IT Security & Product Risk Lead

Philip Morris International; Albarraque; Presencial; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

Philip Morris International IT seeks an experienced Information Security professional to act as the single point of contact for risk reduction and governance across projects and BAU. You will collaborate with R&D to apply security expertise, support embedded device security, and drive security-by-design across the lifecycle.

The role requires strong communication, agile mindset, and cross-border collaboration.

Qualificações

• 5+ years of experience in information security, IT risk management, or IT audit within a large organization.
• Proven track record in secure systems development lifecycle across design, development, and maintenance.
• Knowledge of typical application design patterns (web, mobile, APIs).
• Understanding of cloud architectures (SaaS, IaaS, PaaS, FaaS) and their security implications.
• Knowledge of IAM concepts (SSO, identity federation) and standards (SAML, OAuth 2.0, OpenID).
• Familiarity with OWASP Top 10 and regulatory requirements (GDPR, data privacy).
• Experience with electronics manufacturing and supply chain service providers.
• Strong communication and ability to explain complex topics to non-technical people.
• Agile/DevOps experience and cross-cultural collaboration.

Responsabilidades

• Act as SPOC for Information Security to implement, report and follow up on risk reduction activities with projects and BAU.
• Engages with business stakeholders from the R&D function on projects requiring Information Security expertise.
• Support cybersecurity requirements for embedded devices across the design, development, and manufacturing lifecycle.
• Engage with IT platform peers on security-by-design and privacy-by-design concepts and tools.
• Perform governance on key security metrics for systems under responsibility.
• Conduct software security assessments and approvals.
• Evaluate new technologies (AI, ML, IoT) for security implications.
• Lead general IT control activities and vendor risk governance.
• Lead security clauses in contracts and ensure alignment with PMI standards.
• Monitor adherence to contractual security obligations and escalate non-compliance.
• Ensure timely remediation of findings from third-party assessments.
• Participate in security awareness trainings and coaching.
• Participate in cyber incidents from identification to eradication with SOC/IRM teams.
• Perform risk assessments and vulnerability management for functional areas.
• Drive cybersecurity resilience activities (backup, DR).
• Drive security maturity assessments and audit participation.
• Represent IT during internal or external audits.

Conhecimentos

Information Security

IT Risk Management

IT Audit

Security Governance

Cloud Security

Ferramentas

SAML

OAuth 2.0

OpenID

OWASP

Descrição da oferta de emprego

Philip Morris International IT seeks an experienced Information Security professional to act as the single point of contact for risk reduction and governance across projects and BAU. You will collaborate with R&D to apply security expertise, support embedded device security, and drive security-by-design across the lifecycle.

The role requires strong communication, agile mindset, and cross-border collaboration.