Cloud Security Specialist

Intrum; Almada; Presencial; EUR 50 000 - 75 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Crescimento profissional

Equipe global

Cultura de apoio

Formação contínua

Resumo da oferta

A Intrum procura um profissional de Segurança da Informação com forte experiência em conformidade e segurança em nuvem para apoiar owners e stakeholders. O papel exige liderança, habilidades de comunicação em inglês e capacidade de gerir riscos em ambientes globais.

Serão esperadas 5+ anos de experiência, conhecimento de normas como ISO27001/2, COBIT, CSF, PCI-DSS e GDPR, bem como a disposição de obter certificações relevantes.

Qualificações

• 5+ anos de experiência em programas de conformidade de segurança, preferencialmente no setor financeiro ou tech.
• 5+ anos de experiência prática em segurança (Cloud) ou função tecnológica relacionada.
• Certificações como CISSP, CCSP (ou disposição para obter).

Responsabilidades

• Apoiar stakeholders na tomada de decisões traduzindo requisitos de segurança para soluções técnicas.
• Planejar, executar e gerenciar atividades de monitorização de segurança conforme o programa de monitorização de segurança da empresa.
• Atuar como SME de segurança da informação perante Group e mercados locais quanto a riscos e mitigação.
• Cooperar com equipes de risco e compliance para manter alinhamento de monitorização e relatórios de riscos.
• Educar stakeholders sobre responsabilidades, requisitos e riscos de segurança.
• Apoiar demonstração de compromisso de segurança a auditores externos e clientes.

Conhecimentos

Segurança na nuvem

Conformidade de segurança

Comunicação em inglês

Liderança

Controles internos

Gestão de vulnerabilidades

Criptografia

Gestão de acessos

Redes e infraestruturas

Conhecimentos ISO27001/2

Descrição da oferta de emprego

Descrição do cargo

At Intrum, you will grow by making a difference. You will do it in a highly international environment and in a supportive culture where effort counts.

Responsibilities

• Support business owners, technical owners, and other stakeholders in decision making by translating security requirements and best practices to technical solutions.
• Plan, execute and manage continuous monitoring and inspection activities in accordance with the Group information security monitoring program that effectively identifies, reviews, analyzes, communicates, and tracks security control deficiencies and corrective action plans.
• Advise Group and Local Market stakeholders as Information Security subject matter expert about IT and Information security risk and risk mitigation strategies.
• Co-operate with colleagues in the Group and local market Risk and Compliance teams to ensure an aligned approach and input to operational risk monitoring and reporting related to information security risks.
• Educate and inform stakeholders of information security related responsibilities, requirements, and risks.
• Help demonstrate Intrum's commitment to security to external stakeholders (i.E. external audits and client due diligence requests).
• Support the development and oversight of required corrective action plans relating to security compliance issues and security control deficiencies.
• Support the identification, validation and mitigation of information security risks required for financial institutions across diverse geographies.
• Support periodic compliance status reporting to Group and local senior management.

Qualifications

• 5+ years' experience with supporting security compliance programs preferably within the financial or tech industry.
• 5+ years combined experience in a hands-on (Cloud) security or technology related role (i.E., cloud architect, engineer or administrator role).
• Demonstrable experience with one or more data security frameworks, regulatory standards or legal requirements including for instance;ISO27001/2, COBIT, CSF,PCI-DSS, GDPR, etc.
• Effective English communication skills (verbal & written).
• Demonstrable leadership skills with the experience of working effectively across various levels and different locations and stakeholders with different technical or security experience levels.
• Demonstrable experience in processes for assessing and designing internal controls for large scale organizations.
• Demonstrable broad technical understanding of security controls across all common information security domains, including for instance access management, encryption, vulnerability management, and network security, applicable to both cloud and traditional infrastructure.
• Additionally, proficiency in workplace, server, and network technologies is required.
• Relevant certifications like for instance CISSP, CCSP or similar (or willing to obtain).

Benefits

• A challenging, exciting and developing position in an international company with growth ambitions.
• Highly motivated and skilled co-workers globally.
• Being part of a supportive culture where effort counts.
• We facilitate your learning through different learning arenas.