Product specialist

Inetum; États-Unis; Hybride; USD 31 000 - 46 000; Plein temps

Avantages offerts par ce poste

Система кафетерия

Бюджет на тим-билдинг

Благотворительные инициативы

Résumé du poste

Inetum ищет специалиста по Product Security для разработки и поддержки центрального каталога контролей безопасности. Ваша задача — обобщить требования из стандартов и регуляторов, синхронизировать подходы и обеспечить прослеживаемость источников и контролей.

Ключевые компетенции: анализ и гармонизация требований, знание NIST 800-53 и IEC 62443, опыт документирования и технического письма. В должности применяется гибридный режим работы в Польше, с возможностью удаленной работы частично.

Qualifications

• Опыт анализа и определения механизмов защиты.
• Знание NIST 800-53 и IEC 62443.
• Умение сопоставлять требования с контролями безопасности.

Responsabilités

• Анализирует и сопоставляет требования безопасности из множества стандартов и регламентов.
• Разрабатывает централизованный каталог контролей безопасности.
• Обеспечивает прослеживаемость между источниками требований и контролями.

Connaissances

Security requirements analysis

NIST 800-53

IEC 62443

Security controls mapping

Regulatory compliance

English (C1)

Polish language

Documentation

Technical writing

Outils

Excel VBA

Description du poste

Описание:

We are looking for someone to join our Product Security project and be responsible for developing and maintaining a central catalog of security controls. The project focuses on analyzing, organizing, and harmonizing security requirements derived from various standards, frameworks, and regulations. A key aspect of the role will be mapping requirements and defining a common set of security controls that will standardize the approach to Product Security within the organization.

Задачи:

analyzing and comparing security requirements derived from various standards, frameworks, and regulations creating and developing a central Security Controls Catalog mapping and harmonizing security controls across different frameworks, including NIST, IEC 62443, and AI Security identifying the most stringent requirements and translating them into a common set of security controls ensuring full traceability between source requirements and the controls in the catalog collaborating with experts and teams in Product Security, Architecture, and Compliance teams developing a process for managing, maintaining, and updating the catalog supporting process automation by creating a solution that facilitates mapping and reporting, e.g., using Excel VBA

Требования:

Experience in analyzing and defining security controls Knowledge of NIST 800-53 and IEC 62443 Security Requirements Engineering Security Controls Mapping / Framework Mapping Security Compliance / Regulatory Compliance Ability to analyze and harmonize security requirements from multiple sources Experience in creating documentation and requirement catalogs Very good English (C1) Independence and ability to work with multiple stakeholders Proficiency in Polish and English at the C1 level is essential. Будет плюсом: AI Security; NIST AI RMF; Cyber Resilience Act (CRA); Experience in Medical Device Security; Experience in Product Security Governance; Traceability Management; Technical Writing

Условия:

Flexible working hours. Hybrid work model, allowing employees to divide their time between home and modern offices in key Polish cities. A cafeteria system that allows employees to personalize benefits by choosing from a variety of options. Dedicated team-building budget for online and on-site team events. Opportunities to participate in charitable initiatives and local sports programs. A supportive and inclusive work culture with an emphasis on diversity and mutual respect. Remote or hybrid work from one of our office in Warsaw, Poznań, Lublin, Katowice or Rzeszów.