07.09.2017
Security Assessment Specialist
Numer referencyjny: AB/SAS/08/WAW2//ITK
Miejsce pracy: Warsaw

For a prestigious IT project we are looking for:

Security Assessment Specialist
  • work location: Warsaw
  • reference number: AB/SAS/08/WAW2//ITK
  • offer issue date: 07.09.2017
duties
  • Build and maintain strong relationships with franchises in order to identify issues and drive Security compliance
  • Develop a thorough understanding of franchise business, systems and processes in order to provide tailored Information Security solutions and services whilst minimising impact or disruption to franchises
  • Identify current risk position for franchises, identifying potential exposures and drive actions to address or mitigate Security risk
  • Perform security risk assessments or provide specialist Security input to support major change programmes
  • Engage with business and technology projects to identify Security weaknesses in proposed systems / applications and develop appropriate solutions based on risk assessment
  • Escalate where appropriate any failures to comply with security controls in application / system implementation
  • Provide policy advice and guidance to business franchises and technology service providers
  • Undertake targeted reviews of business franchises and/or IT systems to ensure compliance to Security policy
  • May be called upon to provide incident and investigations support
  • Will be expected to deputise for Security Assessment Manager when required
  • People Management
  • Mentor and coach Analysts when required
  • Identify relevant training for this role and team to maintain required level of technical expertise within the Clients Risk Management
  • Actively manage risks in accordance with the Clients Risk framework across all franchises
  • In particular, ensure risks are properly evaluated, recorded and mitigating action plans are monitored to completion
  • Ensure visibility and escalation of all risks issues to senior management and executives for information or decision as appropriate
requirements
  • In-depth IT and Information Security knowledge and experience
  • Broad specialist level knowledge of information security technology and IT infrastructure such as, UNIX, Windows, databases, network infrastructure, firewalls, Information security management tools, logging & monitoring tools, emergency envelope tools, Public Key Infrastructures, Cryptography
  • Relevant Information Security qualifications (e.g. CISSP, CISM, CISA, CRISC etc.)
  • Excellent English communication skills – written and verbal, ability to write technical issues in business terms
  • Analytical skills and open minded, thinking out of the box ability.
  • Ability to drive global/regional initiatives and focus on "Change the Business"
  • Knowledge and experience of the legal and regulatory environments
  • Recommended:
  • Good understanding of cloud computing technologies and emerging computing trends; experience with MS Azure and/or AWS preferred (CCSK or CCSP certifications a plus), or
  • Experience in Third Party Security – evaluation of vendor service requirements and contractual obligations, cooperation with sourcing or contract management specialists to provide security expertise in service contract negotiations
  • Business Intelligence/ Management Information / Business Analytics reporting experience
we offer
  • Constant improvement of professional qualifications
  • Stable employment in a professional environment
  • Diverse scope of executed projects
  • Nice atmosphere in an ambitious and professional team
  • Training, orientation trips
  • Private medical care

Aplikuj

IT Kontrakt sp. z o.o., with registered office in Wrocław, ul. Gwiaździsta 66, 53-413 Wrocław, will process, for the purposes of the recruitment process, the personal information that you voluntarily provided in the submitted documents. The applying party has the right to access the provided data and correct it. Separate consent can be made for taking part in future recruitment processes.

 I agree for my above mentioned personal data to be processed by IT Kontrakt sp. z o. o. for the purposes of future recruitment processes

Nagrody

Jesteśmy członkami