IT Product Senior Security Owner

LUZA Group; Lisboa; Hybrid; EUR 60,000 - 100,000; Full time

Benefits offered by this job

Remote work when possible

Equipment provided

Benefits plan

Job summary

LUZA Group is seeking an experienced Information Security professional to lead security for selected products, ensuring alignment with Group standards and controls. You will work with IT Product teams to implement security requirements, perform risk-based security testing, and drive remediation plans across a multinational environment.

The role requires 7+ years in IT security, strong knowledge of ISO frameworks, IAM, encryption, and secure SDLC, with emphasis on Azure cloud security and

Qualifications

• Degree in Information Security or Computer Science.
• 7+ years of IT and IS security experience.
• Familiar with ISO 27001/2700x, IAM, encryption, secure protocols.
• Identity and access management expertise.
• Azure cloud security expertise.
• Strong analytical and cross-cultural collaboration skills.
• English at C1 level; French is a plus.

Responsibilities

• Ensure security for specific products and maintain security controls per Group standards.
• Support security and compliance control centre to ensure product compliance with Group Security standards.
• Develop security requirements and security controls with application teams.
• Plan and support security tests and remediation tracking.
• Document internal security processes and create guidance for IT Product teams.
• Lead security meetings and produce deliverables and reports.

Skills

Information Security

Identity & Access

Security Testing

Encryption

Secure SDLC

Vulnerability Mgmt

Azure Cloud Security

Education

Degree in Information Security

Job description

Luza is an all-inclusive consulting company focused on talent, tech and innovation. We exist to elevate companies and humans all around the world, making change, from the inside to the outside.

We believe that technology + human kindness positively impacts every community around the world. Our approach is simple, we see a world without borders, and believe in equal opportunities. We are guided by our core principles of spreading positivity, good energy and promote equality and care for others.

Our hiring process is unique! People are selected by their value, education, talent and personality. We dont present ethnicity, religion, national origin, age, gender, sexual orientation or identity.

Its time to burst the bubble, and we will do it together!

What You'll do:

• Ensure, for specific Products, the security overall
• Support security and compliance control centre to ensure Products compliance with Group Security standards
• Work on security requirements and security controls implementation with the application teams
• Methodize and support on security tests
• Own security remediation plans
• Provide overall security support to IT Product teams
• Create and document internal processes
• Methodize and drive security relevant meetings
• Service Deliverables (but not limited to)
• Documented security posture for specific Products, aligned with Group Security standards
• Defined and maintained security requirements and security controls for the relevant applications
• Security test plans, execution support and documented results
• Security remediation plans, including tracking of implementation status
• Documented internal security processes and procedures
• Structured documentation and support materials for IT Product teams on security topics
• Meeting agendas, minutes and action plans for security-relevant sessions

Hybrid work model;

Who You Are:

• Degree in a relevant area, such as Information Security, Computer Science
• Minimum expertise in Information Technology and IS Security: 7 years
• Security information systems standards and frameworks (ex: ISO 2700x)
• Identity and Access control
• Security Assessment and Testing
• Encryption methods and secure protocols
• Secure Software Development Life Cycle
• Vulnerability management
• Azure cloud security expertise
• Organizational and analytical skills for complex environments (multi-cultural / multi-country / geographically distributed teams)
• English Environment at C1 level (proficient user); French Environment appreciated
• Nice to have: Data Privacy / GDPR expertise
• Nice to have: Operational Resilience
• Nice to have: ITIL Framework

What you'll get:

• - Wage according to candidate's professional experience;
• - Remote Work whenever possible;
• - Delivery of work equipment adjusted to the performance of functions;
• - Benefits plan;
• - And others.

Work together with expert teams on projects of large magnitude and intensity, long term together with our clients, all leaders in their industries.

Are you ready to step into a diverse and inclusive world with us?

Together we will promote uniquess!