box we’re looking for candidates that are particularly strong in a few areas, and have some interest and capabilities in others.*

  • 4+ years of DevOps experience
  • Kubernetes / Docker knowledge (certification a plus)
  • Splunk / Grafana / Prometheus or Similar
  • Experience with a modern CI/CD pipeline
  • Experience with Hashicorp Terraform and Ansible
  • Strong programming background in Rust, Go, Javascript, or Java

About Gremlin:

Our founders, Kolton Andrus and Matthew Fornaciari, lived and breathed incidents, on-call, and Chaos Engineering at Amazon and Netflix. As Call Leaders they were responsible for guiding teams through analyzing and resolving global outages. After a decade of developing and advocating Chaos Engineering internally, in 2016 they decided to make what they had learned available to a wider set of enterprise companies and launched Gremlin.

Since then, Gremlin has built an incredible team of industry veterans and people eager to learn from one another while pushing the entire industry forward to new heights. We’re backed by top-tier investors Index Ventures, Amplify Partners, and Redpoint Ventures. Our customers love us, and we’re thrilled to be a partner in their success.

At Gremlin we value:

  • OUR CUSTOMERS – We won’t be a company if our customers aren’t thrilled. We live and die by our customers, so they come first.
  • ACTION – We favor small experiments to gather data rather than over analyzing a situation. Getting stuff done always beats talking about getting stuff done.
  • CONTEXT, NOT CONTROL – We hire autonomous adults with good judgement. We provide them with the context to make smart decisions. We don’t micromanage.
  • BEING VOCALLY SELF-CRITICAL – We all make mistakes, we all have ways in which we can improve. We own that up front, and honestly discuss ways in which we’ve personally made mistakes and can get better. Then, we encourage and help one another succeed at doing so.
  • DIVERSITY, EQUITY, & INCLUSION – We are at our best when we encourage and include the thoughts and voices of people from many diverse backgrounds into our strategy and execution. We recognize that systemic racism and gender bias are real and that we aren’t perfect, so we actively work to encourage the difficult conversations, to listen, and to change as we discover our blind spots so that Gremlin is a company all of us feel proud to be a part of.
  • FRUGALITY – We are working to build a profitable company and create a new practice in the industry. We spend money on the right things, like making sure employees have the tools they need to be successful and the company has what it needs; we simply choose not to waste what we have and not to buy what we don’t actually need.

APPLY HERE

DevOps Engineer

Software Engineer – Backend Focus

Employer: Gremlin

Gremlin’s mission is to make the Internet more reliable. We’re leading the way in the exciting, growing practice of Chaos Engineering, for enterprises like Target, Twilio and JP Morgan Chase that are building complex, distributed SaaS applications whose success depends on uptime. The Gremlin platform uncovers risks and weaknesses that aren’t addressed by traditional DevOps and IT operations processes and best practices. If paving a new path forward at the leading edge of technology sounds exciting to you, we should talk.

About the Role of the Senior Software Engineer

As a Software Engineer at Gremlin, you will have the opportunity to improve the reliability of the internet at large by developing Chaos Engineering tooling. You will be able to leverage your engineering experience to inform product design as well as solve complex technical problems that directly impact our customers (which range from the Fortune 500 to smaller organizations). You will work closely with a small, talented team focused on quality, delivery, and predictability.

In this role, you’ll get to:

  • Work closely with engineers, product managers, and other stakeholders to design and build the latest and greatest in Chaos Engineering tooling
  • Leverage strong collaboration and communication skills to deliver new features within a remote culture
  • Partner with product and other business units to understand business problems and present technical solutions and tradeoffs
  • Actively mentor and grow your teammates
  • Care deeply about the customer experience

We’ll expect you to have:

  • Self driven and collaborative problem solver with strong communication skills
  • 3+ years professional Java software engineering experience
  • Strong at breaking down ambiguous problems into concrete actions and milestones
  • Experience with agile development environments and practices
  • Strong advocate and practitioner of automated testing, CI/CD, code quality, and engineering best practices
  • Experience in architecting complex distributed systems and integrating with external systems
  • Experience in cloud technologies: e.g., AWS, DynamoDB, Lambda, Serverless
  • Experience or strong interest in infrastructure & systems level technologies: e.g., Linux, Docker, Kubernetes, OpenShift, etc.

Bonus Experience:

  • Has been on-call and participated in an incident management program
  • Experience or interest in Rust & Systems Level Programming
  • Familiarity with modern JavaScript frameworks & web development practices: e.g., React, TypeScript, etc.
  • Experience taking features from concept to full production release

*If you don’t think you meet all of the criteria below but still are interested in the job, please apply. Nobody checks every box we’re looking for candidates that are particularly strong in a few areas, and have some interest and capabilities in others.*

About Gremlin:

Our founders, Kolton Andrus and Matthew Fornaciari, lived and breathed incidents, on-call, and Chaos Engineering at Amazon and Netflix. As Call Leaders they were responsible for guiding teams through analyzing and resolving global outages. After a decade of developing and advocating Chaos Engineering internally, in 2016 they decided to make what they had learned available to a wider set of enterprise companies and launched Gremlin.

Since then, Gremlin has built an incredible team of industry veterans and people eager to learn from one another while pushing the entire industry forward to new heights. We’re backed by top-tier investors Index Ventures, Amplify Partners, and Redpoint Ventures. Our customers love us, and we’re thrilled to be a partner in their success.

At Gremlin we value:

  • OUR CUSTOMERS – We won’t be a company if our customers aren’t thrilled. We live and die by our customers, so they come first.
  • ACTION – We favor small experiments to gather data rather than over analyzing a situation. Getting stuff done always beats talking about getting stuff done.
  • CONTEXT, NOT CONTROL – We hire autonomous adults with good judgement. We provide them with the context to make smart decisions. We don’t micromanage.
  • BEING VOCALLY SELF-CRITICAL – We all make mistakes, we all have ways in which we can improve. We own that up front, and honestly discuss ways in which we’ve personally made mistakes and can get better. Then, we encourage and help one another succeed at doing so.
  • DIVERSITY, EQUITY, & INCLUSION – We are at our best when we encourage and include the thoughts and voices of people from many diverse backgrounds into our strategy and execution. We recognize that systemic racism and gender bias are real and that we aren’t perfect, so we actively work to encourage the difficult conversations, to listen, and to change as we discover our blind spots so that Gremlin is a company all of us feel proud to be a part of.
  • FRUGALITY – We are working to build a profitable company and create a new practice in the industry. We spend money on the right things, like making sure employees have the tools they need to be successful and the company has what it needs; we simply choose not to waste what we have and not to buy what we don’t actually need.

APPLY HERE