IT Security Control & Policy Expert
Bucuresti, 21933, ROU
‎în urmă cu 15 ore

Your day to day :

With these activities, you will have a great impact on our business :

Security Compliance

  • Drive and ensure full compliancy on security controls and policies for the complete organizational scope of the organization (DC infrastructure services).
  • Support periodical process review and performs audits, with the aim at identifying and suggesting actions to improve security controls and policies

  • Facilitate discussions across different departments and leverage both internal expertise and external best practices
  • Interface to the internal and external auditors and relevant stakeholders
  • Review security documents (Detailed Requirements, T2 / T3 level documents) and ensure proper alignment and collection of requirements from impacted stakeholders
  • Agree on corrective actions to close identified gaps and track them to completion
  • Maintain Compliance Dashboards and keep sharing with senior management
  • Maintain central Knowledge Base about previous and upcoming security assessments, providing a central collection of evidence to be shared during internal and external audits
  • Security Compliance improvements

  • Continuously improve maturity and scores on controls and policies
  • Conduct regular reviews to validate and test the current level of compliancy
  • In case of major plans for improvement of specific controls, be accountable as Program Manager for the required initiatives
  • Consultancy

  • Provide expertise and guidance for the implementation of compliance and policy requirements, also in line with international standards’ recommendations (e.g. ISO27001)
  • Collaborate with Group Security and IT-Services departments on process management related projects; provide information and example about our processes and process management system.
  • Perform regular awareness sessions on security / hygiene / golden rules (e.g. IS027001, CSB, )
  • With these skills, you are a great candidate :

  • At least 5 years’ experience in IT / Datacenter sector
  • Broaden background on IT / Data centre technologies (Server / Compute, Storage, Database, Network, private / public cloud)
  • Several years of practical experience in project / program manager type of role
  • In-depth knowledge and experience of security standards and compliance / audits (e.g. ISO27001, SOX, PCI-DSS)
  • Very strong organizational skills and self-organised
  • Extremely high interpersonal and commutation skills
  • Fluency in English
  • Security & Compliance expert
  • Industry-standard premium qualifications like ITIL v3 Expert, ISO / IEC 27001 Lead Auditor, ISACA Certified Information Security Manager, ISO / IEC 20000 Consultant, CBCI
  • Sounds like the perfect job? We’ve got even more to offer :

  • Work from home
  • Medical and dental services
  • Life insurance
  • Dedicated employee phone subscription
  • Special discounts for gyms and retailers
  • Annual Company Bonus
  • Ongoing Education we continuously invest in you to ensure you have everything needed to excel on the job and enhance your skills
  • You get to work with tried and trusted web-technology
  • Getting in on the ground floor of and technology changing company
  • Flexible Vacation Take time off when you need it, we trust you!
  • Sounds interesting? Apply!
  • VOIS

    Raportați această lucrare

    Thank you for reporting this job!

    Your feedback will help us improve the quality of our services.

    Email-ul meu
    Făcând clic pe "Continuă", acord nevoo consimțământ de a procesa datele mele și de a-mi trimite alerte prin e-mail, așa cum este detaliat în policyApplicația de confidențialitate a lui neuvoo. Pot să-mi retrag consimțământul sau să mă dezabonez în orice moment.