Information Security Officer

Descrizione del lavoro:

The ISO has overall responsibility for the effective implementation and maintenance of the Information Security Management System (ISMS) within (COMPANY NAME) Technology. Furthermore, the ISO oversees the fulfilment of Information Security requirements in all services provided by (COMPANY NAME) Technology as shared service provider to its customers.

What you can find at (COMPANY NAME) Technology:

* Work Life - Balance: We offer flexible working hours so you can start your working day according to your needs. In addition, during the summer and every Friday of the year, you have the option of intensive working hours, which will allow you to enjoy more free time for yourself.

* International and Multicultural Environment: We value the diversity and richness that comes from working in an international and multicultural environment. With more than 52 different nationalities represented in our company, we offer our employees the opportunity to collaborate with people from all over the world, enriching the work environment and providing the opportunity to learn and grow in a truly global setting. This diversity allows us to have a broader perspective, foster creativity and innovation, and promote an inclusive work environment where every voice is heard and valued.

* Professional Growth Opportunities: We are committed to the professional development of our employees and provide numerous opportunities for growth within the company. We value internal talent and promote internal advancement, offering training programs, mentoring, and skills development that allow our employees to advance in their careers.

* Compensation and Benefits Package: It includes a company bonus plan, pension, employee stock program, and multiple employee discounts (details vary by location).

What will make you succeed in this position?

* Higher education degree in IT or comparable technical education.

* Information Security experience related to risk management, controls assurance & compliance programs.

* Experience with internal controls, risk assessments, business process and internal IT control testing or operational auditing.

* Previous experience creating and/or performing review and gap analysis of information security policies and standards against cybersecurity frameworks.

* Recognized Information Security Certifications e.g. CISSP, CISM. CRISC or ISO27001 Lead Auditor preferred.

* Detailed understanding of information security and risk frameworks/standards (ISO 27001/2, NIST, PCI-DSS, COBIT etc.).

* Comprehensive understanding of Information Security standards and compliance regulations

* Excellent verbal, written communication skills and experience presenting across the various levels within the business up to senior leadership.

* Proven analytical, audit and investigative skills, judgement and reasoning ability.

* Project management and reporting experience and the ability to operate in a deadline-oriented environment.

Your mission in the role will be:

* Each Information Security Function shall be responsible for oversight of the related ISMS activities, risk identification and assessment, prevention and advice with respect to the Information Security Risk areas: of the local (COMPANY NAME) Technology and of the services provided by the local (COMPANY NAME) Technology to its customers.

* The function is responsible for the effective implementation of (COMPANY NAME) Technology's Information Security principles. This includes to promptly report to the IS Function matters which potentially have impact on the (COMPANY NAME)'s reputation.

About (COMPANY NAME) Technology

(COMPANY NAME) Technology is the global IT service provider for (COMPANY NAME) and delivers IT solutions that drive the digitalization of the Group. With more than 12,000 employees located in 51 countries around the globe, (COMPANY NAME) Technology works together with other (COMPANY NAME) entities in pioneering the digitalization of the financial services industry.

We oversee the full digitalization spectrum - from one of the industry's largest IT infrastructure projects that includes data centers, networking and security, to application platforms that span from workplace services to digital interaction. In short, we deliver full-scale, end-to-end IT solutions for (COMPANY NAME) in the digital age.

D&I statement

(COMPANY NAME) Technology is proud to be an equal opportunity employer encouraging diversity in the working environment. We are interested in your strengths and experience. We welcome all applications from all people regardless of gender identity and/or expression, sexual orientation, ethnicity and cultural background, age, nationality, religion, disability, or philosophy of life.

Join us. Let´s care for tomorrow.

You. IT

56426 | Ingeniería informática y tecnológica | Profesional / Senior | Non-Executive | (COMPANY NAME) Technology | Jornada completa | Indefinido