Sobre o nosso cliente
Our client is a Consumer Services Multinational Group.
Descrição
- IT Security Framework: Development, implementation and maintenance of security policies, standards, and procedures aligned with industry best practices, regulatory requirements and internal guidelines (aligned with Data Security Officer);
- Risk Assessment & Management: Performing regular technological risk assessments to identify, evaluate, and prioritize security threats across our Application Landscape. Deploying effective risk mitigation strategies and controls;
- Incident Response: Develop effective incident response plans to manage and contain security breaches (in coordination with Data Security Officer), ensuring timely recovery and prevention of future occurrences. Support the local Data Protection Officers in case of data breaches;
- Security Awareness and Training: Promoting a security-conscious culture through ongoing training and awareness programs for employees and partners;
- Compliance Management: Ensuring adherence to relevant security regulations, industry standards, and contractual obligations;
- Technology Security: Overseeing and managing the implementation of security-related controls and technologies, including firewalls, intrusion detection systems, encryption, and access management;
- Data Privacy: Supporting the Data Security Officer in the technological implementation of measures to protecting personal and sensitive data in accordance with applicable privacy laws and regulations;
- 3rd Third-Party Risk Management: Assessing and managing security risks associated with external vendors and partners.
Perfil ideal
- Degree in Computer Science, Computer Engineering, IT Security or related fields;
- Good understanding of IT systems and architectures, technologies, and operations in complex environments;
- Strong IT experience with focus on security operations and information security;
- Working knowledge of risk and business continuity management;
- Strong understanding of cyber security regulation as well as standards and frameworks;
- Hands on experience in technical security operations;
- Demonstrated project management skills and experience (across multiple functional areas);
- Ability to work effectively in a dynamic environment, managing multiple priorities and stakeholders;
- Effective communicator (able to convey the message in a clear way with all stakeholders);
- English proficiency.
Nice to have
- ISO27001/5 certification;
- CISSP (Certified Information Systems Security Professional);
- CEH (Certified Ethical Hacker);
- GDPR knowledge.
Vantagens
Career opportunity in an international environment.