About the role
The role:
Join our dynamic Information Security GRC team to play a crucial role in strengthening our business operations. As a key member, you'll enforce our Information Security Framework, conduct internal risk assessments, and collaborate your line manager to define assessment scopes. Your responsibilities will include: review internal systems, processes, and procedures, record risks, and prepare insightful reports. Additionally, you'll contribute to Information Security projects, ensuring state-of-the-art solutions in line with regulatory requirements and best practices. This is an opportunity to make a significant impact in a forward-thinking environment, safeguarding our business while driving innovation in Information Security. Join us for a fulfilling journey!
The main responsibilities of the position include: • Plan and execute technical and targeted risk assessments in IT infrastructure, applications, technologies, and third parties • Assess internal controls, processes, and policies related to Information Technology and Security, identify deficiencies, and develop remediation strategies • Perform risk analysis on current risks and identify potential risks at operational, tactical, and strategic level • Perform risk evaluation on previously handled risks and compare mitigation approaches to potential risks • Maintain the risk register and the Information Security Risk Management Program • Identify information security risks and make recommendations that are appropriate, practical, and cost-effective • Manage and monitor the progress of remediation steps on risk assessment findings • Prepare comprehensive reports summarising the actions taken for to remediate identified risks • Provide regular reports and metrics on the security posture of the company • Act as the escalation point of the information security department for any information security related risks
Main requirements: • BSc/MSc in Information Security or any other relevant degree • At least 3 years of work experience in information security risk management and information security risk assessment • Technical knowledge of operations, physical, network, host and application security, as well as security architecture, virtualisation, and cloud infrastructures • Good understanding of security regulations and frameworks, such as ISO 27005, ISO 27001, NIST CSF and 800-53, DORA, GDPR, etc • Risk-related certifications, such as CRISC, CGRC, and CISSP, are a plus • Ability to work autonomously with minimum supervision and to integrate well within a team • Ability to articulate security risks and communicate effectively to various levels of management • Self-motivated, proactive, and efficient • Ability to work under pressure in a fast paced environment • Strong interpersonal, organisational, and project management skills • Excellent communication skills with the ability to explain technical concepts to a non-technical audience. • Excellent written and verbal skills in English
Benefit from: • Attractive remuneration package • Private health insurance • Corporate pension fund • Intellectually stimulating work environment • Continuous personal development and international training opportunities
The Hiring Experience: What Awaits You • Let’s Connect – Intro Chat with Talent Acquisition • Deep Dive – First Interview with Your Future Team • Final Connection – Final Interview
All applications will be treated with strict confidentiality!
By submitting this application, I confirm that I have read and agree to the terms of the Privacy and Data Protection Notice and the Confidentiality Undertaking.
Text as published by XM Careers. We don't edit postings; apply and ask questions on the employer's site.