We take the protection of our friends, families, and customers' data very seriously, and we're seeking the next team member to help us address this challenge. As a Security and Compliance EPM you'll use your skills to manage security projects, help us improve security reporting and enhanced accountability models, and provide transparency to our partners and management.

Description

We're looking for someone who understands cloud computing at scale and can apply vulnerability management principles across the varied platforms. You will participate in the design and development of novel security automation integrations and reporting. You will partner with internal Compliance, Information Security, and engineering teams to create next-level reporting and tooling. You will also act as an organization-wide EPM on cross-team projects related to advancing our annual roadmap.","responsibilities":"Monitor the vulnerability data intakes for triage and risk-based prioritization together with Information Security

Drive remediation and patching workflows within IS&T together with embedded security partners

Drive the optimization of process and tooling automation

Develop and maintain reporting, metrics and executive KPI's to assist with agile decision making

Manage the exception and compensating controls processes particularly on compliance related assets

Preferred Qualifications

Exposure to and understanding of the Software Development Lifecycle (SDLC)

Possess technical empathy in order to engage and understand engineers' unique challenges.

Proficient with risk assessment and mitigation processes

Proven track record of defining and developing key performance metrics that drive tangible improvements

Outstanding written and verbal skills, with the ability to distill complex information for various audiences

Experience in cross-functional leadership is desired

Possess the capacity to think creatively to identify risks and drive execution across multiple teams

Master's degree in computer science, security engineering, or technical project management

Minimum Qualifications

5+ years application security experience is a must

Certification in one or more cloud based computing platform (e.g., AWS Solutions Architect (Associate), Microsoft Azure Fundamentals (AZ-900), or Google Cloud Engineer)

Bachelor's degree in Computer Science, Security Engineering, or technical project management or related experience or relevant industry experience

Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant .

Pay & Benefits

At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $134,800 and $245,800, and your base pay will depend on your skills, qualifications, experience, and location.

Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits.

Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.