Vulnerability Governance Intern (Cybersecurity) at Experian

Sepang, Selangor, Malaysia -

Full Time

Start Date

Immediate

Expiry Date

13 Sep, 26

Salary

0.0

Posted On

15 Jun, 26

Experience

0 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Vulnerability Management, Security Governance, Risk Assessment, OS Patching, GRC, Incident Management, Multi-tier Architecture, CI/CD, Stakeholder Management, Reporting, Technical Documentation, Cross-functional Collaboration

Industry

Information Services

Description

Company Description Experian is a global data and technology company, powering opportunities for people and businesses around the world. We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more. Experian invests in people and new advanced technologies to unlock the power of data. We have an amazing team of 25,200 people in 32 countries. Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why. Experian is also proud to be an Equal Opportunity and Affirmative Action employer. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity. Job Description What you’ll be doing Functional Responsibilities Managing vulnerability governance for all applications in Global Corporate Systems & Services (EDW). Managing security vulnerability management for all application towers under EDW (ERP, BI, Billing, and HPTools). Remediation and fix deployment on application level should cater to individual application risk assessment. Joins a bi-weekly call with each application tower, discussing respective tower's vulnerability status as overall. Using that meeting platform to address remediation area to prioritize. Generating vulnerability report from Panaseer Vulnerability Management and MARS DB in identifying non-conformance (finding over-due SLA) for remediation prioritization. Bi-weekly sprint data needs to be populated in centralized listing in performing remediation through sprint-by-sprint flow. Identifying and reporting false-positive findings to Threat and Vulnerability. Require evidence acquisition and engagement with relevant team (eg:vendor) in clarification of the issue. Security Risk issue Governance Ensuring risk issues for all towers are being addressed in timely manner and due process with Archer GRC application. Coordinating risk issue remediation completion, ensuring to deliver by due date assigned. Monthly OS patching management for hosts reside under EDW tower ensuring schedule patches deliver as requested. Ensuring monthly OS patching schedule shared to owners for review and updated to the latest and reflecting the current patching time requested by servers and/or application owner. Following up with failed OS patching incident through incident ticket and ensuring that they are addressed by DSG team. Vulnerability fixes associated with OS patching that were not deployed would be addressed in an ad hoc patch schedule. Engagement with server team and maintenance team requires in doing so the deployment of fix would be within the SLA of detected vulnerability. Internal Relationship Management Day-to-day interaction will take place with Release Management, Support and Project teams globally. Maintain effective working relationships with other regions peers/teams. Working with business partners to understand and develop user stories and appropriate test cases. Working with business partners to provide feedback, metrics, and insight regarding test results and released changes. Coordinate communications within support and users for corporate system. Application of Processes, Controls, Standards and Measures Ensure consistent delivery controls are met as mandated by Release Management standards. Ensure that consistent documentation, processes and procedures are used for all deliveries. Adherence to Experian service management documentation and change standards. Ensure that audit and information security standards are consistently adhered to and maintained. Ensure measurement and metrics are collected, collated, documented, and maintained. Adherence to efficient and effective standards for delivery activities and follow department standards for the software development life cycle. Qualifications Please state your start and end date in your resume or cover letter. Bachelor's Degree in Computer Science, Software Engineering, Cybersecurity or relevant background. Ideally with 6 months internship duration. Team players with abilities to work in complex cross-functional and geographically diverse teams. Fluent in English. Ability to handle demanding work situations with multiple priorities. Ability to interface with business users independently. Knowledge of a multi-tier architecture, including operating systems, servers, networking, clients, and browsers is a plus. Continuous Integration and Delivery knowledge; implementation experience on both topics is a plus. Additional Information Our uniqueness is that we truly celebrate yours. Experian's culture and people are key differentiators. We take our people agenda very seriously and focus on what truly matters; DEI, work/life balance, development, authenticity, engagement, collaboration, wellness, reward & recognition, volunteering... the list goes on. Experian's strong people first approach is award winning; Great Place To Work™ in 24 countries, FORTUNE Best Companies to work and Glassdoor Best Places to Work (globally 4.4 Stars) to name a few. Check out Experian Life on social or our Careers Site to understand why. Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is a critical part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity. Experian Careers - Creating a better tomorrow together Find out what its like to work for Experian by clicking here Employee Status: Fixed Term Role Type: Hybrid Department: Technology Schedule: Full Time

Responsibilities

Manage vulnerability governance and security remediation for Global Corporate Systems & Services application towers. Coordinate OS patching schedules and manage security risk issues using Archer GRC to ensure timely resolution.