Large Platform Security Agent

Job description

·  Job Description:

About DXC Technology

DXC Technology (DXC: NYSE) is the world’s leading independent, end-to-end IT services company, helping clients harness the power of innovation to thrive on change. Created by the merger of CSC and the Enterprise Services business of Hewlett Packard Enterprise, DXC Technology serves nearly 6,000 private and public sector clients across 70 countries. The company’s technology independence, global talent and extensive partner network combine to deliver powerful next-generation IT services and solutions. DXC Technology is recognized among the best corporate citizens globally. For more information, visitwww.dxc.com

Job Description Summary

Currently we are looking for a candidate to join our Security Information Services Team for Large Platform environment. The team is intended to ensure the availability, integrity and confidentiality of data information by protecting against internal and external threats and inadvertent or malicious actions. The security team protects the mainframe environment by using tools such as RACF, ACF2 or Top Secret to grant/remove access and mitigate risks to client systems.

Responsibilities:

·  Support personnel will have knowledge of access control mechanisms within the supported platforms and related security software.
·  Validate requests to ensure the requests contain all required data and are authorized by appropriate data owner. 
·  Analyze requests and determine course of action, based on existing corporate and client policies and procedures. 
·  Evaluate security impacts and resolve related issues. 
·  Validate changes to ensure accuracy and completeness from a security perspective.
·  Enforce process controls.
·  Raise, follow up on approval, and implement normal/emergency changes based on valid requests and approvals.
·  Perform and review dataset and resource rules re-organization, based on appropriate approvals.
·  Run reports as defined and installed.  Ensure jobs are generating reports as requested.
·  Audit support may be requested through standard processes from multiple sources, and includes providing global documentation, reports, etc.  Requirements are usually based on the Service Organization Controls (SOC) Framework of the American Institute of Certified Public Accounts (AICPA), and Payment Card Industry (PCI) activities.
·  Provide technical security support, security administration, compliance and incident management in support of the following:
·  Support password resets which could not be addressed by Level 1.
·  Add/Change/Delete User Logon ID, system ID, application ID, groups, profiles, etc.
·  Add/Change/Delete Dataset Access.
·  Add/Change/Delete General Resource Access.
·  Add/Change/Delete Production Job Logon ID.
·  Add/Change/Delete Started Task Logon ID. Validate requests to ensure the requests contain all required data and are authorized by appropriate data owner. 
·  First point of contact for audit support. 
·  Support incident and problem management as required.
·  Maintain resource and data ownership tables for use in validating approvals.
·  Basic Audit responses
·  Audit reporting review per client request for our supported platforms and tools used in various regions, including, for example, Global Compliance Management System (GCMS), the Network Access Control Online System (NACOS), and Report Distribution System (RDS).
·  Disaster recovery planning and exercise support, as required of the Level 2 team(s).  This is dependent on the client as this can be a function between L2 or L3.
·  Evaluate these issues with Level 3 as directed. • 24x7 on call support is available.

Working relationships:

Internal - Capability leader; Peer Level 2 or Level 3 teams globally; Account teams; Account security officers; ESIS audit teams

External - Clients to a limited degree

Education (degree) and professional experience required:

·  Mainframe experience is preferred

Other requirements: (language and certification requirements, different than formal education)

·  Fluent in written and verbal English
·  Microsoft Office Suite
·  Understanding of mainframe functions

Personal skills and qualities:

·  Mainframe RACF, ACF2 and/or Top Secret and AS400 experience
·  Time management
·  Professional business acumen
·  Self-driven

Technical skills:

·  Audit questionnaires
·  Microsoft Office