Information Security Expert

Phiture; Braga; Híbrido; EUR 45 000 - 70 000; Tempo integral

Resumo da oferta

A global leading company in Braga is seeking a (Senior) Information Security Expert to implement and maintain information security systems. The ideal candidate will have experience in managing security risks, conducting audits, and developing security policies. This role offers health insurance and hybrid working options, fostering personal growth in an international environment.

Serviços

Health insurance

Hybrid working mode

International career

Training opportunities

Qualificações

• 3+ years of experience in implementing Information Security programs.
• Advanced understanding of security frameworks.
• Experience managing audits and ensuring compliance.

Responsabilidades

• Develop and maintain information security policies.
• Implement an Information Security Risk framework.
• Manage investigation and response to security incidents.

Conhecimentos

Information security principles and best practices

Communication skills

Risk management

Audit management

Formação académica

Bachelor's degree in Computer Science, Information Technology, Engineering, Laws, Economics or related field

Ferramentas

ISO 27001

CIS Controls

NIST CSF

Descrição da oferta de emprego

Overview

We are seeking a highly motivated and detail-oriented individual to join our Information Security department as a (Senior) Information Security Expert and part of our security operations in Europe.

In this role, you will play a key part to implement and maintain our information security management system (ISMS), to manage the lifecycle of information security risks, and enhancing our overall information security posture to safeguard our organization's assets.

If you are passionate about information security, this will be a great opportunity to grow in a dynamic and collaborative international environment.

What You\'ll Be Doing

• Policy Development and Maintenance: Develop and maintain information security policies and procedures that align with business needs and industry best practice and ensure compliance to address requirements of an ISMS.
• Risk Management: Implement an Information Security Risk framework to assess, monitor and review information security risks for the organization; maintain risk treatment strategies and work with risk owners to manage the lifecycle of security risks.
• Reporting: Implement and deliver regular security reports to senior management and other stakeholders, providing insights into the status of information security metrics; report on security incidents, policy violations, and audit findings, offering recommendations for improvements as part of the regular top management reviews.
• Audit Management: Plan and implement an information security audit program to oversee security audits, both internal and external; manage remediation efforts for any identified vulnerabilities, policy violation or non-conformities uncovered during audits.
• Security Incident Management: Lead and manage the investigation and response to security incidents ensuring timely and effective containment, eradication, and recovery actions; document incident details, actions taken, and contribute to post-incident reports for continuous improvement.
• Security Training and Awareness: Develop and implement security training and awareness programs to educate our employees on security best practices, policies, and guidelines; ensure ongoing education on the latest information security threats; collaborate with different groups to promote a security-conscious culture.

Qualifications

• Bachelor\'s degree in Computer Science, Information Technology, Engineering, Laws, Economics or related field
• Solid understanding of information security principles and best practices
• Proven experience (3+ years) in implementing Information Security programs and operating an Information Security Management System
• Advanced understanding of security frameworks such as ISO 27001, CIS Controls or NIST CSF
• Proven experience in information security risk management and its implementation
• Experience managing audits, working with various stakeholders like legal or compliance teams and ensuring compliance with security regulation such as GDPR
• Effective communication skills to convey complex information security issues to various stakeholders as well as to collaborate with team members
• Certifications in Information Security such as lead auditor or implementer for ISO 27001 are welcome
• Able to travel and to adapt to business needs

What Do We Offer

• Health insurance
• Hybrid working mode
• International career
• Integration in global leading company with a culture based on relationships, human value, and efficiency
• Training opportunities and personal growth opportunities associated with working at a global and innovative company

How to Apply

Are you the Information Security Manager we are looking for?

Apply now via LinkedIn Fujifilm Portugal or send your resume to ******.

We are looking forward to your reaction!

About Fujifilm

With European headquarters in Ratingen near Düsseldorf / Germany, a major manufacturing facility in Tilburg / Netherlands, and offices in many European countries and the Portuguese headquarters in Porto together with Fujifilm Corporation, we are a global organization with more than 200 subsidiaries, and approximately 80,000 employees.

We provide innovative products and services in the fields of photography, medical systems, graphics systems, document solutions, optical devices, and biotechnology.