Snr It-Security Coach -G2079

The Snr IT-Security Coach will be responsible for the mentoring, upskilling and monitoring of Jnr IT-Security Delegates regarding all IT-Security Processes, Work Instructions, Guidelines and Policies, including but not limited to the following:
Agile Wrking Model (AWM)
System Architecture Analysis
Risk Analysis, recmmendations and management
Attack Surface Analysis/Threat Mdelling
Security Requirements Engineering
Security Testing
Deprecate unsafe functins and hardening of the system
Security Reviews
Mnitoring System Security
IT security related legal issues (data privacy, cmpliance etc.)
IT Security Risk Dcumentation
Static/Dynamic Applicatin Security Testing/Fuzz Testing
Security Incidents
Penetratin Tests
Infrmation Security
Understand and implement end-to-end requirements to attain formal IT-Security certifications / audit requirements (ISO 9001, ISO 27001, TISAX, SCHREMS II, etc.).
Facilitate Community of Practice (CoP) platforms where Jnr IT-Security delegates learn, develop and exchange experience and skills with their peers.
Network regularly and effectively with international counterparts and peers to stay abreast with the latest developments in global and BMW-specific IT-Security topics.
Minimum of 5+ years’ experience in leading IT Security topics within an SDLC context.
**At least one of the following certifications**:
CISSP
CISM
**Certification in Cloud security**:
**SEC545**:
Clud Security Architecture and Operations
**SEC540**:
Clud Security and DevOps Automation
Excellent coaching and mentoring skills to give effective guidance, training and coaching to Jnr IT-Security delegates, Agile Masters and Product Owners.
Understand software and hardware architecture, administration and management of operating systems, networking, cloud and virtualization software.
General programming/software development concepts and software analytical skills.
Advanced skills in IT Security, Risk, and Compliance management methodologies (ISO 27001 series, COBIT 5, ITIL, ITSCM etc.).
Expert skills in using IT security products to conduct penetration tests, vulnerability scans, and source code reviews.
Excellent skills in Microsoft Office Products, JIRA &
Confluence.
Excellent skills in reading, writing and speaking in English.