We are looking for a Security Operations (SecOps) Engineer to be in charge for securing Regional IT environment within a geographical scope.
About the Role
The goal is to assist and lead in the remediation of cybersecurity incidents, navigates through IT security controls implementation, works with the GRC (Governance, Risk and Compliance) team during audits, supports PMs within IT security assessment process, supports vulnerability management process and supports Regional IT and Cybersecurity roles to maintain resilient IT infrastructure and applications. The perfect fit will support the process of ensuring the security, confidentiality, integrity, traceability and regulatory compliance of information systems and data within geographies and functional scopes.
Responsibilities:
* Cybersecurity incident remediation
* Support cybersecurity incidents response
* Involve and escalate to the relevant stakeholders locally and at Group level
* Support post incident reviews for process improvements and track implementation of actions
* IT security controls implementation
* Support local IT with implementation of security tools and mechanisms increasing company cybersecurity threats resiliency
* Monitor progress with IT security controls implementation
* Participate to P.O.C's and further support deployment within the geographical scope
* IT security risk assessment
* Support PMs with the process of questionnaire preparation from the cybersecurity perspective
* Support assessment security of business projects to ensure appropriate consideration and application of security principles by architects and third parties
* Support evaluation risks, threats, and potential impacts of IT requests
* Vulnerability management
* Participate in ensuring effective patching and vulnerability management (processes) working with infrastructure and applications teams
* Contribute to the deployment of mitigation actions (technical, organizational, on contracts, with cyber-insurers)
* Operational protection of the Information Systems
* Relay security communications and ensure appropriate actions are taken and report
* Support in the designing and collecting of relevant KPI's and dashboard regarding technical and organizational security aspects for regular review with senior IT stakeholders
* Support in the monitoring of implementation of internal and external audits recommendations and remediation plans, including the assistance of drafting of action plans
Qualifications
* At least 3 years' experience in IT Security / cyber-security domain is required;
* At least 1.5 years' experience in a similar role;
* Experience in the IT administration role.