Information Security Officer

BTO spa; Cremona; In loco; EUR 50.000 - 80.000; Tempo pieno

Descrizione del lavoro

A consulting company, BTO spa, is seeking an Information Security Officer to manage the Information Security Management System for clients in the Insurance sector. The ideal candidate will have a Master’s degree, extensive experience in risk management and compliance, and relevant certifications. The role requires effective communication skills and willingness for business travel to Munich.

Competenze

• At least 7 years of experience in Information Security.
• Experience with cybersecurity frameworks (ISO 27001, NIST, etc.).
• Recognized certifications (CISSP, CISM, etc.) preferred.

Mansioni

• Implement and maintain the Information Security Management System (ISMS).
• Oversee risk identification and assessment related to Information Security.
• Report matters impacting client reputation to the IS Function.

Conoscenze

Risk Management

Information Security

Compliance Programs

Communication

Interpersonal Skills

Formazione

Master’s Degree in IT or comparable technical education

Descrizione del lavoro

BTO, consulting company offering Project Management services in the IT field, is looking for an Information Security Officer to support a client in the Insurance field in Munich, Germany.

• Information Security Officer
• Main Activities

The Information Security Officer (ISO) is assigned to Security Assurance Manager. The ISO has overall responsibility for the effective implementation and maintenance of the Information Security Management System (ISMS) within the company. Furthermore, the ISO oversees the fulfilment of Information Security requirements in all services provided by the organization as shared service provider to its customers. The scope of ISO covers several Business Units.

• The overall activities concerning the following tasks
• Responsible for oversight of the related ISMS activities, risk identification and assessment, prevention and advice with respect to the Information Security Risk areas : of the company and of the services provided by the company to its customers;

Responsible for the effective implementation of company’s Information Security principles. This includes to promptly report to the IS Function matters which potentially have impact on the client’s reputation.

• Requirements
• Master’s Degree in IT or comparable technical education;
• At least 7 years of experience in the Information Security field related to project management, risk management & compliance programs;
• Experience with internal controls, risk assessments, business process and internal IT control testing or operational auditing;
• Previous experience creating and / or performing review and gap analysis of information security policies and standards against cybersecurity frameworks;
• Detailed understanding of information security and risk frameworks / standards (ISO 27001 / 2, NIST, PCI-DSS, COBIT etc.);
• Recognized Information Security Certifications e.g. CISSP, CISM. CRISC or ISO27001 Lead Auditor preferred;
• Good communication and interpersonal skills;
• English is mandatory and Italian is a nice to have;

Willingness to Business Trips to Munich.

LI-DNI