Cybersecurity IT_OT Manager

Randstad Portugal; Sines; Híbrido; EUR 60 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

International Environment

Direct contract

Health insurance

Meal allowance

Annual bonus

Continuous training

Resumo da oferta

A Randstad Digital está a contratar um Cybersecurity IT_OT Manager para integração direta numa empresa localizada em Sines. O regime de trabalho é híbrido (4 dias no local; 1 dia remoto/semana).

Serão geridas atividades de investigação de incidentes, conformidade com padrões de segurança e colaboração com equipas IT/OT para manter padrões e registos, incluindo participação em comités locais de segurança.

Qualificações

• Certificações em cibersegurança obrigatórias ou desejáveis (GIAC, ISACA, (ISC)2, etc).
• Experiência comprovada em gestão de segurança IT/OT e conformidade
• Licenciamentos/Certificações relevantes e capacidade de liderar equipa de segurança

Responsabilidades

• Suportar os Business Owners na investigação e remediação de incidentes violação.
• Comunicar consciência de segurança e promover compreensão das normas de segurança e requisitos regulatórios locais.
• Executar operações de segurança e monitorização de sistemas.
• Colaborar com o IT/OT Security Officer na definição de procedimentos de segurança.
• Colaborar na revisão/monitorização de conformidade com políticas e em auditorias internas.
• Coordenar com altas estruturas para incidentes, desastres ou crises.

Conhecimentos

Cybersecurity

Incident response

Security architecture

Risk assessment

Team leadership

Project management

English proficiency

Formação académica

Universidade em Ciência da Computação

Ferramentas

F5 Load Balancer

Cisco

Check Point

Palo Alto

Fortinet

Hyper-V/VMware

Dynatrace

Descrição da oferta de emprego

Randstad Digital is hiring a Cybersecurity IT_OT Manager for direct integration, in a company located in Sines.

Hybrid work model (4 days on-site; 1 days remote / week).

responsabilidades chave

Support Our client's Business Owners in the investigation and remediation of incidents/violations.

Communicate security awareness and develop wide understanding of the existing Security Standards and local regulatory requirements.

Perform security and system performance operations/monitoring activities.

Collaborate with IT/OT Security Officer in the definition of technical and non-technical IT security procedures defined in Our client's policies and Security Standards in place.

Collaborate with IT/OT Security Officer in the revision and monitoring of compliance with the policy statements and contribute to Internal Audit and Risk Management operations.

Liaise with internal Management functions when appropriate (typically Quarterly Local Security Committees).

Coordinate and liaise with Our client's Senior management, Regional, Group and external stakeholder in the event of an incident, disaster, or crisis.

STRATEGIC decision and action on standards, weekly planning, project management requirement

• Define and maintain standards for quality, safety, and compliance.
• Ensure compliance with relevant regulations and laws.
• Establish best practices and guidelines for all aspects of the organization's operations.
• Develop and implement weekly plans to ensure the successful execution of projects and initiatives.
• Set priorities and allocate resources to achieve strategic goals.
• Monitor progress and adjust plans as needed.
• Plan, execute, and manage projects to achieve business objectives.
• Identify and manage risks and issues.
• Monitor project performance and communicate progress to stakeholders.
• Support in overseeing Security Requirements for new solutions (as cloud service, emerging technology) requirements, part of the Security by Default standards in place.
• Oversee the security and monitoring operations performed by the Local Security Officer and/or local IT security team.
• Act as PMO regarding current multiyear Security Standards programs (IT and OT).

RISK & COMPLIANCE management on Operation, Monitoring, and Investigation as following:

• Ensure compliance with policies, procedures, and regulations.
• Identify and assess operational risks and implement controls to mitigate them.
• Continuously monitor operations to identify and address potential issues.
• Monitor compliance with laws, regulations, and industry standards.
• Identify and analyse risks and trends.
• Report findings to senior management and recommend corrective actions.
• Conduct investigations into potential violations of policies, procedures, or laws.
• Collect and analyse evidence to determine the root cause of the issue.
• Develop and implement corrective actions to prevent future occurrences.
• Drafting and submission of incident reports to CNCS within legal deadlines.
• The support for the CNCS platform registration and annual external reporting.

competências

• One or more of the following certifications:GIAC Security Essentials Certification
• GIAC Security Leadership Certification
• ISACA Certified Information Security Manager
• Microsoft Certified Systems Engineer: Security
• (ISC)2 SCCP
• (ISC)2 CISSP
• (ISC)2 ISSAP
• ISO 27001/27002
• Cisco IOS Network Security
• Experience in enterprise security architecture design.
• Experience in enterprise security procedure creation.
• Design and deliver employee security awareness training.
• Develop Business Continuity Plans and Disaster Recovery Plans based on ISO 24762
• Experience in administering IT security controls in an organization.
• Working technical knowledge of infrastructure, networks, databases, and systems in relation to IT Security and IT Risk.
• Familiarity with Investigative and analytical techniques, procedures, and requirements.
• Mandatory Proficiency in English for reading, writing, and speaking.
• Solid background in Network Administration
• In-depth experience in Cisco network supervision tools and component.
• Proven hands-on with F5 load balancer or similar load balancing technology
• Knowledge and experience in Routing, Switching, TShot, VPN, FW (Cisco, Check Point, Palo Alto, Fortinet).
• Firewall configuration (Cisco, Check Point, Palo Alto, Fortinet)
• Knowledge of networks, technologies, and security protocols (Radius, IPv4/IPv6, NAT, DNS, DHCP, Outdoor Wireless, IPS/IDS).
• Solid understanding of Switching and Multicast.
• Solid knowledge in Virtualization (Hyper-V, VMware)
• Knowledge in Dynatrace, monitoring and other troubleshooting scanning tool.
• Welcome knowledge in usage of RPA on proactive networking monitoring.
• Knowledge in advanced technology solution as Fluidmesh.Good problem-solving, analysis capability and investigation mindset.
• Strategic thinking and capability of operationalizing daily basis tasks and hands-on approach.
• Teamwork and collaboration skills.
• Excellent communication and interpersonal skills.
• Responsibility, accountability, Integrity, and Reliability.
• Agility and ability on fast response and resolution time.
• Customer centricity and service mindset.
• Excellent communication and leadership skills.
• Organizational and time-management skills.
• Decision-making skills.
• Problem-solving and learning agility.
• High ability on managing leadership and stakeholders in local, regional and global layers.
• Experience in team management/leading role.University degree in Computer science and/or several years equivalent work experience.
• Project Management skills (preference for proven PMP certification)
• Cybersecurity Certifications.
• Compliance and Risk Certifications.

principais benefícios

• International Environment; Continuous training; Direct contract (contrato sem termo), health insurance, meal allowance /work day, annual bonus.

Randstad's mission is to become the most equitable and specialised talent company in the world, so we reiterate that we welcome people with a wide range of skills and experience. We are committed to ensuring that our recruitment and hiring process meets the needs of all people.