Security Baseline Deviation Specialist

Security Baseline Deviation Specialist keeps the Security Baseline Configuration framework accurate and working end to end: from helping the technology teams to establish the baseline requirements, to ensuring the scan and reporting data is accurate and proves compliance, and then following-up on deviations. This is a general, long-term role. Initial scope starts with overseeing expansion to onboard new technologies to Hardening and Exposure Management initiatives, growing over-time to manage long-term planning.

• Work with technology owners to define and document security baseline requirements per technology, in a version-controlled, peer-reviewed repository.
• Contribute to keeping baselines current: annual review, version changes, mapping to recognised hardening standards, and ensuring accurate and thorough documentation of applicability status.
• Contribute to bringing new technologies into baseline scope.
• Work with the technology and reporting warehouse teams to test that scan results reach the central reporting platform complete and accurate, and flag gaps or malformed records.
• Support audit and regulatory evidence requests: policy history, exception trail, scan evidence.
• Support the remediation of identified security configuration deviations within the Exposure Management initiative, including adjusting assignment rules and evaluating false-positive requests.
• Track coverage and compliance deviations, follow up on remediation plans and exceptions with technology owners and IT service owners, and verify scan evidence.
• Work with colleagues in Zurich and Madrid and share findings and general observations with colleagues across the team.