Systems Engineer III - Database Security Compliance Engineer

Company Description

Tesco Bengaluru: We are a multi-disciplinary team creating a sustainable competitive advantage for Tesco by standardising processes, delivering cost savings, enabling agility, providing cutting-edge technological solutions and empowering our colleagues to do ever more for our customers. With cross-functional expertise in Global Business Services and Retail Technology & Engineering, a wide network of teams and strong governance we reduce complexity thereby offering high quality services for our customers. Tesco Bengaluru, established in 2004 to enable standardisation and build centralised capabilities and competencies, makes the experience better for our millions of customers worldwide and simpler for over 4,40,000 colleagues.

Job Description

Summary: This role is crucial to make sure Database Infrastructure meets Business continuity and regulatory requirements and stays secure always. You will work with different Application; Service and Operation teams; and Security to be successful in this role. You will be responsible for owning end to end compliance of security controls and audit requirements like Layer Defense Model (LDM) & Internal Control for Financial Reporting (ICFR) etc. which are shared by Info security team from time to time. You will be front running the assessment and audits; working closely with wider infrastructure teams to ensure we are always compliant with the controls and providing sufficient evidence in required reporting needs. You will also ensure that database Infrastructure components are always patched regularly; and vulnerabilities maintained within the governing control limits as advised by Security.

Role Responsibilities:
The Database Security Compliance Engineer shall have a proven track record of successfully managing and mitigating IT Security challenging across database and overall technology landscapes. Other responsibilities include the following:

• Understand; develop; and maintain database related security controls as part of organization’s information security policy and procedures.
• Maintaining operational control and generating documentation for ongoing security compliance across various database streams.
• Assist in evaluating current gaps in the availability of security tools; and work with the Info Security team to address them in collaboration with infrastructure engineering.
• Assess new or updated industry regulations on database security space to ensure ongoing compliance and collaborate with application teams to implement the necessary amendments.
• Participate in business continuity planning (BCP) activities when required.

Qualifications

Technical Skills:

• Extensive knowledge on multi-database skills and support expertise across on-prem and public cloud workload hosting.
• Expert knowledge on DB authentication; and authorisation
• Expertise in configuring and troubleshooting database security aspects like - DB & User Access
  • DB Auditing and Monitoring
  • Data Encryption
  • Data Masking
  • Risk Assessment
  • Database backup and recovery procedures
• In-depth understanding of organization’s legal and regulatory requirements such as GDPR; ICFR; SOX; etc...
• Develop and manage processes for security vulnerability management and ensuring compliance with database and OS patching requirements.
• Proficiency in ITIL processes (Certification would be preferred)
• Open to learn on any latest emerging technologies related to information security and compliance.
• Infrastructure security certification will be desirable.
• Scripting and Automation skills will be preferred.

Personal Skills:

• Flexibility; ability to plan and organise; responsiveness; creativity; and self-starter.
• Ability to demonstrate strong written; verbal communication and presentation skills.
• Able to build solid working relationships with peers and different teams within organization.
• Strong interpersonal skills and ability to influence others.
• Possess strong analytical and problem-solving skills.
• Ability to learn new technologies; new security guidelines.

Leadership & Potential:

• Collaborate across multifunctional departments to drive forward the development and adoption of existing and new technologies to the Database Technology stack.
• Collaborate with a wider area or teams to drive overall enterprise design.
• Collaborate with Engineering teams with clear expectations and project deliveries.
• During volatile and uncertain situations able to anticipates and overcome obstacles with a pragmatic approach to achieve goals and commitments; while exhibiting high responsiveness by reacting quickly and positively to the significant and major events.

Additional Information

Important Notice: 

On behalf of Tesco Bengaluru, we must caution all job seekers and educational institutions that Tesco Bengaluru does not authorise any third parties to release employment offers or conduct recruitment drives via a third party. Hence, beware of inauthentic and fraudulent job offers or recruitment drives from any individuals or websites purporting to represent Tesco. Further, Tesco Bengaluru does not charge any fee or other emoluments for any reason (including without limitation, visa fees) or seek compensation from educational institutions to participate in recruitment events. 

Accordingly, please check the authenticity of any such offers before acting on them and where acted upon, you do so at your own risk. Tesco Bengaluru shall neither be responsible for honouring or making good the promises made by fraudulent third parties, nor for any monetary or any other loss incurred by the aggrieved individual or educational institution. 

In the event that you come across any fraudulent activities in the name of Tesco Bengaluru, please feel free report the incident at recruitment_compliance_india@tesco.com