At Walmart, we prioritize innovation and data security. Our team is dedicated to maintaining a secure operating environment and preserving the trust of our customers, suppliers, sellers, associates, and stakeholders. We combine a range of services and expertise to prevent fraud, detect threats, and manage digital risk and access. Our focus is on mitigating attack risks, securing cloud transformation, and fostering a culture of security and reliability within our team.
What you'll do:
Develop vulnerability reports and dashboard that demonstrate current security risk posture to stakeholders Manage all the vulnerability remediation to meet SLA requirements and as cybersecurity SME to assist on remediation Respond critical escalations and Bug Bounty issues promptly. Validates coverage, authentication and accuracy of scans in conjunction with Product and Infrastructure Security Continually improve vulnerability management process driven by data analysis. Maintain cybersecurity awareness and training program to ensure continue improvement. Fosten cybersecurity culture continually through various activities and channels. Plan and conduct annual Cybersecurity awareness month campaign. Collaborate with internal and external security SME to manage tailored training activities for different business roles. Preferred Qualifications:
Bachelor’s degree in cybersecurity, computer science, information technology. One or more certifications of Security+, CISSP, CCSP, CISA, CISM. Strong communication skills in both English and Mandarin with the ability to articulate and translate security, compliance and risk management terminology in business terms. Minimum of 3-6 years of experience within the Cybersecurity space. Hands-on experience conducting vulnerability management or security awareness and training. Strong understanding of emerging security threats in retail industry, mitigation measures, and security technologies. Strong communication and engagement skill and willing to understand BU’s process and knowledge. Strong understanding of information security frameworks (e.g., NIST CSF, NIST 800-53, ISO/IEC 27001:2022, PCI-DSS). Able to work with stakeholders from different cultures.
WMGS doesn’t charge any recruitment or similar fee in the recruitment process including but not limited to interview, offering and onboarding.