Information Security Officer (Central Hosting Platforms and Services)

Long Description

Day-to-Day Responsibilities​

• Full autonomy over a defined scope of  central hosting platforms and services from a security perspective


• Engage directly with the responsible operational and product development  teams  for that scope to perform
  
  
  
  • security risk assessments
  
  
  • vulnerability management
  
  
  • security risk management
  
  
  • security controls definition s to ensure risks are mitigated
  
  
  • security by design/system hardening  implementation
  
  
  • security approvals for new services  or enhancements to existing services
  
  
  
  


• Report and advise the local management on security risks and actions plans​


• Managing the security governance with the local management of that area


• Support and follow-up on Security Incident & Problem Management​


• Contribute to the improvement of the Group ISMS (Information Security Management System)​


• Adapt and implement security policies and strategies according to local regulations and specific security risks​


• Contribute to crisis management in case of major security incidents and threats​


• Maintain and manage contacts with regulators and oversight parties


• Contribute to the improvement of the Awareness and Training​ and promote Security awareness and training

Who Are We Looking For

We look for big thinkers. People who can drive positive change, step up and show what’s next – people with passion, can-do attitude and a hunger to learn and grow. In practice this means:

Must have:

• 10+ years working in a Private or Public Cloud  infrastructure services environment  (e.g. in the areas of networks, virtualisation, infra-as-code, database, identity and access)    


• 3+ years of that in a security role (e.g.  Information Security Officer)


• Good understanding of infrastructure security concepts and their practical implementation


• Ability to work efficiently with minimal oversight/direction remotely and adjusting to changing priorities


• Proactive approach to learn new concepts,  improve security processes and raising security awareness


• Good communications skills and strong knowledge of spoken and written English  

Nice to have:

• Security certification  (e.g. ISO27001, CISSP, Public Cloud vendor specific for GCP or AWS)


• Experience of using security tools (e.g Qualys)