Supports the strengthening of Oracle and SQL DBs security posture, focusing on one or more of the following: risk management; regulatory compliance, threat security policy development and enforcement.
Risk Management:
Brings advanced level skills to assess the information security risk associated with existing and proposed business operational programs, systems, applications, practices and procedures in very complex, business-critical environments.
May conduct and document very complex information security risk assessments.
May assist in the creation and implementation of security solutions and programs.
Regulatory Compliance:
Brings advanced level skills to manage programs to establish, document and track compliance to industry and government standards and regulations, e.g. ISO-27001, PCI-DSS, HIPAA, FedRAMP, GDPR, etc.
Researches and interprets current and pending governmental laws and regulations, industry standards and customer and vendor contracts to communicate compliance requirements to the business.
Participates in industry forums monitoring developments in regulatory compliance.
Mentors and trains other team members.
Compiles information and reports for management.
What is in it for you Tesco is a diverse and exciting employer, dedicated to being #aplacetogeton, providing career-defining opportunities to all of our colleagues. If you choose to join our business, we will provide you with (for all):
Up to 20% yearly salary bonus - based on both individual and business performanceSick leave Compensation1 extra week of annual leave above your legal entitlement of 4 weeks of annual leave of paid leave to support your well-being and family lifePension insurance contributionCafeteria benefit system & Multisport cardTraining and Development Plan, supported by certified training and learning platforms like Udemy, Udemy Pro and LinkedInReferral BonusFlexible work time You will be responsible for Build out new security control catalogue, security policies and procedures and assist in implementing themKnowledge of application, data classification, security infrastructure and governance, Logging, Supervising aspects and Authorization Ability to analyze security requirements and convert into secure and scalable DB security controlsReview application architectures and implementation details for design flaws, incorrect security implementation and missing security controlsDrive and lead security processes, tools, methods, and knowledge and security enhancementsUse Static and Dynamic Analysis tools to support broad testing and vulnerability discovery in the CI/CD pipelineConduct security assessmentsCoordinate with Corporate Security teams and System Owners to ensure Corporate Security standards implementationPerform security audit, risk assessment, and generate reports of security posture of systemsBuild automation using Python/Ruby/Terraform/Ansible /Oracle Apex to handle large InfrastructureDrive innovation and integration of new technologies into projects and activities Provide domain-specific expertise, overall security leadership and perspective to cross- organization projects, programs, and activitiesWilling to learn new technologies and productsKnowledge of encryption technologies
You will need Several years of experience in a Senior security analyst role or Senior DBA: This experience should ideally be focused on IAM security. Experience working with Oracle databases (SQL is a big plus) Experience with security assessments and audits Minimum 5 years of experience, preferably 7-10 years About us Tesco Technology was established in Prague to support Tesco’s retail business in Central Europe and across the Tesco Group. What began as a regional center over 25 years ago has evolved into a modern, forward-thinking team, driving innovation and digital transformation throughout the region. With operations in the UK, Ireland, India, Hungary, Poland, and the Czech Republic, we’re committed to delivering great value to our customers every day. Let’s {code} the future together at {Tesco Technology}!