Cloud System Engineer Con Experiencia Aws Y / O Azure

IONOS; Madrid; Presencial; EUR 45.000 - 80.000; Jornada completa

Descripción de la vacante

Una empresa líder en TIC busca un Especialista en Cumplimiento y Privacidad para unirse a su equipo de seguridad global. Este papel clave implica gestionar marcos de cumplimiento, realizar evaluaciones de riesgos y asegurar la conformidad con regulaciones de privacidad como GDPR y NIST CSF. Con un enfoque en la mejora continua y la implementación de programas de seguridad, tendrás la oportunidad de influir en la estrategia de ciberseguridad de la organización. Si tienes más de 5 años de experiencia en ciberseguridad, esta es una oportunidad emocionante para unirte a un equipo innovador y dinámico.

Formación

• 5+ años de experiencia en ciberseguridad, centrado en cumplimiento y privacidad.
• Experiencia en implementación/auditoría de ISO 27001 y NIST CSF.

Responsabilidades

• Gestionar marcos de cumplimiento interno para privacidad y NIST CSF.
• Realizar análisis de riesgos para proyectos internos y nuevas aplicaciones.

Conocimientos

Gestión de cumplimiento

Gestión de privacidad

Evaluación de riesgos

Auditoría de seguridad

Desarrollo de aplicaciones seguras

Educación

Máster en Ciencias de la Computación

Máster en Seguridad de la Información

Herramientas

ISO 27001

NIST CSF

GDPR

LGPD

CPRA

Descripción del empleo

Descripción del trabajo

Our client is a global leader in Testing, Inspection and Certification (TIC), delivering high quality services to help clients meet the growing challenges of quality, safety, environmental protection, and social responsibility.

We are hiring a Compliance And Privacy Specialist to join the global security team.

To support the Cybersecurity GRC Manager in implementing and maintaining the organization's cybersecurity strategy, with a focus on compliance, privacy, and risk management aligned with NIST CSF, ISO 27001, and privacy regulations.

Key Responsibilities :

1. Compliance and Privacy Management :
2. Manage internal compliance frameworks for Privacy and NIST CSF
3. Translate security policies into actionable plans for users, project teams, and businesses
4. Support implementation and maintenance of ISO 27001 certification
5. Ensure compliance with privacy regulations (GDPR, LGPD, CPRA, etc.)
6. Risk Assessment and Management :
7. Perform risk analyses for internal projects and new business applications
8. Conduct cloud risk analyses and provide security recommendations
9. Support the Cybersecurity GRC Manager in maintaining the organization's risk register
10. Audit and Assessment :
11. Participate in the internal audit program, focusing on privacy and NIST CSF compliance
12. Improve audit methodologies and manage audit schedules
13. Perform privacy audits and NIST CSF assessments
14. Security by Design :
15. Implement and manage the "security by design" framework
16. Advise project teams on security measures from project initiation to go-live
17. Provide guidance on secure application development
18. Stakeholder Management :
19. Act as a point of contact for business teams on cybersecurity topics
20. Manage and respond to clients' security questionnaires
21. Conduct security maturity reviews and provide recommendations
22. Continuous Improvement :
23. Stay updated on the latest developments in information security standards and ecosystem
24. Contribute to the development of an ISS knowledge base within the organization
25. Support the implementation of security programs (e.g., data classification, DLP)

Education :

1. Master's degree in Computer Science, Information Security, or related field

Relevant certifications :

1. CISSP, CISM, ISO 27001 Lead Auditor, NIST CSF Practitioner

Experience :

1. 5+ years of experience in cybersecurity, with a focus on compliance and privacy
2. Experience in implementing/auditing ISO 27001, NIST CSF, and privacy regulations
3. Experience in information systems risk evaluation and compliance program implementation