Team Overview:

The AppSec Team focuses on building secure mobile, web and cloud applications throughout their development lifecycle, from start to finish. AppSec is a proactive approach to security that help prevents threats at the initial stages rather than a reactive approach.

As an Application Security Engineer at TAL, you will be responsible for ensuring the security of our applications by implementing and maintaining robust security measures at TAL. You will work closely with development teams to identify and mitigate security vulnerabilities throughout the software development lifecycle. You will also foster security awareness and DevSecOps culture, providing security training to development teams.

Key Responsibilities:

• Ascertain a holistic understanding of TAL’s systems, development workloads and lifecycles.
• Create and update software application security policies and procedures.
• Work closely with the TAL Cyber team to implement security best practices and standards to protect sensitive data and ensure compliance with regulations.
• Collaborate with development teams to integrate security controls into the software development process.
• Conduct security assessments on applications to identify and remediate vulnerabilities.
• Drive response to security incidents, conducting root cause analysis and implementing corrective actions.
• Analyse application code and recommend solutions to identified security issues.
• Execute planned and ad-hoc security scans of software applications, and interpret results for development teams.
• Maintain documentation related to application security processes and controls.
• Providing application security guidance, coaching, and training to development teams and other stakeholders.
• Ensuring the adoption and implementation of application security tools in the DevSecOps lifecycle.
• Gather, manipulate and report on data from application security tools programmatically.
• Work with vendors to tailor application security tools to fit TAL workloads. 
• Stay up-to-date on the latest security threats and trends to proactively address potential risks and educate development teams.

What you’ll do

• Develop and maintain in depth understanding of the Commercial segment’s processes, systems, technologies, data, customers, consumers, partners.

• Act as the primary local security contact / advisor for key stakeholders within the Commercial segment.

• Advise Security Leadership in decision making for and affecting the Commercial segment.

• Analyse and manage security compliance requirements based on industry standards, national and international regulatory framework and internal policy framework.

• Proactively identify non-conformities and areas of potential improvement and facilitate development of pragmatic solutions to address issues, utilizing the security assessments and observations processes.

• Engage with clients and customers as needed to assist the business to achieve its objectives with pre and post sales activities (e.g. explain our security program, support external audits, support bids/RFP process, assist in customer communication of security incident, etc).

• Participate in BU related conferences, client facing engagement, industry forums to represent the Security program.

• Provide regular and timely reporting on the status of information security across the Commercial segment.

What experience you need 

• 5+ years experience within the security industry.

• Bachelor’s degree or an equivalent combination of education and experience required.

• Strong communication and presentation skills demonstrated by your experience in presenting and communicating at all levels within the organization and senior management. An ability to translate complex technical security concepts into business-friendly communications, especially covering cloud usage.

• Ability to independently influence others in order to achieve objectives.

• Ability to work collaboratively within a team as well as independently and autonomously, and engage stakeholders as required, to own and carry on end-to-end projects and initiatives.

• Strong ability to build and maintain trusting relationships with internal and external customers and

• always demonstrate good judgment, integrity and actively collaborates and commits to the success of others.

• Knowledge and experience of Information Security Risk and Security governance.

• A solid understanding of security best practices and international standards such as ISO2700 and PCI DSS and NIST.

• Demonstrable experience of driving operational implementation of policies and processes.  

  What could set you apart

• Previous experience as a Business Information Security Officer (BISO).

• Experience working in a matrix environment with globally diverse team members.

• Experience with Google Cloud (GCP).

• Previous experience working with external clients.

• Experience participating in IT Security audits, working with auditors..

• Experience obtaining or maintaining compliance certifications such as SOC2, PCI, ISO 27001.

• Understanding of cyber risks in the banking/ financial services sector.

• CISM, CISSP or related certification is a strong plus.

Primary Location:

Function:

Schedule:

Our Company

Changing the world through digital experiences is what Adobe’s all about. We give everyone—from emerging artists to global brands—everything they need to design and deliver exceptional digital experiences! We’re passionate about empowering people to create beautiful and powerful images, videos, and apps, and transform how companies interact with customers across every screen. 

We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere in the organization, and we know the next big idea could be yours!

Creativity for All

Adobe is a place where exceptional people work – don’t just take our word for it, our employees have recently voted us #1 on the Great Place to Work list for the 10th consecutive year!

We’re proud to offer market leading employee benefits designed to suit your lifestyle. Some of the great benefits include health insurance, global days off, wellness fund, market-leading parental leave, access to our Employee Stock Purchase Program and programs designed to help continue to build your career.

We also proudly empower our employees to get involved with corporate social responsibility and offer a broad range of opportunities to make a bigger impact through philanthropy, employee, and community engagement.

We know that people are the differentiator in our business, and that's why we want to meet you.

A bit more about you

In the role of Security Compliance Specialist, Tech GRC you will be part of a critical hub for Sales, Legal, Engineering, Compliance, Operation, and Marketing teams in presenting Adobe's security posture and overcoming customer security objections and concerns.

Are you interested in leading Security Compliance efforts, seeing how the business works up close, and chipping in to ensure sales go through optimally for a product-based organization? Do you have experience in driving Information Security assessments internally or externally and talking with customers? Then this role is for you.

In this role you’ll be focusing on driving Australian Security Compliances as part of the APAC Security Compliance Program by collaborating with external assessors, government agencies, product development & operations teams, core security teams, and others. This job also blends an understanding of information security with evangelism, program management, business savvy, and an eye for detail with timely execution.

What you’ll do

• Perform the IRAP Readiness Assessment covering various cybersecurity guidelines of the Information Security Manual (ISM) for products looking for IRAP assessment.
• Present Readiness Assessment result reports to summarize the compliance objectives, key findings, and next steps to Partners and Management regularly.
• Coordinate with relevant partners to remediate key findings and prepare the products for external IRAP assessment.
• Oversight development of System Security Plan (SSP) documents for in-scope products.
• Continuously evaluate and drive upgrades of operational policies, procedures, and standard processes to meet ISM requirements.
• Review and coordinate Cloud Controls Matrix (CCM) updates and IRAP Cloud Security Assessment Report (IRAP Report) with assessors.

What you need to succeed

• Bachelor/Master degree or equivalent experience in Information Security/Cyber Security or related field.
• Minimum 5-8 years of related security compliance assessments, IT/Cloud auditing, and control testing experience.
• Must know Security Compliance frameworks (e.g. IRAP, Cyber Essential Eights, ISO, SOC 2, etc.)
• Sound knowledge of Cloud IT processes and Cloud IT infrastructure like AWS, Azure, GCP, etc.
• Hold certifications like CISA, IRAP Assessor, and others.
• Good interpersonal and highly developed communication skills

At Adobe, you will be immersed in an exceptional work environment that is recognized throughout the world on Best Companies lists. You will also be surrounded by colleagues who are committed to helping each other grow through our unique Check-In approach where ongoing feedback flows freely.

If you’re looking to make an impact, Adobe's the place for you. Discover what our employees are saying about their career experiences on the Adobe Life blog and explore the meaningful benefits we offer.

Adobe is an equal opportunity employer. We welcome and encourage diversity in the workplace regardless of gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, or veteran status.

Adobe is proud to be an Equal Employment Opportunity and affirmative action employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other applicable characteristics protected by law. Learn more.
 

Adobe aims to make Adobe.com accessible to any and all users. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email accommodations@adobe.com or call (408) 536-3015.

Adobe values a free and open marketplace for all employees and has policies in place to ensure that we do not enter into illegal agreements with other companies to not recruit or hire each other’s employees.