FBS Information Security Specialist

• Cybersecurity Risk Assessment: Identify, assess, document, and communicate data security and privacy risks, recommending appropriate controls and countermeasures to protect enterprise information assets.


• Threat Analysis and Risk Mitigation: Proactively identify and mitigate moderate to major cybersecurity risks, analyze threat intelligence, and support the development of effective cyber defense strategies across the organization.


• Security Assessments and Testing: Conduct third-party security risk assessments, project security reviews, business risk assessments, and security testing for existing and proposed systems.


• Vulnerability and Technical Risk Management: Perform technical and nontechnical assessments across applications, networks, infrastructure, and local and global computing environments to identify weaknesses and recommend remediation measures.


• Change and Project Security Reviews: Evaluate security implications when applications or systems undergo significant changes, ensuring that potential risks are identified and addressed before implementation.


• Security Controls and Architecture: Define and integrate appropriate security controls into business and technology processes, participate in architectural discussions, and recommend solutions that balance protection, usability, and delivery timelines.


• Regulatory Compliance: Develop and maintain processes that support compliance with applicable legal, regulatory, and internal information security requirements.


• Cybersecurity Incident Management: Lead improvements in the detection, investigation, and response to cybersecurity incidents, overseeing appropriate preventive, detective, and corrective measures when threats are identified.


• Security Configuration and Compliance Monitoring: Review and approve advanced security configurations, investigate unusual compliance patterns, and evaluate their impact on enterprise risk and the effectiveness of security programs.


• Audit and Remediation Management: Participate in cybersecurity audits, track findings and recommendations, coordinate remediation activities, and ensure assigned audit actions and regulatory requests are addressed accurately and within established deadlines.


• Security Policy Development: Create, review, and update information security policies, procedures, standards, and guidelines to reflect evolving threats, business requirements, and compliance obligations.


• Stakeholder Relationship Management: Build effective working relationships with local and global business leaders, IT teams, and senior stakeholders to promote security awareness and support informed decision-making.


• Cross-Functional Project Leadership: Lead initiatives involving multidisciplinary and geographically distributed teams, influencing stakeholders to develop innovative solutions to complex security challenges.


• Technical Security Advisory: Serve as a subject matter expert across key technology platforms, providing intermediate to advanced security guidance and acting as a primary point of contact for IT teams seeking security expertise.


• Security Awareness and Advocacy: Promote the value of information security throughout the organization and encourage the adoption of secure practices across business and technology operations.

Requirements

• Relevant Professional Experience: Demonstrated experience in information security, cybersecurity, IT risk management, or a related technical field, including the ability to independently manage moderately complex to advanced security assessments.


• Cybersecurity Risk Management: Strong knowledge of security risk assessment methodologies, threat analysis, vulnerability management, risk mitigation strategies, and security control evaluation.


• Technical Security Expertise: Experience assessing enterprise applications, networks, infrastructure, computing environments, and technology platforms to identify vulnerabilities and recommend effective safeguards.


• Information Security and Data Privacy: Solid understanding of data protection principles, confidentiality, integrity, availability, and the controls required to safeguard sensitive information.


• Security Testing and Assessments: Practical experience conducting security testing, third-party risk assessments, project security reviews, business risk assessments, and technical or nontechnical vulnerability assessments.


• Incident Response: Knowledge of cybersecurity incident detection, investigation, response, remediation, and continuous improvement of security operations.


• Security Architecture and Configuration: Ability to evaluate security configurations, contribute to architecture reviews, integrate security controls into technology solutions, and provide expert recommendations for complex systems.


• Regulatory Compliance and Auditing: Familiarity with information security regulations, internal control frameworks, audit processes, evidence collection, remediation tracking, and regulatory response requirements.


• Security Governance and Documentation: Experience developing or maintaining security policies, procedures, standards, guidelines, and risk documentation.


• Analytical and Problem-Solving Skills: Strong critical thinking and investigative abilities, with the capacity to interpret complex or ambiguous security findings and translate them into practical recommendations.


• Communication and Stakeholder Management: Excellent communication and relationship-building skills, with the ability to explain technical risks clearly, influence decision-makers, and collaborate effectively with technical and nontechnical audiences.


• Project Leadership: Ability to coordinate cross-functional initiatives, manage competing priorities, and work effectively with local and international teams.


• Autonomy and Accountability: A proactive, detail-oriented approach, with the confidence to make informed decisions, manage assigned responsibilities independently, and deliver results within established timelines.


• Continuous Learning: Commitment to staying informed about evolving cybersecurity threats, security technologies, industry best practices, and emerging compliance requirements.


• Language Skills: Professional English communication skills are beneficial for collaboration with international teams and stakeholders.

Benefits

• Competitive Compensation: Attractive salary package based on the role and experience.


• Performance-Based Bonuses: Additional compensation opportunities linked to performance.


• Comprehensive Benefits Package: Access to a range of employee benefits.


• Private Health Insurance: Healthcare coverage as part of the benefits package.


• Paid Time Off: Paid leave to support personal well-being and work-life balance.


• Flexible Work Arrangements: Remote and/or office-based working options, depending on applicable arrangements.


• Training and Development: Opportunities to expand your technical expertise through professional learning initiatives and development programs in partnership with recognized organizations.


• Global and Multicultural Environment: Collaborate with diverse teams and experienced professionals in an international workplace.


• Career Development Opportunities: Build your expertise in enterprise cybersecurity, information security governance, risk management, and technology protection.


• Established Professional Environment: Work within a globally recognized organization with a strong market presence and experienced leadership.


• Local Payroll and Benefits Administration: Employment administration is supported through a local Employer of Record arrangement.